Privacy Policy (GDPR / LOPDGDD)
Comprehensive information regarding personal data processing and privacy protection under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data Controller
The data controller responsible for personal data collected through PlayAIStory is the platform operator. For any questions regarding privacy, personal data protection, or exercising your statutory GDPR rights, you may contact our Data Protection representative at: legal@playaistory.com. For general account questions and technical support: support@playaistory.com.
2. Purposes of Data Processing
Personal data is collected and processed strictly for the following legitimate purposes: • User account registration, session authentication, and access management. • Acquisition, allocation, and tracking of AI creation credit balances. • Provision of core services: story editing, interactive project persistence, and asset generation. • Customer support, incident troubleshooting, and user assistance via support@playaistory.com. • Compliance with applicable legal, accounting, and tax obligations.
3. Google API Services User Data Policy Compliance
When you choose to sign up or log in to PlayAIStory using your Google Account (Google OAuth), our platform accesses only standard, basic public profile details: • Full Name • Email Address • Profile Picture In strict compliance with the Google API Services User Data Policy, we expressly certify that: 1. Exclusive Use: This information is used solely to authenticate your identity, establish your session, and allow you to access your personal dashboard and creations. 2. No Transfer or Sale: We do not transfer, sell, trade, or distribute your Google user data to third parties, data brokers, or advertising networks. 3. No AI Model Training: Under no circumstances is your Google user data (name, email, or profile picture) used to feed, train, or tune general-purpose or third-party artificial intelligence models. 4. Revocation and Control: You may revoke PlayAIStory's access to your Google account at any time via Google Account Security Settings (https://myaccount.google.com/permissions) or by deleting your account in settings or contacting legal@playaistory.com.
4. Legal Basis for Processing
The legal bases for processing personal data are: • Performance of the contractual agreement accepted upon account creation pursuant to our Terms of Service (Art. 6.1.b GDPR). • Explicit consent provided when creating an account or authenticating your session (Art. 6.1.a GDPR). • Compliance with statutory legal and fiscal obligations applicable to the data controller (Art. 6.1.c GDPR).
5. Data Processors & Service Providers
To deliver our services reliably and securely, we partner with specialized service providers acting as Data Processors bound by strict Data Processing Agreements (DPAs): • Payments & Billing: Polar.sh acts as our Merchant of Record and PCI-DSS certified payment gateway, securely processing payments, invoices, and applicable tax compliance. • Secure Cloud Storage & Hosting: Tier-one cloud data centers with encryption at rest and in transit (TLS/SSL and AES-256) for secure user credential and asset storage. • AI Computing & Inference: High-performance computational environments that process generation requests ephemerally without storing or utilizing user data for foundational model training. We never sell or disclose personal data to commercial advertisers or data brokers.
6. Data Retention Period
Personal data is retained for as long as your account remains active. If you choose to delete your account via profile settings, your personal data will be permanently erased or anonymized, retaining only strictly necessary transaction records under restricted access for the statutory periods required by fiscal or judicial authorities.
7. Exercising Your Rights (GDPR)
You hold statutory rights to access, rectify, erase ('right to be forgotten'), restrict processing, request data portability, and object to the processing of your personal data. You can exercise these rights directly within your account settings or by emailing legal@playaistory.com with proof of identity. You also have the right to lodge a complaint with a competent supervisory data protection authority (such as the Spanish Data Protection Agency - AEPD at www.aepd.es, or your local EU authority).