Privacy Policy

1. Introduction

Everstory ("we," "us," "our") operates the website located at geteverstory.com (the "Service"). We are committed to protecting your privacy and being transparent about our data practices.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. By using Everstory, you consent to the practices described in this policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Everstory service
• To create and manage your account
• To store and organize your stories, photos, videos, and audio recordings
• To process payments and manage subscriptions via our payment processor
• To generate AI-powered content (fiction novels, autobiographies, audiobooks, video compilations) based on your stories, only when you explicitly request such features
• To transcribe audio recordings using speech-to-text services
• To send you service-related emails, reminders, and notifications
• To respond to your support requests and feedback
• To detect, prevent, and address fraud, security issues, and Terms violations
• To comply with legal obligations (e.g., GDPR requests, lawful data access requests)
• For our legitimate business purposes, including backups, marketing communications (where you have consented), performance analysis, service improvement, and quality assurance

3. Third-Party Services & Data Sharing

Everstory uses third-party service providers to deliver our features. We may change these providers from time to time. The categories of third-party services we use include:

4. Data Storage & Security

4.1 Where We Store Your Data

Your data is stored on secure cloud servers provided by Base44 (our platform provider). These servers may be located in various geographic regions, including outside Australia. By using Everstory, you consent to the transfer and storage of your data in these locations.

4.2 Security Measures

We implement industry-standard security measures to protect your data. However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You use the Service at your own risk.

Examples of security measures we employ include, but are not limited to:

• Encryption in transit
• Encryption at rest
• Secure authentication via OAuth
• Regular security audits and updates
• Access controls and monitoring

4.3 Access to Your Data

Your stories and content are private by default. Only you can access them unless you explicitly share them. Everstory employees have limited access to user data only when necessary for:

• Providing technical support (with your permission)
• Investigating abuse reports or Terms violations
• Complying with legal obligations (e.g., court orders)
• Supporting internal business operations, such as service improvement, analytics, and security monitoring — but never for targeted advertising or selling your data

All access to user data by Everstory employees is logged and monitored for security purposes.

5. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

5.1 Access & Portability

• View Your Data: Access all your account information and stories through your account dashboard
• Download Your Data: Export all your stories and media via the "Download All" feature in Settings

5.2 Correction & Deletion

• Update Information: Edit your profile, stories, and settings at any time
• Delete Account: Permanently delete your account and all associated data via Settings. Deletion is processed within 30 days. Note: Some data may be retained for legal or backup purposes as described in Section 9.

5.3 Rights for EU/UK/California Residents

If you are located in the EU, UK, or California, you may have additional rights under GDPR or CCPA, including:

• Right to restrict or object to processing
• Right to lodge a complaint with a supervisory authority
• Right to opt out of "sale" of personal information (Note: We do not sell your data)

To exercise these rights, contact us at privacy@geteverstory.com.

6. Children's Privacy

Everstory is NOT intended for children under 18. We do not knowingly collect information from minors.

If you are under 18, you may not use Everstory or create an account. If we discover that a user is under 18, we will immediately terminate their account and delete all associated data.

If you are a parent or guardian and believe your child has provided us with information, please contact us immediately at privacy@geteverstory.com so we can take appropriate action.

7. Data Retention & Platform Hosting

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account:

• Your stories, photos, and personal data are deleted from active systems within 30 days
• Backups may retain data for up to 90 days before permanent deletion
• Aggregated, anonymized data (with no personal identifiers) may be retained for analytics

Certain information may be retained beyond these periods where required by law or for legitimate business purposes, including:

• Financial and transaction records (retained for 7 years for tax and accounting compliance)
• Records related to abuse reports, legal disputes, or investigations
• Data necessary to enforce our Terms of Service or protect our legal rights

8. International Data Transfers

Everstory is operated from Australia. Our servers and service providers may be located in other countries, including the United States and Europe.

When we transfer personal data outside of Australia, the European Economic Area (EEA), or the United Kingdom, we ensure appropriate safeguards are in place in accordance with applicable data protection laws, including:

• Selecting service providers who participate in recognised data protection frameworks
• Implementing Standard Contractual Clauses (SCCs) approved by the European Commission where required
• Ensuring our third-party providers maintain appropriate technical and organisational security measures
• Conducting due diligence on our service providers' data protection practices

If you are located in the EEA, UK, or another jurisdiction with data transfer restrictions, your use of Everstory constitutes your acknowledgment that your data may be transferred to and processed in countries that may not offer the same level of data protection as your home country. We remain responsible for ensuring your data is protected in accordance with this Privacy Policy regardless of where it is processed.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting a notice in the Service
• Sending an email to your registered email address
• Updating the "Last Updated" date at the top of this policy

Your continued use of Everstory after the updated policy takes effect constitutes your acceptance of the changes. If you do not agree with the changes, please stop using the Service and delete your account.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer (DPO):

We aim to respond to all privacy-related inquiries within 30 days.