STORYBYTE365

Privacy Policy — Version 1.0

Effective Date: October 29, 2026

Last Updated: October 29, 2026

Operated by: BreakOut365 LLC

Business Address: 350 Sansome St, Suite 820, San Francisco, CA 94104

1. Introduction and Scope

StoryByte365 (“StoryByte365,” “we,” “our,” or “us”) is an AI-assisted platform for creating cinematic mini-dramas, trailers, teasers, and other creative content. StoryByte365 is operated by BreakOut365 LLC.

This Privacy Policy explains the types of personal information we collect, where it comes from, why we use it, when it may be disclosed, how long it may be retained, and the privacy choices and rights available to individuals. It applies to StoryByte365 websites, registration and account services, creative tools, subscription and support services, and authorized integrations with participating AI X Network destinations (collectively, the “Services”).

Our Terms of Service and Acceptable Use Policy separately govern permissible content, intellectual property, account responsibilities, subscription billing, and refunds. This Privacy Policy does not override rights that cannot legally be waived.

2. Personal Information We May Collect

The categories below describe information that may be processed when a corresponding feature is used.

A. Account and contact information

Name, email address, login credentials or authentication tokens, organization name, account role, and preferred communication settings.
Password-reset and account-security information.

B. Subscription and transaction information

Plan selection, billing status, purchases, charges, refund requests, invoices, transaction identifiers, and limited payment-method details returned by payment service providers.
Payment card or banking details may be processed directly by a payment provider.

C. Creative projects and user content

Prompts, scripts, manuscripts or excerpts, storyboards, character descriptions, images, recordings, voice samples, music, video clips, generated outputs, project metadata, edits, and uploaded reference files.
Such content may include personal information about you or identifiable third parties, including images, likenesses, and voices.

D. Community and integration activity

Authorized community destination selections, publishing preferences, associated accounts, sharing approvals, and activity generated when you use supported AI X Network connections.

E. Technical, usage, and security information

Device and browser type, operating system, IP address, approximate location inferred from IP address, session identifiers, pages visited, feature interactions, error reports, generation or credit usage, access logs, and fraud/security signals.

F. Communications and support

Customer support messages, feedback, inquiries, survey responses, complaints, and related contact records.

G. Cookies and similar technologies

Session cookies, login preferences, analytics identifiers, and—only if deployed—advertising cookies or tracking technologies, as described in Section 9.

Sensitive information

Please avoid uploading Social Security numbers, financial-account passwords, medical records, government identification, or other unnecessary sensitive information. Audio and image files may contain sensitive personal information or biometric characteristics depending on their content and how they are processed. We will process such information only as needed for disclosed purposes and as permitted by law.

3. Where Information Comes From

Personal information may come from:

You or an organization administering your account;
Content and other materials you submit;
Your browser, device, and interactions with the Services;
Payment processors, authentication providers, and other service providers;
Participating AI X Network destinations or other integrations you authorize;
People who contact us or report content or account issues.

We do not imply that data is obtained from every listed source for every user.

4. How We Use Personal Information

We may use information to:

Create, maintain, secure, and authenticate accounts;
Process scripts, media, and other creative inputs to deliver requested AI-assisted output;
Save or retrieve projects, apply preferences, and support export or publishing actions;
Process payments, subscriptions, invoices, cancellations, and eligible refunds;
Connect content to approved, user-selected communities and services;
Provide customer support and communicate material service updates;
Operate, troubleshoot, measure, and improve performance and reliability;
Detect prohibited content, investigate abuse, prevent fraud, and protect security;
Comply with lawful requests and legal or regulatory obligations;
Send optional marketing communications where permitted and subject to applicable choices.

We do not promise results such as increased audience reach, referrals, or commercial success from the use of personal information or community integrations.

5. AI Processing, Creative Content, and Model Training

To fulfill your requests, StoryByte365 may transmit relevant prompts, media, project information, or other content to contracted AI model, hosting, storage, and processing providers.

Some prompts, images, audio, and videos may include personal information. Users should avoid submitting personal information about other individuals unless they have an appropriate legal basis, necessary permissions, and any required consent.

We will distinguish processing necessary to generate requested output from any additional or optional use of content. Any materially different or legally consent-based use must be disclosed and authorized as applicable.

Where safety screening or investigation is necessary, relevant content may be processed or reviewed to enforce our Terms, prevent abuse, or comply with law. Access should be limited to authorized personnel and service providers with appropriate duties.

6. When We Share or Disclose Information

Information may be disclosed to the following categories of recipients as applicable:

Service providers and processors: Cloud hosting, storage, AI model inference, customer service, authentication, security, analytics, email delivery, and payment processing providers, to support the Services and subject to applicable contractual safeguards.

Participating communities and integrations: When you authorize a publishing or connection workflow, approved content and related information may be disclosed to the selected AI X Network destination, its administrators, other members, or the public according to your chosen settings and the destination's rules.

Authorized collaborators: Information may be accessible to team members, organization administrators, or other persons you grant access to within available account permissions.

Legal, safety, and compliance recipients: We may disclose information where reasonably necessary to comply with lawful process, address fraud or unlawful activity, or protect the rights and safety of users or others, subject to applicable law.

Business transactions: Information may be transferred as part of an actual or proposed merger, acquisition, reorganization, financing, or transfer of business assets, subject to applicable privacy requirements.

We will not characterize a transfer as merely a “service provider” arrangement unless the actual agreement and processing restrictions support that classification.

7. Your Project Visibility and Community Publishing

Private creative projects are intended for use in an account or authorized workspace unless a user explicitly chooses an available publication or sharing action, subject to the actual product permissions and configuration.

Before publishing, review the selected destination, public visibility, included personal information, character or voice permissions, and any applicable moderation rules.

Once you publish content to a community, recipients may view, share, copy, or retain it as permitted by that destination. Deleting the original StoryByte365 project may not remove previously downloaded, published, or independently retained copies.

8. Payments and Subscription Records

Payment providers may collect and process payment information to complete charges, refunds, and fraud screening. StoryByte365 may receive transaction identifiers, plan details, billing status, and related records needed for account administration and legal compliance.

Payment information is handled in accordance with the applicable processor's terms and privacy notices. We do not guarantee that a payment provider follows the same retention or processing practices as StoryByte365.

For subscription cancellation and the 14-day refund request deadline, see the separate StoryByte365 Terms of Service.

9. Cookies, Tracking, and Privacy Preferences

StoryByte365 may use strictly necessary cookies to maintain accounts, sessions, security, and preferences. Analytics or advertising technologies, if deployed, may collect device and activity data for the purposes disclosed in this Policy.

Users may be able to manage cookies through browser controls and any consent or preferences interface we provide. Blocking essential cookies may affect core functions.

Global Privacy Control and other opt-out preference signals: Where applicable law requires us to recognize a valid preference signal, such as Global Privacy Control, we will process it as required.

If personal information is sold or shared within the meaning of applicable law, provide the legally required Your Privacy Choices or Do Not Sell or Share My Personal Information mechanism and describe it here.

10. Data Retention and Deletion

We retain personal information only for periods or according to criteria reasonably related to the purposes described in this Policy, subject to legal obligations and permitted exceptions. The retention period may differ by category:

Account identifiers and profile information: Generally while an account remains active and for a limited period after closure as necessary for account recovery, disputes, fraud prevention, or legal obligations.

Creative projects, uploads, and generated media: Generally while retained in an account or authorized workspace, subject to user deletion requests, project settings, backup cycles, and legal or safety exceptions.

Subscription and transaction records: For accounting, tax, chargeback, fraud, and legal recordkeeping for applicable required or defensible periods.

Technical/security logs: For limited operational and security periods based on risk, incident response, and troubleshooting requirements.

Support correspondence: For handling requests, resolving disputes, and relevant legal or operational needs.

Cookies and analytics identifiers: According to the deployed technology's purpose and configured expiration.

Deletion may not immediately remove data from legally required records, active security investigations, or backup media awaiting routine expiration. We will explain material exceptions where required by law.

11. Data Security

We aim to maintain administrative, technical, and organizational safeguards appropriate to the nature of the information and risks associated with the Services. Measures should include access control, authentication safeguards, secure data transmission, protection of stored content, logging, and vendor oversight as appropriate to the deployed system.

No service can guarantee absolute security. Please maintain strong account credentials and report suspicious activity to [email protected].

Where a legally reportable security incident occurs, BreakOut365 LLC will provide notifications required by applicable law.

12. Your Privacy Choices and Requests

Depending on your location and applicable law, you may have rights to request:

Access to or information about personal data we hold;
Correction of inaccurate data;
Deletion of certain data;
A portable copy of data where required;
Withdrawal of consent for applicable activities;
Opt-out of certain advertising, sales, sharing, or profiling;
Restriction or objection to certain processing where legally applicable;
Appeal of a privacy-request decision where a law provides that right.

How to contact us: Email [email protected] with the subject “StoryByte365 Privacy Request.” Include enough information for us to identify the relevant account and understand your request, but do not send passwords or sensitive identification documents by ordinary email.

We may take reasonable steps to verify identity and authority, protect other people's data, and apply lawful exceptions. Authorized agents may submit requests where permitted by law.

You may unsubscribe from promotional email using the unsubscribe mechanism in the message or by contacting support. Transactional, security, or legally required notices may still be sent where appropriate.

13. California Privacy Notice

This section supplements the rest of this Policy for California residents to the extent BreakOut365 LLC is subject to the California Consumer Privacy Act (CCPA) and its implementing regulations.

Categories: The categories potentially collected are described in Section 2 and include identifiers, account records, commercial information, internet or network activity, audio/visual content, inferences associated with creative preferences, and potentially sensitive personal information depending on what users upload or the features used.

Purposes and sources: Sections 3–5 describe where information comes from and why it is used. Sections 6–7 describe categories of recipients and disclosures. Section 10 provides retention criteria, subject to verification and completion before publishing.

California rights where applicable: Rights may include knowing/accessing, deleting, correcting, opting out of sale or sharing, limiting certain uses of sensitive personal information, and receiving equal treatment for exercising statutory privacy rights, subject to lawful exceptions. We will not discriminate unlawfully against a consumer for exercising applicable rights.

Requests: Email [email protected]. Additional methods will be provided where required. We will authenticate and respond within applicable statutory time frames.

Automated decisionmaking: StoryByte365 primarily assists with creative production rather than making significant decisions about employment, housing, lending, education, or healthcare.

If the CCPA does not apply to our business, other California privacy requirements may still apply. This Policy is not intended to limit non-waivable rights.

14. Rights in Other U.S. States and International Locations

Residents of other U.S. states may have additional rights under applicable state privacy laws. We will honor legally applicable access, correction, deletion, portability, opt-out, and appeal requirements and provide any required notices or mechanisms.

If European Economic Area, United Kingdom, or other international data protection laws apply, additional rights and disclosures may be required, including lawful bases for processing, international transfer safeguards, and rights to contact data protection authorities.

15. International Data Processing

StoryByte365 and authorized technology providers may process information in countries other than the country in which you reside, depending on infrastructure and vendor locations.

Where legally required, we will implement appropriate contractual and other safeguards for relevant international transfers.

16. Children and Age Restrictions

StoryByte365 accounts and Services are intended for adults aged 18 and older. We do not knowingly solicit accounts from persons under 18.

If we learn that an account belongs to a person under 18, we may disable access and take appropriate steps concerning the associated information, subject to applicable law and legitimate preservation obligations.

Sexualized depictions of minors and child sexual exploitation material are prohibited under the Terms of Service, regardless of whether content is synthetic or AI-generated.

Parents or guardians may contact [email protected] about information they believe was submitted by a minor.

17. Third-Party Content and Other People's Privacy

If you upload a photograph, recording, likeness, voice, name, or other information about another person, you are responsible for ensuring the submission and intended uses are lawful and that the necessary rights or consents have been obtained.

You should avoid uploading someone else's sensitive personal information without a valid legal basis and clear necessity.

Where StoryByte365 processes information about third parties on instructions from an organizational customer, the responsibilities of the parties may be further specified in an applicable data-processing agreement.

18. Changes to This Privacy Policy

We may update this Policy to reflect product, legal, security, or operational changes. We will update the date shown above and provide additional notice or obtain consent when required by law.

We will not treat a quiet policy change as permission to use previously collected personal information for a materially new purpose where law requires additional notice, choice, or consent.

19. Contact Information

StoryByte365 Privacy Team

c/o BreakOut365 LLC

350 Sansome St, Suite 820

San Francisco, CA 94104

United States

Email: [email protected]

Suggested subject: StoryByte365 Privacy Request

For intellectual property complaints, account liability, prohibited-content rules, subscriptions, and refunds, consult the separate StoryByte365 Terms of Service.