Privacy Policy

Last updated: July 23, 2026

This policy explains what RJStory collects, why, and who processes it. We keep data to what the Service needs and do not sell it.

What we collect

• Account and sign-in: your email address and an authentication session, managed by our authentication provider. Sign-in uses a one-time email link or your Google or Apple account.
• Credits and billing: your credit balance and a ledger of grants, reservations, and charges. Credit purchases are processed by our payment processor (the merchant of record), which handles your card details; we receive a confirmation and the amount, not your full card data.
• Jobs: the render jobs you submit - their settings, status, cost, and outcome.
• Your submitted content: the text, uploaded PDF text, linked-page content, X-post text, topics, ad briefs, and any optional reference image (uploaded directly or selected from your PDF - stored only as a normalized, metadata-stripped copy and deleted with the job) you provide as source material.
• Generated artifacts: the keyframes, audio, subtitles, and MP4 produced for your job, kept as bounded job artifacts while the video is produced and made available to you.

How we use it

To authenticate you, meter and charge credits, run your renders, deliver and let you re-watch your videos, prevent abuse, and operate and improve the Service.

Processors and third parties

We use a small set of third-party service providers to run RJStory:

• Authentication provider - sign-in and session verification.
• Payment processor - payment processing (merchant of record).
• AI and video generation providers - your source content and derived prompts are sent to the providers that generate the story, images, video, and narration in order to produce your reel.
• Hosting and infrastructure providers - run the service and store bounded job artifacts.

We do not sell your personal data or your submitted content, and we do not use your private content to advertise to you.

Analytics

We use Vercel Web Analytics to understand aggregate site usage. It collects anonymous, aggregated data - page views, referrers, device and browser type, and approximate location derived from the request - without third-party cookies and without tracking you across sites. We do not send it custom events or personal data. Vercel, our hosting provider, acts as the analytics processor for this data.

Retention and deletion

Job artifacts are bounded and retained to deliver and let you access your video; ledger and account records are kept as needed to operate billing and meet legal obligations. To request access to or deletion of your data, contact info@rjstory.io. Deleting your account removes your login; some billing records may be retained where the law requires.

Security

Sessions are verified server-side, media links are job-scoped and time-limited, and we do not expose access credentials or session tokens in page URLs. No system is perfectly secure; use a current browser and keep your sign-in link private.

Contact

Privacy questions or data requests: info@rjstory.io.