Storynote ("we," "our," or "us") operates storynote (storynote.io). This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).
1. Information We Collect
Account Information: Name, email address, and password you provide when creating an account.
Content: Any text, documents, or notes you create, upload, or share in storynote. We do not claim ownership of your content. You grant us a limited license to host, store, and process your writing solely for the purpose of operating and improving the Service. We do not use your content to train AI models.
Usage Data: Information about how you use our service, such as log files, IP addresses, and device/browser type.
Analytics Data: We use PostHog to collect anonymous product analytics to improve our service. This includes feature usage patterns, user journey analysis, and performance metrics. No writing content, personal information, or sensitive data is collected by PostHog.
Cookies: We use cookies to enable core site functionality and analyze usage. You can change or withdraw your cookie consent at any time via .
2. How We Use Your Information
To provide, operate, and improve storynote.
To personalize your experience.
To communicate with you about updates, security, or support.
To comply with legal obligations.
3. Sharing of Information
We do not sell your personal data. We may share data only with:
Service Providers: Third parties who help us host, process, and deliver storynote (e.g., Supabase, Vercel, OpenRouter, PostHog, Brevo, and Hetzner). While we choose reputable providers and implement appropriate safeguards, Storynote is not liable for actions or omissions of subprocessors beyond our control.
Legal Compliance: If required by law, regulation, or court order.
Business Transfers: In case of a merger, acquisition, or sale of assets.
AI Processing: To provide our AI services (such as writing suggestions and coaching), we securely send your input to OpenRouter, which routes the request to a third-party inference provider to generate a response. We route only to providers operating under a Zero-Data Retention (ZDR) policy: your input is processed only to return a response, is not retained or stored by the inference provider, and is not used to train or improve any AI model. See OpenRouter's Privacy Policy.
Product Analytics: We use PostHog to collect anonymous usage analytics to improve our service. PostHog processes this data according to their privacy policy and our data processing agreement.
Grammar & Spelling Checks: To check grammar and punctuation, the text you write is sent to a LanguageTool instance that we self-host on our own servers (Hetzner, located in Helsinki, Finland, within the EU/EEA). Your text is processed only to return suggestions; it is not stored there or used to train any model. Spelling is checked locally in your browser and is not sent anywhere.
Real-time Collaboration: When you collaborate on a document, its content is synchronized in real time through our collaboration server, which we self-host on our own servers (Hetzner, located in Helsinki, Finland, within the EU/EEA), so that multiple people can edit the same document at once.
4. Data Retention
We keep your personal data only as long as necessary to provide storynote or to comply with legal obligations. You may request deletion of your data at any time.
5. Your Rights (GDPR)
If you are located in the EU/EEA, you have the right to:
Access, correct, or delete your personal data.
Restrict or object to processing of your data.
Export your data (data portability).
Withdraw consent at any time (where processing is based on consent).
Lodge a complaint with your local supervisory authority (in the Netherlands: Autoriteit Persoonsgegevens).
6. Data Security
We use reasonable technical and organizational measures to protect your data. However, no method of transmission over the internet is 100% secure.
7. Affiliate Data
If you participate in the Storynote Affiliate Program, we collect additional information such as your payment details, tax information (if applicable), and affiliate performance data. This data is processed and stored securely via Affonso, our affiliate platform provider. Affonso’s Privacy Policy applies to affiliate-related data: Affonso’s privacy policy.
8. International Transfers
We may process and store your data outside the EU/EEA (e.g., with subprocessors like OpenRouter, Supabase, or PostHog). In such cases, we rely on appropriate safeguards such as the EU Commission's Standard Contractual Clauses or equivalent measures to ensure your data remains protected. Grammar checking and real-time collaboration are processed entirely within the EU/EEA on our own servers in Helsinki, Finland.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If significant changes are made, we will notify you by email or in-app.