Last updated: March 3, 2026

Story Department respects the confidentiality of your work and is committed to transparent data practices.

1. Data Controller

Story Department acts as the data controller for account information and as a data processor for screenplay content uploaded by users.

For privacy inquiries, contact: hello@storydep.com

2. Screenplay Content

Screenplays and related files uploaded to the platform are processed solely for the purpose of providing translation services.

We do not:

• Sell screenplay content
• Share screenplay content with third parties for marketing purposes
• Use screenplay content to train general purpose AI systems

3. Payments and Billing Data

Payments are processed through Stripe. Story Department does not store full card numbers, CVV, or full payment account credentials.

We store billing metadata required to operate the service, including transaction identifiers, payment status, amount, currency, and timestamps.

4. Data Retention

Screenplay content is stored only for your account access and translation workflow. We do not access it beyond service delivery. If you delete your screenplay content, it is purged from our systems.

Account and billing information may be retained as required for operational, legal, security, fraud prevention, tax, and accounting purposes.

5. Legal Basis for Processing (GDPR)

Where applicable under the General Data Protection Regulation (GDPR), we process personal data on the basis of:

• Performance of a contract
• Legitimate business interests
• Compliance with legal obligations

6. Data Security

We implement appropriate technical and organizational measures to protect data against unauthorized access, disclosure, alteration, or destruction. This includes encryption in transit and access controls.

No system can guarantee absolute security. However, we apply industry standard safeguards.

7. Service Providers

We use vetted infrastructure and service providers to operate Story Department, including payment processors, hosting providers, and transactional email providers.

Providers process data only under contractual controls and only to provide their respective service functions.

8. International Transfers

Where data is processed outside your jurisdiction, appropriate safeguards are implemented in accordance with applicable data protection laws.

9. Your Rights

Where applicable, you may have the right to:

• Access your personal data
• Request correction
• Request deletion
• Restrict processing
• Object to processing
• Request data portability

To exercise these rights, contact: hello@storydep.com

10. Updates

We may update this Privacy Policy periodically. Continued use of the platform constitutes acceptance of the updated policy.