Privacy Policy
This Privacy Policy explains what information FlyStory collects when you turn ideas into short-form videos, how we use it, and the choices you have. It also details how FlyStory accesses, uses, stores, shares, protects, and deletes Google user data when you sign in with Google.
1. Scope
This policy applies to the FlyStory web application and related services. It does not cover third-party websites or tools we link to, which have their own policies. Use of FlyStory is also governed by our Terms of Service and AI Output and Results Disclaimer.
2. Information We Collect
Account information
When you register or sign in with Google, FlyStory accesses Google user data from your Google Account through Google Identity Services (Sign in with Google). The Google user data we access is: your name, email address, Google user identifier (the “sub” ID), email verification status, and profile photo URL if one is available. We use that information to create and authenticate your FlyStory account. We do not store your Google password, and we do not access Gmail, Google Drive, Google Calendar, YouTube, Contacts, or any other Google user content through this sign-in. See Section 6 for the full Google user data disclosure.
Content you create
We process the ideas, prompts, scripts, scenes, uploaded media, source videos you choose to clip, and generated videos that make up your projects.
Usage & credits data
We record which AI actions you run (such as script, image, voice, and export generation), credit balances and transactions, plan and subscription status, and basic activity needed to operate the workspace.
Technical data
Like most apps, we collect device and browser information, IP address, and log data for security, debugging, and abuse prevention. Your language preference is stored locally in your browser.
3. How We Use Information
- Provide the Service: generate scripts, scenes, images, voiceovers, and exports from your inputs.
- Manage your account, credits, plan, and billing.
- Maintain security, prevent fraud and abuse, and enforce our Terms.
- Operate and improve features, fix bugs, and understand aggregate usage.
- Communicate with you about your account, updates, and support.
We do not sell your personal information, and we do not use the content of your private projects to train our own foundation models.
4. Legal Basis for Processing (GDPR)
If you are in the EU/EEA or UK, we process your personal data on one or more of these legal bases:
- Performance of a contract, to provide the Service you signed up for.
- Legitimate interests, to secure, operate, and improve the Service and prevent abuse.
- Consent, where you have given it, such as for optional marketing communications.
- Legal obligation, to comply with applicable laws, such as keeping billing records.
5. AI Processing & Subprocessors
To deliver AI features, we share the inputs needed for each request with trusted providers that process data on our behalf:
- AI model providers, for AI text and script generation.
- AI image and media processing providers, for visuals and media.
- AI voice (text-to-speech) providers, for voiceovers.
- Google, for sign-in (OAuth) authentication.
- Cloud hosting and storage providers, to run the app and store your projects and exports.
We only send what is necessary to fulfil your request (for example, a prompt or a piece of text to voice). Each provider processes that data under its own terms and privacy commitments.
6. Google API Services & Limited Use
This section is the dedicated disclosure of how FlyStory (the web application at flystory.io, operated as FlyStory) accesses, uses, stores, shares, protects, and deletes Google user data. FlyStory is an AI short-form video generator. Google Sign-In is used only so you can create and access your FlyStory account. FlyStory’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data we access
When you choose Sign in with Google, you authorize Google to send FlyStory an ID token. From that token we access and process the following Google user data:
- Name, to display on your FlyStory account and workspace.
- Email address, to identify your account, send service emails (security, billing, and support), and recover access.
- Google user identifier (sub), stored as your FlyStory google_id so we can sign you in again without creating a duplicate account.
- Email verification status, so we know the Google email is verified.
- Profile photo URL, if Google provides one, used as your default FlyStory avatar. We only store a Google-hosted image URL from googleusercontent.com; we do not scrape other Google content.
We do not access, collect, or store: your Google password; Gmail messages; Google Drive files; Google Calendar events; YouTube watch history or channel data; Google Contacts; payment methods stored at Google; or any other Google user content. This Google OAuth client requests only the basic Sign in with Google profile scopes (openid, email, and profile). We do not request sensitive or restricted Google API scopes, and we do not use Google Workspace APIs.
How we use Google user data
We use Google user data only to provide and improve FlyStory’s user-facing sign-in and account features:
- Create your FlyStory account if you do not already have one.
- Authenticate you on later visits and keep your session secure.
- Show your name and avatar in the app.
- Send necessary service messages to your email (for example account, security, billing, and support).
- Prevent fraud, duplicate accounts, and unauthorized access.
We will not use Google user data for reasons other than providing or improving FlyStory’s functionality. We do not use Google user data for targeted advertising, personalized advertisements, retargeted advertisements, interest-based advertisements, user advertisements, selling to data brokers, providing to information resellers, determining credit-worthiness, lending purposes, creating unrelated databases, or training non-personalized AI or machine-learning models.
Sharing, transfer, and disclosure of Google user data
We do not sell Google user data. We do not transfer or disclose Google user data to third parties for advertising, data brokerage, information resale, credit, lending, or training generalized AI or ML models. We share Google user data only in these limited cases needed to operate FlyStory:
- Cloud hosting and storage providers that run the FlyStory application and database, under contract and only to store your account record (name, email, google_id, avatar URL).
- Email delivery providers, when we send a service email to the Google email address on your account.
- When required by law, legal process, or to protect rights, safety, and the integrity of the Service.
- In a merger, acquisition, or asset sale, in which case we will notify you of any change in control of your data.
We do not send Google user data (your Google name, email, google_id, or profile photo) to AI model, image, video, or voice providers. Those providers receive only the prompts and media you create inside FlyStory, which are not Google user data.
How we protect Google user data
Security procedures are in place to protect the confidentiality of Google user data. We use encryption in transit (HTTPS/TLS) to protect your information between your browser, Google, and FlyStory. We verify Google ID tokens (audience, issuer, and expiry) before creating a session. Access to account records is restricted to systems and personnel who need it to operate the Service. We do not store Google passwords, Google refresh tokens, or raw Google ID tokens after sign-in is complete.
Retention and deletion of Google user data
We retain Google user data (name, email, google_id, and profile photo URL) for as long as your FlyStory account is active, which is the period needed to fulfill the sign-in and account purposes in this policy, unless a longer retention period is required or permitted by law (for example billing records). When the data retention period expires for a given type of data, we will delete or destroy it. When you delete your account, or you request deletion by emailing admin@flystory.io, we delete the associated Google user data from your account record within a reasonable period, except limited legal, security, or accounting records we must keep.
You may request that your data be deleted by emailing admin@flystory.io. You can also review or revoke FlyStory’s access to your Google Account at any time at https://myaccount.google.com/permissions. Revoking access stops future Google Sign-In until you sign in with Google again; it does not automatically erase the FlyStory account we already created. Email us to delete that account.
Limited Use; no advertising; no AI/ML training on Google user data
FlyStory limits use of Google user data to providing or improving user-facing features of the application, as described above. FlyStory does not use Google Workspace APIs to develop, improve, or train non-personalized AI and/or ML models. FlyStory does not use Google user data to develop, improve, or train non-personalized AI and/or ML models. Google user data is not used for targeted advertising, selling to data brokers, providing to information resellers, determining credit-worthiness, lending, user advertisements, personalized advertisements, retargeted advertisements, interest-based advertisements, or creating databases unrelated to providing FlyStory.
7. Uploaded Video Processing
If you use auto video clipping, we process the source files you upload to analyze moments, generate clips, and store results in your account. We retain uploaded source files only as long as needed to complete extraction and related operations.
10. Payments
When paid billing is enabled, payments are handled by third-party payment processors. We do not store your full card details. That information is provided directly to the processor, whose handling of your data is governed by its own privacy policy and PCI-DSS security standards. We retain billing records (such as plan, amount, and date) for accounting and legal purposes.
11. Email & Marketing
We may send you service and account emails (such as security or billing notices) that are necessary to operate the Service. If we send optional product or marketing emails, you can opt out at any time using the unsubscribe link or by contacting us.
12. Data Retention
We store your personal information, including Google user data used for sign-in, for a period of time that is consistent with our business purposes: as long as your account is active, and as needed to fulfill the purposes in this policy, unless a longer retention period is required or permitted by law. When you delete a project or your account, we remove the associated content within a reasonable period, except where we must retain limited records for legal, security, or accounting reasons (for example, billing history). When the data retention period expires for a given type of data, we will delete or destroy it. You may request for your data to be deleted by emailing admin@flystory.io.
13. Security & Breach Notification
Security procedures are in place to protect the confidentiality of your data, including Google user data. We use encryption (HTTPS/TLS) to protect your information in transit, plus access controls and secure authentication. We restrict access to staff and providers who need it. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.
If a data breach affects your personal data, we will notify you and the relevant authorities where we are legally required to do so.
14. Your Rights & Choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on it.
- Access and edit core account details in your profile.
- Delete projects directly in the app.
- Request access, correction, portability, restriction, or deletion of your data by contacting admin@flystory.io.
- Withdraw consent for optional processing (such as marketing) at any time.
We will respond to verified requests within the timeframe required by applicable law.
15. California Privacy Rights (CCPA)
If you are a California resident, you have the right to know what personal information we collect and why, to request access to or deletion of that information, and not to be discriminated against for exercising these rights.
We do not sell your personal information. To exercise your rights, contact us at admin@flystory.io.
16. Children’s Privacy
FlyStory is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
17. International Transfers
Your data may be processed in countries other than your own, including where our providers operate. Where required, we use appropriate safeguards for such transfers.
18. Changes to This Policy
We may update this Privacy Policy as our practices or the Service change. We will update the “last updated” date and, for material changes, notify you in the app.
19. Contact
For privacy questions or to exercise your rights, email us at admin@flystory.io.