Introduction
This Privacy Policy (the "Policy") describes how STORYTELLING ("Storytelling", "I", or "me") collects, uses, stores, shares, and protects Personal Data when you visit mystorytelling.io, contact me, request a demonstration, interact with my websites, applications, products, or services, or otherwise communicate with me (collectively, the "Services").
STORYTELLING develops software, artificial intelligence solutions, websites, applications, automation systems, and related digital technologies for individuals, businesses, educational organizations, and other customers.
As used in this Policy, "Personal Data" or "Personal Information" means any information that identifies, relates to, describes, or can reasonably be linked to an identifiable individual, directly or indirectly.
This Policy explains what information I collect, how I use it, when I may share it, how I protect it, and the rights that may be available to you under applicable privacy laws.
By accessing or using the Services, you acknowledge that you have read and understood this Policy.
Who Operates the Website?
The website is operated by STORYTELLING, which is the controller of the personal data collected through it and is responsible for determining the purposes and means of its processing.
For privacy questions or requests, contact:
You may also use the Website’s contact form and state in your message that the inquiry concerns privacy.
What the Website Does
The Website is a corporate information website presenting STORYTELLING, its activities, services, and ways to make a business inquiry or request a demo.
You may browse without creating an account, registering, or providing identifying details.
Information You Provide
The contact and demo request form may collect the following information:
- Full name.
- Email address.
- Company or organization name, when provided.
- Type of inquiry, such as Contact or Demo.
- The message you choose to write.
The form does not accept file, image, or document uploads. Providing information is voluntary and is not legally required, but the required fields are needed to submit and handle the request.
Do not submit passwords, payment details, government identifiers, medical or biometric information, or other sensitive information that is not needed for your inquiry. Do not provide another person’s personal data unless you are authorized to do so.
Technical Information
When a browser requests a page, the web server necessarily receives limited connection information such as the IP address, requested URL, date and time, and basic browser or connection details. The exact production logging configuration depends on the hosting environment.
The Website application uses the remote IP address to create a one-way hash for a short, cache-backed form rate limit. It does not use the IP address to select a country version, force a redirect, build a marketing profile, or determine the quality of a business lead.
The Website does not currently use Analytics tools, advertising pixels, advertising cookies, session-replay tools, cross-site behavioral tracking, or targeted advertising.
How I Use Personal Data
Personal data may be used to:
- Display, operate, maintain, and secure the Website.
- Receive, store, review, and respond to contact and demo inquiries.
- Coordinate requested follow-up communications or pre-contractual discussions.
- Record the status, source, and time of an inquiry.
- Attempt to send an inquiry notification to the configured STORYTELLING recipient after the inquiry has been saved.
- Remember privacy and, with permission, functional or accessibility preferences.
- Prevent misuse, enforce form-rate limits, diagnose faults, and protect legal rights.
- Comply with applicable legal obligations and respond to lawful requests.
The Website does not use inquiry or browsing information for automated lead scoring, behavioral advertising, or decisions that produce legal or similarly significant effects.
Legal Bases for EU, EEA, and UK Users
Where the EU GDPR, UK GDPR, or comparable European data protection law applies, STORYTELLING relies on the legal basis appropriate to the particular purpose and circumstances. The bases relevant to the current Website are summarized below.
| Processing purpose | Relevant legal basis |
|---|---|
| Responding to an inquiry or demo request and taking requested pre-contractual steps | Steps taken at your request before entering into a contract and, where appropriate, STORYTELLING’s legitimate interest in responding to business inquiries |
| Operating, protecting, and troubleshooting the Website and preventing misuse | STORYTELLING’s legitimate interests in providing a secure and reliable corporate website and, where applicable, compliance with a legal obligation |
| Remembering optional site, theme, and accessibility preferences | Your consent, given through the cookie and storage preference center |
| Sending messages to an optional AI provider to generate a response | Your consent, given by selecting Allow all in the cookie and storage preference center |
| Complying with law and establishing, exercising, or defending legal claims | Compliance with a legal obligation or STORYTELLING’s legitimate interests in protecting legal rights |
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before the withdrawal. Where processing is based on legitimate interests, STORYTELLING considers the Website’s operational or legal need together with the individual’s interests, rights, and reasonable expectations.
These legal bases are described only for processing to which the relevant law applies. Their inclusion does not mean that every named law applies to every visitor or interaction.
Language, Site, Theme, and Accessibility Preferences
The Website may read the browser’s language setting to offer a non-forced suggestion for another site version. The visitor decides whether to follow that suggestion.
The Website does not use the IP address to infer the visitor’s country or force a country or language version.
A selected site version, a dismissed suggestion, an explicit theme, and accessibility settings are stored for up to 12 months only when functional storage has been allowed. Without that permission, the controls still work for the current page but are not saved for a later visit.
Form Privacy Acknowledgment
Before submitting the contact or demo form, you must confirm that you agree to STORYTELLING’s Terms of Use and Privacy Policy.
This acknowledgment applies to the handling of the submitted inquiry. It does not authorize marketing communications or subscribe you to a mailing list.
Service Providers and Other Disclosures
Depending on the production configuration, personal data may be processed by providers used for hosting, cloud infrastructure, databases, email delivery, security, maintenance, or backups, but only to the extent those services are actually configured and needed to operate the Website or handle an inquiry.
STORYTELLING may also disclose information where reasonably necessary to comply with applicable law, respond to a lawful request, investigate misuse, or establish, exercise, or defend legal claims.
STORYTELLING does not sell personal information and does not disclose it to third parties for their independent targeted advertising.
The providers and processing locations relevant to a particular inquiry depend on the services actually configured for the production Website. You may request available information by contacting the privacy address.
International Users and Cross-Border Processing
Because STORYTELLING operates from Israel, personal data that you submit through the Website may be transferred to and processed in Israel. Visitors outside Israel should understand that Israel’s privacy laws and government-access rules may differ from those in their home country.
Depending on the hosting, email, database, or infrastructure services configured for production, personal data may also be processed in other countries where those services operate.
Where applicable law restricts a particular international transfer, that transfer must be supported by a mechanism available under that law. Depending on the destination and provider, this may include an applicable adequacy decision, approved standard contractual safeguards or addendum, or a permitted exception. The relevant mechanism depends on the actual transfer.
You may ask for available information about the location and basis of processing relevant to your inquiry by contacting [email protected].
Data Retention
The current Website application does not enforce a fixed automatic retention period for inquiry records. Records are retained according to their nature and status and the purposes described below.
When determining whether information should continue to be retained, relevant considerations include the purpose of the inquiry, any continuing business relationship, the need to respond or maintain a communication record, security, legal obligations, and the establishment or defense of legal claims.
Browser preferences expire as described in the Cookies and Local Storage section. The form rate-limit cache uses a short deployment-configurable window, which defaults to five minutes.
If production backups contain personal data, their retention and deletion depend on the backup lifecycle configured for the production environment. No fixed backup period is stated here.
Information Security
The Website includes application-level measures such as CSRF protection, a hidden anti-spam field, a cache-backed submission rate limit, host validation, authenticated administration, and secure-cookie settings when production mode is configured.
Production security also depends on the hosting environment, access permissions, credentials, software updates, email configuration, network controls, and provider practices.
No website or transmission method can guarantee absolute security. Do not send unnecessary sensitive information through the free-text form.
Regional Privacy Rights
Privacy rights vary according to the law that applies to you and to the relevant processing. The regional information below is grouped in one place for clarity and is subject to the conditions and exceptions of applicable law.
EU, EEA, and United Kingdom
Where the EU GDPR or UK GDPR applies, and subject to its conditions and exceptions, you may have the right to:
- Access personal data and receive information about its processing.
- Correct inaccurate or incomplete personal data.
- Request deletion of personal data.
- Request restriction of processing.
- Object to processing based on legitimate interests and object to direct marketing.
- Receive personal data in a structured, commonly used, machine-readable format and request portability where the legal conditions are met.
- Withdraw consent at any time where processing relies on consent.
- Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, subject to applicable exceptions.
To exercise a European or UK privacy right, contact [email protected]
You also have the right to lodge a complaint with a data protection authority in the EU or EEA country connected with your residence, work, or the alleged infringement. UK users may contact the UK Information Commissioner’s Office. You may contact STORYTELLING first, but doing so does not prevent a complaint to an authority.
Israel
Depending on applicable law and the circumstances, you may ask whether STORYTELLING holds personal data about you, request access to it, or request correction of data that is inaccurate, incomplete, unclear, or not up to date.
You may also request deletion or restriction where applicable, or withdraw consent where the processing relies on consent. Israeli privacy law may provide rights of inspection and correction in relevant circumstances.
To submit an Israeli privacy request, contact [email protected]
STORYTELLING may request information reasonably necessary to verify the requester’s identity and protect another person’s data. Rights may be limited by lawful exceptions, including legal obligations, security, fraud prevention, the rights of others, and legal claims.
United States
United States privacy rights vary by state. Where a state consumer privacy law applies to STORYTELLING and to your request, you may have the right to:
- Confirm whether personal information is processed and request access to it.
- Request a portable copy where required.
- Request deletion of personal information, subject to exceptions.
- Request correction of inaccurate personal information.
- Opt out of the sale of personal information.
- Opt out of sharing or processing for targeted advertising.
- Opt out of qualifying profiling or automated decisions.
- Use an authorized agent or appeal a denied request where the applicable law provides those rights.
- Exercise a privacy right without unlawful discrimination.
STORYTELLING does not currently sell personal information, share it for targeted advertising, use targeted advertising, or conduct qualifying profiling or automated decisions. An opt-out request is therefore not needed to stop an activity that the Website does not perform, but you may still contact STORYTELLING with a request.
Submit a United States privacy request to [email protected]
California
This section applies to California residents only to the extent the California Consumer Privacy Act, as amended, applies to STORYTELLING and the relevant processing.
Through the current Website, the categories of personal information that may be collected are identifiers and contact information; professional or organization information; internet or electronic activity needed to operate and secure the Website; and the content and type of a contact or demo request. The information comes directly from you or is generated through the technical operation of the Website.
STORYTELLING does not sell personal information. STORYTELLING does not share personal information for cross-context behavioral advertising. The Website does not use targeted advertising or advertising pixels.
STORYTELLING does not knowingly collect personal information through the Website from children under 16. The Website is not directed to children.
Where California law applies, California residents may have rights to know or access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive non-discriminatory treatment for exercising a right, subject to legal conditions and exceptions.
Because the Website does not sell or share personal information for cross-context behavioral advertising, it does not currently display a “Do Not Sell or Share My Personal Information” link. If those practices change, the notice and applicable opt-out controls will be provided as required by law.
California privacy requests may be sent to [email protected]
Children
The Website is intended for a general business audience and is not directed to children. STORYTELLING does not knowingly seek or collect personal data through the Website from children under 16.
If you believe a child has provided personal data through the Website, contact STORYTELLING so the information can be reviewed and appropriate action taken under applicable law.
Contact: [email protected]
External Links
The Website may contain links that take you to another domain or service. A visit to an external service begins only after you choose the relevant link.
The current Website does not embed social-media feeds or load social-media tracking components merely because a page is displayed.
Once you visit another service, its privacy policy and terms govern its processing. STORYTELLING is not responsible for the privacy practices of an independent external service.
Privacy When Using AI Tools
The Website may provide an optional AI demonstration that simulates an assistant connected to an organization. The organizational figures shown in that demonstration are randomly generated, fictional, and not drawn from STORYTELLING, a visitor, or a real organization.
The AI demonstration is disabled unless you select Allow all in the cookie and storage preference center. That choice creates the storytelling_ai_consent cookie for up to 12 months. Selecting essential components only removes the cookie and disables the AI tool.
When you submit a message, the message, up to eight recent conversation messages, and the fictional demo snapshot are sent to Groq, an external AI inference provider, solely to generate the response. STORYTELLING does not save the chat messages to its Website database; the visible chat history remains in browser memory until the page is reloaded or closed.
To enforce the limit of three questions per 24 hours, the Website temporarily keeps a one-way hash derived from the network address and a request counter in server cache for up to 24 hours. The counter does not contain the questions or AI responses.
According to Groq’s current data documentation, inference inputs and outputs are not retained by default, but they may be logged temporarily for platform reliability or suspected-abuse investigations for up to 30 days unless applicable zero-data-retention controls are enabled. Usage metadata is retained separately, and provider processing may occur in the United States. Provider practices may change and remain subject to Groq’s applicable terms, data controls, and policies.
Do not submit passwords, authentication details, trade secrets, confidential organizational data, or sensitive personal, medical, financial, or legal information through the demonstration.
Changes to This Policy
STORYTELLING may update this Policy when the Website’s features, processing practices, or applicable legal requirements change. The revision date appears at the top of the page.
A material change will be described through an appropriate Website notice or other communication where the circumstances and applicable law require it. This Policy does not promise an individual email notice for every update.
Contact Me
For a privacy question, rights request, correction or deletion request, objection, consent withdrawal, or inquiry about this Policy, contact:
STORYTELLING
Privacy email: [email protected]
You may also use the Website’s contact form and write “Privacy” in the message.
Additional contact: