9469-6887 Québec Inc. ("STORĪ", "we", "us", or "our") is committed to safeguarding your privacy and protecting your personal information. In accordance with Quebec Law 25 (Act respecting the protection of personal information in the private sector), the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA), this Privacy Policy details how we collect, use, disclose, retain, and protect your information.

Designated Privacy Officer (Responsable de la protection des renseignements personnels):
Privacy Officer, 9469-6887 Québec Inc.
Email: privacy@createstorii.com
Address: Montreal, Quebec, Canada

We collect information necessary to deliver and refine our creative story engine:
• Account & Profile Information: Display name, username handle, email address, password hashes (managed securely via Firebase Auth), and avatar preferences.
• Creative Media & Story Assets: User-selected photographs, video clips, layout metadata, and captions that you explicitly import into your projects.
• Device & Diagnostic Telemetry: Device model, operating system version, app version, language preference, and anonymous performance logs.
• Purchase & Subscription Records: Transaction IDs, subscription state, and purchase tokens processed through Apple App Store (StoreKit) or Stripe. We never view or store raw credit card numbers.

We process your personal information strictly for the following purposes:
• Service Delivery & Execution (Contractual Necessity): Generating multi-slide panoramic carousel layouts, applying intelligent framing, saving draft projects, and syncing across your devices.
• AI Vision & Face Centering (Explicit Consent): Detecting facial landmarks and optimal focal points via Google Cloud Vision API to ensure subjects are never cropped unnaturally across canvas seams.
• Authentication & Security (Legitimate Interests): Guarding against fraud, account harvesting, and unauthorized account access.
• Transactional & Support Notices (Contractual Necessity): Delivering account verification links, password resets, and critical service notifications.

In compliance with Canada's Anti-Spam Legislation (CASL), we only send commercial electronic messages (such as product updates or creative tips) with your express opt-in consent. Every promotional email clearly identifies 9469-6887 Québec Inc. as the sender, includes our Montreal contact coordinates, and features a one-click unsubscribe link. All unsubscribe requests are processed immediately and guaranteed within 10 business days.

Under Quebec Law 25, when personal information is transferred outside of Quebec or Canada, we conduct a formal Privacy Impact Assessment (PIA) to verify that the destination jurisdiction offers equivalent legal protections. Our primary infrastructure is hosted within secure Google Cloud Platform / Firebase multi-region data centers in Canada and the United States, governed by strict standard contractual clauses and encryption standards.

We engage vetted third-party service providers bound by strict confidentiality and data protection agreements:
• Google Cloud Platform & Firebase: Authentication, encrypted Cloud Firestore database, and Cloud Storage.
• Google Cloud Vision API: Automated focal point and face landmark detection.
• Apple App Store & RevenueCat / Stripe: In-app purchase verification and payment token management.
• Resend: Transactional email delivery dispatched from verified domains (createstorii.com).
We do not sell, rent, or trade your personal information or creative media to data brokers, advertisers, or third-party marketing networks.

In accordance with Apple App Store Review Guideline 5.1.1:
• In-App Account Deletion: You can initiate complete and irreversible deletion of your account and all associated data directly from the Profile screen in the app.
• Zero Third-Party Tracking: STORĪ does not track you across apps and websites owned by other companies for advertising purposes, and does not sell your data.
• Explicit Data Access: Camera roll and photo library access is requested only when you choose to import media into your story.

Depending on your location, you hold comprehensive rights regarding your personal information:
• Right of Access & Portability: Request a copy of your personal data in a structured, commonly used technological format.
• Right of Rectification: Request correction of inaccurate, incomplete, or ambiguous personal information.
• Right to Erasure / Deletion: Request the permanent deletion of your account and personal data.
• Right to Withdraw Consent: Withdraw your consent to data collection or AI processing at any time.
• California Notice: We do not "sell" or "share" personal information as defined by the CCPA/CPRA.
To exercise any of these rights, email our Privacy Officer at privacy@createstorii.com.

We implement state-of-the-art administrative, technical, and physical security measures, including TLS 1.3 encryption in transit, AES-256 encryption at rest, and strict role-based access control. Pursuant to Quebec Law 25, we maintain a Confidentiality Incident Log and will promptly notify the Commission d'accès à l'information du Québec (CAI) and affected individuals in the event of an incident presenting a risk of serious injury.

We retain personal information only as long as necessary to fulfill the purposes for which it was collected or to comply with statutory legal obligations. When you delete a project, it is moved to the Recently Deleted trash and retained for thirty (30) days to allow recovery before being permanently purged. Account deletion requests permanently destroy all account data within 30 days.

Pursuant to the Charter of the French Language (Bill 96), this policy is available in French and English with equal legal standing. For users residing in Quebec, the French version of this policy governs.

If you have questions, complaints, or feedback regarding our privacy practices, please contact our Privacy Officer at privacy@createstorii.com. If you reside in Quebec, you also have the right to file a complaint with the Commission d'accès à l'information du Québec (cai.gouv.qc.ca). Residents of other Canadian provinces may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).