Privacy Policy

What Data We Collect

• Personal stories and answers — the responses you provide to memory trigger questions during the story archiving process.
• Uploaded documents — text files (.txt, .md, .csv) you choose to upload for inclusion in your Story Bank.
• Pasted content — any text you paste directly into the app (journal entries, essays, social posts, etc.).
• Email address — collected only if you create an account, used for authentication via Supabase.

How Your Data Is Processed

Your stories and answers are sent to Anthropic's Claude API to generate your Story Bank document. This includes the text of your answers, any uploaded file content, and pasted content. The AI analyzes your responses to identify themes, language patterns, and signature phrases.

For authenticated users, your generated Story Bank and the answers that produced it are stored in a Supabase database so you can return to view, edit, and rebuild your archive over time.

Third-Party Services

• Anthropic Claude API — processes your stories and answers to generate your Story Bank. Subject to Anthropic's Privacy Policy.
• Supabase — provides authentication and database storage for user accounts and saved archives. Subject to Supabase's Privacy Policy.
• HubSpot — used for marketing communications. Subject to HubSpot's Privacy Policy.

Data Retention

• Authenticated users — your stories, answers, and generated Story Banks are stored in Supabase for as long as your account exists. You can delete your data at any time from the dashboard.
• Unauthenticated users — your wizard data (answers, uploaded content, pasted text) exists only in your browser session. Once you close the tab or navigate away, that data is gone. We do not store it server-side.

Cookies

StoryArchive uses a Supabase authentication session cookie to keep you signed in. We do not use tracking cookies or third-party advertising cookies.

GDPR Compliance

If you are a resident of the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can request correction of inaccurate or incomplete data.
• Right to erasure — you can request deletion of your personal data. Authenticated users can delete their data directly from the dashboard, or contact us to request deletion.
• Right to restrict processing — you can request that we limit how we use your data.
• Right to data portability — you can request your data in a machine-readable format.
• Right to object — you can object to the processing of your personal data.

To exercise any of these rights, contact us at chad@chadstamm.com.

Contact

For any questions about this privacy policy or your data, reach out to chad@chadstamm.com.