Privacy Policy
How StoryFlex handles account, upload, generation, billing, and analytics data
Overview
StoryFlex is designed for short-lived image-to-image generation. We collect only the information needed to operate accounts, payments, safety checks, uploads, generation status, downloads, support, and product analytics.
Information We Process
We may process account identifiers, email address, OAuth profile information, subscription and payment status, low-sensitivity generation metadata, prompt safety metadata, upload metadata such as file type and size, and support communications. We do not intentionally store raw prompts, final prompts, R2 signed URLs, Kie input upload URLs, Kie result URLs in client-visible payloads, or image content in analytics.
Cookies and Browser Storage
StoryFlex uses cookies and similar browser storage to keep the website working, remember language preferences, support authentication, protect short-lived generation recovery, and understand product usage. Essential cookies support sign-in sessions, locale preferences, security, and short-lived generation or locked-result recovery. Some cookies may be HttpOnly and signed so they cannot be read by client-side scripts.
StoryFlex may use signed cookies to associate a browser with an anonymous preview or locked-result claim. These values are random tokens, not image content, prompts, email addresses, or payment data. You can clear or block cookies in your browser settings, but blocking essential cookies may prevent sign-in, payment return handling, generation recovery, or language routing from working correctly.
Temporary Input Staging
User input images are uploaded directly to a private Cloudflare R2 staging bucket through short-lived signed URLs. R2 is used only to stage input images before generation and is not a permanent gallery, generated-result store, or history feature. Object keys are random and should not contain names, prompts, emails, or file names.
Generated Results
StoryFlex does not promise long-term retention of generated results. Results depend on temporary provider URLs and may expire. You should download unlocked results immediately.
Third-Party Services
We use service providers for authentication, email delivery, payment processing, temporary storage, AI generation, prompt moderation, analytics, and hosting. These providers process data only as needed for their services. StoryFlex may use Google Analytics and Microsoft Clarity in production to understand usage and improve conversion and reliability.
Analytics must not store prompts, image content, provider URLs, R2 signed URLs, or signed result URLs.
Your Responsibilities
You are responsible for having the rights, consent, or lawful basis needed to upload images and use another person’s likeness. Do not upload or generate content that violates law, privacy, or the acceptable-use rules in our Terms.
Contact
Privacy questions can be sent to support@storyflex.online.