Privacy Policy

1. Information We Collect

When you create an account or use StoryStacked, we may collect the following information:

• Account information: your email address, name, and role (media or brand).
• Profile information: for media — publication name, platform, audience size, bio, work samples, and profile photo. For brands — company name, website, contact name, vertical, and budget range.
• Payment information: processed securely through Stripe. We do not store credit card numbers on our servers. Stripe collects and processes payment data in accordance with their own privacy policy.
• Usage data: pages visited, features used, and interactions with the platform to improve the service.
• Communications: messages exchanged through the platform, including briefs and placement details.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the StoryStacked platform.
• Create and display public creator profiles and profiles.
• Facilitate connections between media and brands.
• Process payments and transfers between parties.
• Send transactional emails (account verification, placement updates, payment notifications).
• Verify content delivery and publication.
• Respond to support requests and communications.
• Detect and prevent fraud or abuse.

3. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

• Public profiles: creator names, bios, audience sizes, content menus, and pricing are displayed publicly to facilitate marketplace discovery.
• Between parties: when a brand submits a brief to a creator, relevant contact and brief information is shared between the two parties.
• Service providers: we use third-party services including Stripe (payments), Resend (email), and Vercel (hosting) that process data on our behalf.
• Legal requirements: we may disclose information if required by law, subpoena, or legal process.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS), secure authentication (email OTP), and access controls. Payment processing is handled entirely by Stripe, a PCI-DSS compliant payment processor.

5. Data Retention

We retain your account information for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required for legal, tax, or compliance purposes. Anonymized usage data may be retained indefinitely for analytics.

6. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and personal data.
• Export your data in a portable format.
• Opt out of non-essential communications.

To exercise any of these rights, contact us at the email address listed below.

7. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We use Google Analytics to understand how the platform is used. You can disable analytics cookies through your browser settings.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this privacy policy or your personal data, contact us at [email protected].