Privacy Policy

1. Information we use

If you choose Google sign-in, we receive your Google account identifier, name, profile image, email address, and verification status to authenticate you. We use account and sign-in details, account-use permission declarations, support messages, payment and subscription records, Instagram account and story data, and Telegram connection details to provide the service. We process IP addresses, browser details, usage data, and masked session replays for security and service improvement. Paddle handles new payments; we do not receive full card details. Earlier providers may retain records for their purchases.

2. Sharing and processing

Providers handle hosting, storage, email, analytics, and payments. Data may be processed outside Korea, including in the United States. Instagram and Telegram handle connected features under their own policies. We may disclose information as required by law. We do not sell personal information or use it for cross-context behavioral advertising.

3. Overseas transfers

Personal information is transferred outside Korea over encrypted network connections, at the time you use the related feature. Each recipient’s privacy contact is listed in the policy linked below.

Processors (we entrust processing to them to provide the service). They keep data only while we use their service or as set out in Section 4, then delete it under their own retention rules.

• Vercel Inc. (United States; processed in Singapore and on Vercel’s global network): all data exchanged with the website, request logs including IP address and browser details. Purpose: hosting and running the service.
• Databricks, Inc. and Neon, LLC (Neon; United States; database in Singapore): account and sign-in details, orders, subscription and payment records, Instagram usernames and story data, Telegram connection details, support messages, and logs. Purpose: storing service data.
• Cloudflare, Inc. (United States; global network): Instagram usernames and public story data being checked. Purpose: collecting new stories.
• Plus Five Five, Inc. (Resend; United States): email address and email content, stored in the United States and sent through Amazon Web Services in Japan. Purpose: sign-in codes, account and billing emails.
• Zoho Corporation (Zoho Mail; United States): email address and support correspondence. Purpose: answering support requests.
• PostHog, Inc. (United States) and Microsoft Corporation (Clarity; United States), optional: pseudonymous usage events and masked session replays. Purpose: improving the service.

Independent recipients (they decide how to use the data under their own policies and retention rules). Paddle.com Market Limited (United Kingdom) is the merchant of record: when you open checkout, you ask us to pass Paddle your email address, country, and the plan you chose; payment details you enter at checkout go directly to Paddle. Purpose: payments, taxes, receipts, refunds, and subscription management. Telegram Messenger Inc. and its affiliates receive, at your request, the stories and messages we deliver to the chat you connect. Purpose: delivery to your Telegram chat. You can refuse these transfers by not using the related feature or by deleting your account; hosting, storage, email, payment, and delivery are required to provide the service. Optional analytics can be turned off in Analytics preferences without affecting the service.

Vercel Privacy PolicyDatabricks (Neon) Privacy NoticeCloudflare Privacy PolicyResend Privacy PolicyZoho Privacy PolicyPaddle Privacy NoticeTelegram Privacy PolicyPostHog Privacy Policy

4. Retention and deletion

We retain data for service delivery and legal obligations, then delete it or restrict use. Account deletion removes sign-in credentials and ends linked services. For support, a read-only record of your email, product and payment history, connection changes, activity history, and support notes is retained for 30 days, then deleted. Operational logs are retained for 30 days. Under Korean e-commerce law, records of contracts and withdrawals (orders, subscriptions and their service periods, cancellations, refunds, and free-trial conversion consents with their time, wording version, and price) and of payments and supply are retained for 5 years; complaint and dispute records for 3 years; and advertising records for 6 months. These records are kept after account deletion for those periods, used only for those obligations, and then deleted.

Shared content, support correspondence, analytics, and backups follow their applicable retention periods. Contact us to request deletion. Account deletion does not remove copies delivered to Telegram.

5. Cookies and analytics

Cookies and browser storage support sign-in, preferences, and analytics. Usage analytics and masked session replay may link visits to a pseudonymous account identifier. In the European Economic Area, the United Kingdom, and Switzerland they stay off until you allow them; elsewhere they are enabled by default. Change your choice at any time through Analytics preferences in the footer. We respect supported Do Not Track and Global Privacy Control signals. Blocking essential storage may prevent sign-in.

We use Microsoft Clarity to collect website interaction data, including clicks and scrolling, for heatmaps and masked session replays to improve the service. Microsoft processes this data using cookies and similar technologies according to your consent settings. You can disable analytics in Analytics preferences.

Microsoft Privacy Statement

6. Your rights and contact

Email support@storyautosave.com for access, correction, deletion, or restriction requests. Where applicable, you may withdraw consent, object to processing, request a portable copy, or complain to a privacy authority. We may verify identity and respond within legal deadlines. These rights also apply to people appearing in collected content.

We use access controls, protected connections, and hashed passwords. No system is completely secure. We notify you of material policy changes as required by law; the effective date appears above.

7. Privacy officer and remedies

Privacy officer: LEE KANGHYEON. Email support@storyautosave.com, telephone +82 10 5904 6598. Contact the privacy officer for any privacy question, complaint, or request; we respond without delay.

If you need further help, you can contact the Personal Information Dispute Mediation Committee (www.kopico.go.kr, +82 1833-6972), the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 in Korea), the Supreme Prosecutors’ Office (www.spo.go.kr, 1301 in Korea), or the Korean National Police Agency Cyber Bureau (ecrm.police.go.kr, 182 in Korea).