Privacy Policy

Last updated October 27, 2026. This policy explains how UFP Enterprises ("we", "us") handles information on STORYCRAFTER.

Who is responsible for your data

UFP Enterprises is the data controller for personal information processed through STORYCRAFTER. Contact us at support@ujimafilm.com. For purchases, Paddle.com acts as our Merchant of Record and is an independent controller of the payment and tax data it collects; see the Paddle Privacy Notice.

1. Information we collect

  • Account information: your email address, display name, and authentication details when you sign up (including via Google or Lovable sign-in).
  • Waitlist: the email address you submit when joining the waitlist.
  • Billing information: your plan, subscription status, and transaction records. Card details are handled by Paddle and are never stored on our servers.
  • Student proof: proof-of-registration documents you upload for the student discount. These are stored privately and visible only to you and the reviewers who approve discounts.
  • Story content: the premises, notes, and stories you create or submit for review.
  • Usage data: basic counters that enforce fair-use limits (such as daily review counts) and security logs.

2. How we use information

We use your information to run STORYCRAFTER: providing your account and plan, processing payments and subscriptions, verifying student status, delivering AI Story Review, enforcing fair-use and abuse protections, and contacting you about your account or your waitlist spot.

We do not sell your personal information.

2a. Legal basis for processing

  • Contract: account, workspace, story content, billing and student verification data, to provide the service you signed up for.
  • Legitimate interests: security logs and fair-use counters, to protect the service from abuse.
  • Consent: waitlist emails and optional marketing; you can withdraw consent at any time.
  • Legal obligation: billing and tax records we must keep.

3. AI processing

Story Review sends the premise and details you submit to an AI model to generate development questions and plot-gap feedback. Submissions to Story Review are transient — they are not stored as story submissions after your session. Our intended policy is that your writing is not used to train AI models without your explicit opt-in; final terms will be published before launch.

4. Sharing

We share data only with the services needed to run STORYCRAFTER: our hosting and database provider (which stores account and content data), Paddle.com, our Merchant of Record (which receives your name, email, payment and billing address details to process checkout, subscriptions, refunds, and taxes), and the AI provider used for Story Review. These providers process data on our behalf to deliver the service.

We may also disclose information if required by law or to protect our rights, and to reviewers who approve student discounts (proof documents only).

5. Your rights and choices

  • You can view and update your profile and billing settings on your account page.
  • You can cancel your plan at any time; you keep access until the end of the period you paid for.
  • You can delete your account from your account page. Deleting your account removes your account data; we keep only what we must retain for legal or billing records.
  • You can unsubscribe from non-essential email at any time using the link in the message.

To request a copy, correction, or deletion of your data, or if you have questions, contact support@ujimafilm.com.

6. Security and retention

We protect your data with encryption in transit, access controls, and database-level permissions that restrict who can read sensitive tables. Waitlist records and student proof are stored privately and are not publicly readable. We keep billing records as long as needed for tax and legal purposes, and delete other data when your account is deleted or when it is no longer needed.

6a. How long we keep data

  • Account, profile and story content: until you delete your account, then removed within 30 days.
  • Student proof: while your verification is active (up to one year), and deleted within 30 days after it expires or is rejected.
  • Waitlist emails: until launch plus 12 months, or until you ask us to remove them.
  • Usage counters: up to 30 days. Security logs: up to 90 days.
  • Billing records: up to 7 years, as required for tax and accounting.

7. Children

STORYCRAFTER is not directed at children under 13, and we do not knowingly collect their personal information.

8. Changes

We may update this policy as the service grows; material changes will be announced on the site before they take effect.

See also our Terms of Service and Refund Policy.