Privacy Policy
Last updated: August 2026
1. Controller
Antonia Pok, CartoonStory AI, [Address], Email: pok.antonia@outlook.de. Contact details can be found in the imprint.
2. What data we process
- Account data: Email address, display name, registration time.
- Project data: Title, idea text, generated stories, images, voice recordings, music, and finished videos.
- Usage data: Plan, credit consumption, job status, and error messages.
- Payment data: Subscription status, invoices, and customer number with the payment service provider. We do not receive card data.
3. Purposes and Legal Basis
Processing is carried out for the fulfillment of the user agreement (Art. 6 para. 1 lit. b GDPR), to fulfill legal obligations such as retention periods (lit. c), and based on our legitimate interest in secure, abuse-free operation (lit. f).
4. Recipients and Processors
- Hosting and database for account, projects, and media files.
- Stripe Payments Europe for payment processing, invoices, and subscription management.
- AI services for text, image, video, and voice generation. Only inputs from your project necessary for generation are transmitted.
Transfer to third countries only occurs based on EU standard contractual clauses or an adequacy decision.
5. Storage Duration
We store project data as long as your account exists. After your account is deleted, projects and media files are removed; invoice data is retained according to legal periods of up to ten years.
6. Your Rights
You have the right to information, rectification, erasure, restriction of processing, data portability, and objection, as well as the right to lodge a complaint with a supervisory authority. Please direct inquiries to the email address mentioned above.
6a. Reach Measurement, Newsletter and Recommendations
- Reach measurement: Only with your consent via the cookie banner do we store anonymized page views (path, referrer, campaign source, and a random identifier without personal reference). You can revoke consent at any time in the footer (Art. 6 para. 1 lit. a GDPR).
- Newsletter: If you enter your email address, we process it for sending product information. Unsubscription is possible at any time (lit. a).
- Referral program: When you redeem an invitation code, we store the link between the inviting and invited account, and the credited amount (lit. b).
- Public Cartoons: If you activate sharing, the title, description, thumbnail, and video are accessible via a public link until you deactivate sharing again.
7. Cookies
We only use technically necessary cookies and local storage to maintain your login. We do not use tracking or advertising cookies.
8. Children
The service is for adults who create content for children. A separate account for children under 16 is not provided.