Privacy Policy

Updated: September 9, 2025

StoryVid LLC ("StoryVid," "we," "us," or "our") is a limited liability company with a principal address at 212 N. 2nd Street, STE 100, Richmond, KY 40475, USA. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you use our website (https://www.storyvid.com), subdomains, client portal, and associated services (collectively, the “Services”).

If you have questions, contact us at:

Email: dataprivacy@storyvid.com
Registered Agent: 212 N. 2nd Street, STE 100, Richmond, KY 40475, USA
Phone: +1 (859) 710‑5047

1. Scope

This Policy applies to:

  • Website visitors
  • Clients and prospective clients
  • Business contacts, vendors, and job applicants

This Policy does not override any applicable Production Agreement, Statement of Work (SOW), Data Processing Addendum (DPA), or other signed contract with StoryVid.

2. Definitions

Personal Information (PI): Any data that identifies or could reasonably identify a person or household.
Sensitive Personal Information (SPI): Includes government IDs, login credentials, exact geolocation, biometric or health info, and communication content.
Processing: Any operation performed on data (e.g., collection, use, storage, disclosure, deletion).
Controller/Processor: As defined under GDPR. StoryVid typically acts as a Controller for our website and marketing; we may act as a Processor when handling client-submitted data under a contract or DPA.

3. What We Collect

3.1 Data You Provide

  • Names, email addresses, phone numbers
  • Company and project information
  • Creative briefs, assets, documents, feedback
  • Contract signatures, support requests, portfolios

3.2 Data Collected Automatically

  • IP address, browser/device type
  • Session data (pages viewed, interactions, scroll/click behavior)
  • Crash logs, performance data, JavaScript errors
  • Cookie and pixel IDs
  • Keystroke data on public input forms (excluding passwords)

Hotjar Usage: We use Hotjar to record sessions and view heatmaps. This includes session behavior, form interactions, on-page content, and keystroke data in public fields.

We do not anonymize IP addresses with Hotjar. Data is retained as follows:

  • Identified users: deleted after 365 days of inactivity
  • Anonymous users: deleted after 90 days

3.3 From Third Parties

  • CRM and automation tools (GoHighLevel)
  • Analytics and ad partners (Google Ads, Google Analytics)
  • Affiliates and referral programs (TrackDesk)
  • Clients or partners who invite you into a project

3.4 Payment Data

Payments are processed by Square. We do not store full card information. Square’s privacy policy applies to all payment processing: https://squareup.com/us/en/legal/general/privacy

4. How We Use Personal Information

We use your data to:

  • Provide, operate, and improve our Services
  • Execute creative projects (pre- to post-production)
  • Communicate with clients about quotes, billing, updates
  • Send marketing communications (with opt-out)
  • Run analytics, A/B testing, and diagnostics
  • Manage B2B advertising and retargeting
  • Secure our systems and prevent fraud
  • Comply with legal obligations

5. Marketing & CRM

We use GoHighLevel for our CRM and communication platform. When you submit a project form or contact us, your data (e.g., name, email, phone, IP address) may be added to our system.

We may send:

  • Automated emails and text messages
  • Transactional updates (invoices, project status)
  • Promotional content (news, offers)

You can opt out of marketing at any time by:

  • Clicking the unsubscribe link in our emails
  • Texting STOP to our SMS messages
  • Contacting us via email, phone, or postal mail

Transactional communications related to billing or project status cannot be opted out of.

6. Cookies and Tracking

We use cookies, pixels, and related technologies to:

  • Analyze usage and improve performance
  • Personalize content
  • Run targeted advertising (Google Ads, retargeting)

Current Platforms:

  • Hotjar
  • Google Analytics / Ads / Search Console
  • No cookies from Facebook/LinkedIn yet, but planned for future campaigns

We currently do not display a cookie banner, as we primarily serve U.S.-based users and do not collect data from the EU/UK. We honor Do Not Track (DNT) signals and opt-out preferences where legally required.

7. Client Portal

Our client portal (developed by Base 44) is used to manage client projects. It includes:

  • Project documents and creative assets
  • Branding files, deliverables, and contracts

Users log in via:

  • Google or Microsoft authentication
  • Email and password (secured by Base 44)

We do not store user login credentials. All authentication is securely handled by Base 44, likely using Supabase or a similar backend.

8. Data Sharing

We may share personal information with:

  • Service providers: hosting, file delivery, communication tools, analytics, CRM, ad platforms
  • Advisors and insurers: legal, accounting, or audit firms
  • Law enforcement: if required by law or to protect legal rights
  • Clients/collaborators: if added to a shared project
  • Business transfers: in a merger, acquisition, or similar event
  • Aggregated or anonymized data: that cannot be re-identified

We do not sell personal data. However, we may share usage data with advertising partners for retargeting purposes (cross-context behavioral advertising).

9. Security

We implement reasonable technical and organizational safeguards such as:

  • Role-based access controls
  • Secure authentication systems (client portal)
  • Regular software updates
  • Encryption in transit (HTTPS)

We do not currently have third-party security certifications (e.g., SOC 2, ISO 27001). While we take security seriously, no system is 100% secure.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

  • Access your personal information
  • Correct or delete inaccurate data
  • Opt out of tracking or marketing
  • Request data portability
  • Withdraw consent at any time

To make a request, contact us at:

Email: dataprivacy@storyvid.com
Registered Agent: 212 N. 2nd Street, STE 100, Richmond, KY 40475, USA
Phone: +1 (859) 710‑5047

We may need to verify your identity before processing a request.

11. Children’s Data

Our Services are not directed at children under 13. We do not knowingly collect data from minors unless:

  • A parent/guardian provides consent
  • The minor is part of a production project and has signed releases/contracts

If you believe we have collected information from a child without appropriate consent, please contact us and we will delete it.

12. International Users

We are a U.S.-based company and currently do not offer services to users in the EU or UK. If that changes in the future, we will update this Policy to include appropriate safeguards (e.g., Standard Contractual Clauses) for international data transfers.

13. Retention

We retain personal data only as long as necessary to:

  • Fulfill the purposes outlined above
  • Comply with legal, financial, or tax obligations
  • Enforce or defend legal rights

When no longer needed, data is deleted or anonymized.

14. Third-Party Links and Tools

Our site and client portal may link to or embed third-party platforms (e.g., Square, YouTube, file delivery tools). Their privacy practices are separate from ours, so please review their policies.

15. Changes to This Policy

We may update this Privacy Policy occasionally. If changes are material, we’ll provide additional notice (e.g., via website banner or email).

The effective date at the top will always indicate the most recent version.

16. Contact Us

If you have questions about this Privacy Policy or your data:

StoryVid LLC
Email: dataprivacy@storyvid.com
Registered Agent: 212 N. 2nd Street, STE 100, Richmond, KY 40475, USA
Phone: +1 (859) 710‑5047

‍