Privacy Policy隐私政策

Animo Studio (幕匠) is an AI short-drama creation service operated at studio.shorstory.com. This policy explains what personal data we handle when you register for and use the service, and the choices you have. It applies to the accounts, billing, and creation workbench provided through this website.

The service is currently in an invite-only beta. You need a valid invite code to create an account.

We collect only what the service needs to run:

• Account data — your email, an optional display name, and your password. Your password is stored only as a one-way bcrypt hash; we never store or see your plaintext password.
• Invite code — the code you used to register, so we can track beta access.
• Subscription & credits — your plan, subscription status, billing period, a credit ledger of grants and usage, and Stripe customer / subscription identifiers.
• Content you create — the script text you submit and the videos generated from it, together with the project and asset records needed to organize them.
• Error telemetry — when enabled, server-side error reports (via Sentry) that help us diagnose failures. We do not run client-side behavioral or performance tracking.

• We never store your full card number or bank details — payment is handled entirely by Stripe (see Payments).
• No advertising, marketing, or cross-site tracking cookies, and no third-party analytics or ad SDKs.
• No precise location, contacts, biometric data, or device-sensor data.
• We do not sell your personal data, and we do not share it for others’ advertising.

• To provide the service: authenticate you, run the creation pipeline, and store and deliver your videos.
• To operate billing and credit accounting for paid plans.
• To diagnose errors and keep the service reliable and secure.
• To comply with law and enforce our Terms.

To generate video, the script and prompt you submit are transmitted to a third-party AI video generation provider (Volcengine “Seedance”) solely to render the output you requested. This means your submitted creative text leaves our systems and is processed by that provider under its own terms.

Generated video carries C2PA content credentials indicating it was AI-generated, so provenance travels with the file.

You keep the usage rights to the films generated for you. You must have the legal rights to any script you upload; this warranty is presented to you in the creation workbench. We retain only the storage and delivery rights needed to operate the service. See the Terms of Service for details.

We rely on a small set of processors, each handling data under its own terms:

• Stripe — payment processing and hosted checkout.
• Neon — managed PostgreSQL hosting for account, subscription, and credit data.
• Cloudflare R2 — object storage and delivery (via media.shorstory.com) for your generated media.
• Volcengine Seedance — third-party AI video generation.
• Sentry — server-side error telemetry (only when configured).

Paid subscriptions are processed through Stripe’s hosted checkout. We never receive or store your full card number. We store only a Stripe customer and subscription identifier and your plan and status, which we use to grant credits and show your account state. Stripe is an independent data processor and handles your payment details under its own privacy policy.

We use only strictly necessary cookies: a session cookie (NextAuth JWT session) to keep you signed in, and a language-preference cookie to remember your locale. We do not use advertising, marketing, or analytics cookies, so there is no tracking consent banner to manage.

Account, subscription, and credit data are stored in PostgreSQL (Neon) in the United States. Generated media is stored in Cloudflare R2. Error telemetry, when enabled, goes to Sentry. Scripts submitted for generation are transmitted to Volcengine Seedance, which may process them in China.

If you access the service from the EEA, the UK, or elsewhere, your data is transferred to and processed in these locations, which may have different data protection laws than your own.

We keep your account and content while your account is active. Error telemetry is short-lived. When you ask us to delete your account, we act as described in “Your rights” below. Note that Stripe retains payment and invoice records independently, for the period required by its own legal and tax obligations, even after we delete our reference to your customer record.

Subject to applicable law (including the GDPR for EEA/UK users), you can request to access and export your data, correct it, delete it (the right to be forgotten), withdraw consent, or object to certain processing.

Self-serve export and deletion tools are being built. In the interim, contact us at the address below and we will respond within 30 days. To protect your account, we will verify your identity before acting, and destructive requests such as deletion require confirmation.

We protect your account with one-way bcrypt password hashing, encrypted transport (HTTPS), and access controls between our shell and the private creation core. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security, but we work to protect your data appropriately.

The service is not directed to children. You must be old enough to form a binding contract in your jurisdiction to use it. If you believe a child has provided us personal data, contact us and we will remove it.

We may update this policy as the service evolves. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Continued use after an update means you accept the revised policy.

For privacy questions or to exercise your rights, contact privacy@shorstory.com.