Privacy Policy

PLOTPOINT Creative Media, LLC ("PLOTPOINT," "we," "us," or "our") operates the StoryHuddle platform, including the website located at StoryHuddle.com and any related applications, features, tools, or services (collectively, the "Service"). StoryHuddle™ is a trademark of PLOTPOINT Creative Media, LLC.

This Privacy Policy describes how we collect, use, disclose, and protect your information when you access or use our Service. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Information You Provide Directly

• Account Information: When you create an account, we collect credentials such as usernames, email addresses, access codes, or return codes used to identify and authenticate your account. If you create a password, it is cryptographically hashed before storage; we do not store or have access to your plaintext password.
• User Content: We collect the content you create through your use of the Service, including session transcripts, narrative interactions, text inputs, choices made during sessions, and any feedback or comments you submit.
• Communications: If you contact us directly, we collect the content of those communications, including any personal information you choose to include.

Information Collected Automatically

• Usage Data: We automatically collect information about your interactions with the Service, including session timestamps and duration, features accessed, interaction patterns, click behavior, and performance data.
• Device and Connection Information: We collect information such as your browser type and version, operating system, IP address, unique device identifiers, referring and exit URLs, and general geolocation data derived from your IP address (city or region level).
• Cookies and Similar Technologies: We use cookies, local storage, session storage, and similar technologies to maintain sessions, authenticate users, remember preferences, and analyze how the Service is used. See our Cookie Policy for details.
• Log Data: Our servers automatically record information when you access the Service, including your IP address, access times, pages viewed, and system activity.

2. Legal Basis for Processing

We process your information based on the following legal grounds:

• Performance of a contract: To provide the Service to you in accordance with our Terms of Service.
• Legitimate interests: To improve and develop the Service, ensure security, and prevent abuse, where these interests are not overridden by your rights.
• Consent: Where you have provided consent for specific processing activities.
• Legal obligations: To comply with applicable laws, regulations, or legal processes.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service
• Authenticate your account and maintain session continuity
• Analyze usage patterns to improve the quality of AI-generated content and overall user experience
• Conduct internal research and development
• Respond to your inquiries and provide support
• Detect, investigate, prevent, and address technical issues, fraud, or abuse of the Service
• Enforce our Terms of Service and other policies
• Comply with legal obligations and respond to lawful requests from public authorities
• Generate aggregate, de-identified, or anonymized data for analytical purposes

4. AI Processing and Third-Party AI Services

StoryHuddle uses artificial intelligence provided by third-party services (currently Anthropic) to generate interactive narrative content. When you use the Service:

• Your text inputs and choices are transmitted to our AI service provider for real-time content generation.
• Our AI service provider may retain input and output data for a limited period (typically up to 30 days) for trust, safety, and abuse prevention purposes, in accordance with their own data processing policies.
• We do not direct or authorize our AI service providers to use your personal interactions for the purpose of training general-purpose AI models. However, we cannot guarantee the specific data handling practices of third-party providers beyond the terms of our agreements with them.
• Session transcripts and interaction data may be reviewed internally by PLOTPOINT to improve the Service, debug issues, and evaluate content quality.

For more information about how our AI service provider processes data, please refer to Anthropic's privacy policy.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

• Service Providers: We use third-party services to host and operate the Service, including Railway (hosting infrastructure) and Anthropic (AI services). These providers access your data only as necessary to perform services on our behalf and are subject to their own privacy policies and applicable legal obligations.
• Aggregate or De-Identified Data: We may share aggregate, de-identified, or anonymized data that cannot reasonably be used to identify you. You acknowledge that aggregate, de-identified, and anonymized data derived from your use of the Service — including usage patterns, interaction analytics, narrative behavior data, and content performance metrics — constitutes PLOTPOINT's proprietary information and may be used by PLOTPOINT for any lawful business purpose, including research, development, and the improvement of PLOTPOINT's products and services.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change by posting notice on the Service.
• With Your Consent: We may share information for other purposes with your explicit consent.

6. Data Retention

We retain your account information and session data for as long as your account is active or as reasonably necessary to provide the Service. After account deletion or termination, we may retain certain data for a limited period as necessary to:

• Comply with legal, regulatory, or reporting obligations
• Resolve disputes and enforce our agreements
• Prevent fraud and abuse
• Maintain backups in accordance with standard business practices

We will respond to data deletion requests within 30 days. Certain data may be retained in anonymized or aggregate form indefinitely. For clarity, your right to request deletion of personal information does not extend to aggregate, de-identified, or anonymized data that does not identify you and constitutes PLOTPOINT's proprietary information, nor does it affect any licenses you have granted under our Terms of Service.

7. Data Security

We implement commercially reasonable technical, administrative, and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit, cryptographic hashing of passwords (we do not store passwords in plaintext), access controls, and regular security assessments. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. For information about our data breach notification practices, see Section 11 below.

8. Children's Privacy

The Service is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately at the address below.

9. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Request correction or update of inaccurate or incomplete information
• Request deletion of your personal information, subject to certain exceptions
• Object to or restrict certain processing of your information
• Request portability of your information in a structured, commonly used format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@storyhuddle.com. We will respond to your request within 30 days and may require verification of your identity before processing.

California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of personal information (we do not sell or share personal information as defined by the CCPA/CPRA)
• The right to correct inaccurate personal information
• The right to non-discrimination for exercising your privacy rights

To exercise your rights, contact us at privacy@storyhuddle.com.

Virginia, Colorado, Connecticut, Texas, Oregon, Montana, and Other U.S. State Residents

If you reside in a state with a comprehensive consumer privacy law — including but not limited to Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Tennessee (TIPA), Indiana (IDPA), Iowa (ICDPA), Delaware (DPDPA), New Hampshire (NHPA), New Jersey (NJDPA), Nebraska (NDPA), Minnesota (MNCDPA), and Maryland (MODPA) — you may have rights that include:

• The right to confirm whether we are processing your personal data and to access that data
• The right to correct inaccuracies in your personal data
• The right to delete your personal data
• The right to obtain a copy of your personal data in a portable and readily usable format
• The right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (we do not engage in any of these activities)

To exercise any of these rights, contact us at privacy@storyhuddle.com. We will verify your identity before processing your request and respond within the timeframe required by your state's applicable law (typically 45 days, with extensions where permitted). If we decline your request, you may have the right to appeal our decision by contacting us at the same address, and we will respond to your appeal within the time period required by applicable law.

Do Not Track

The Service does not currently respond to Do Not Track ("DNT") browser signals. There is no uniform standard for how to respond to DNT signals at this time.

10. International Users

The Service is operated from and hosted in the United States. If you access the Service from outside the United States, you acknowledge and consent to the transfer, processing, and storage of your information in the United States, where data protection laws may differ from those in your jurisdiction.

11. Data Breach Notification

In the event of a security breach that results in the unauthorized access, acquisition, or disclosure of your personal information, we will notify affected individuals and applicable regulatory authorities in accordance with the timelines and requirements of applicable federal and state data breach notification laws, including but not limited to the laws of North Carolina (N.C. Gen. Stat. § 75-65) and any other jurisdiction in which affected individuals reside. Notification may be provided by email to the address associated with your account, by posting on the Service, by mail, or by other means as required by applicable law. We will take commercially reasonable steps to investigate the breach, mitigate any harm, and prevent future breaches.

12. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of North Carolina, without regard to its conflict of law principles, and is subject to the dispute resolution provisions set forth in our Terms of Service.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last Updated" date and, where appropriate, providing additional notice through the Service. Your continued use of the Service after the revised policy is posted constitutes your acceptance of the changes.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

PLOTPOINT Creative Media, LLC
Email: privacy@storyhuddle.com