Privacy Policy: Transparency & Data Protection

Last updated: June 30, 2026

Owner and Data Controller

This policy explains how StoryProof LLC ("StoryProof", "we", "us") collects and uses personal data when you visit storyproof.io, create an account, or submit a testimonial through a StoryProof collection link.

StoryProof LLC
30 N Gould St Ste N
Sheridan, Wyoming 82801
USA
Phone: +1 628-899-1443
Email: support@storyproof.io

Types of Data Collected

Among the types of personal data that StoryProof collects, by itself or through third parties, there are: usage data; trackers; email address; first name; last name; password; profile picture; company name; billing address; payment information; contact information; data communicated while using the service; and testimonial content, which can include video, audio, text, a reviewer's name, photo, job title, company and social media profile.

Personal data may be provided freely by you or, in the case of usage data, collected automatically when you use the service. Unless stated otherwise, all data requested is mandatory, and failing to provide it may make it impossible for us to provide the service. Where some data is optional, you are free not to provide it without any consequence to the availability or the functioning of the service. If you are unsure which data is mandatory, contact us.

You are responsible for any third-party personal data you obtain, publish or share through the service, and you confirm that you have the third party’s consent to provide that data to us.

Mode and Place of Processing the Data

Methods of processing

We take appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data. Data is processed using computers and IT-enabled tools, following organizational procedures strictly related to the purposes described in this policy. Besides us, the data may be accessible to certain people in charge of operating the service (administration, sales, marketing, legal, system administration) or to external parties (such as third-party technical service providers, hosting providers and IT companies) appointed by us as data processors where necessary. An updated list of these parties can be requested from us at any time.

Legal basis of processing

We may process personal data relating to you if one of the following applies:

You have given consent for one or more specific purposes.
Providing the data is necessary for the performance of an agreement with you or for any pre-contractual obligations.
Processing is necessary for compliance with a legal obligation to which we are subject.
Processing is related to a task carried out in the public interest or in the exercise of official authority vested in us.
Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.

We will gladly help clarify the specific legal basis that applies to any processing, and in particular whether providing the data is a statutory or contractual requirement.

Place

Data is processed at our operating offices and in any other place where the parties involved in the processing are located. Depending on your location, data transfers may involve transferring your data to a country other than your own, including the United States. You are entitled to learn about the legal basis of such transfers and about the security measures we take to safeguard your data. Contact us to request this information.

Retention time

Personal data is processed and stored for as long as required by the purpose it was collected for. Data collected for the performance of a contract between you and us is retained until that contract has been fully performed. Data collected for our legitimate interests is retained for as long as needed to fulfil those purposes. Data collected on the basis of your consent is retained until that consent is withdrawn. We may be obliged to retain data for longer where required to comply with a legal obligation or by order of an authority. Once the retention period expires, the data is deleted, and the rights of access, erasure, rectification and portability can no longer be enforced for it.

The Purposes of Processing

Your data is collected to allow us to provide the service, comply with our legal obligations, respond to enforcement requests, protect our rights and interests (or those of our users or third parties), detect malicious or fraudulent activity, and for the following purposes:

Registration and authentication
Collecting, storing and displaying testimonials
Hosting and backend infrastructure
Sending service and account emails
Handling payments
Analytics
Interaction with live chat
Scheduling demos and calls

Detailed Information on the Processing of Personal Data

Personal data is collected for the following purposes and using the following services:

Registration and authentication

Supabase (Supabase, Inc.) Registration and sign-in service. Personal data processed: email address, first name, last name, password, profile picture. Place of processing: United States. Privacy policy

Hosting and backend infrastructure

Amazon Web Services (Amazon Web Services, Inc.) Hosting of the application and storage of uploaded media, including testimonial videos, audio and images. Personal data processed: various types of data as specified in the service’s privacy policy. Place of processing: United States. Privacy policy

Sending service and account emails

SendGrid (Twilio Inc.) Delivery of account, notification and testimonial request emails. Personal data processed: email address, first name, last name, data communicated while using the service. Place of processing: United States. Privacy policy

Handling payments

Payments are handled by an external payment processor. We never receive or store your full card number.

Stripe (Stripe, Inc.) Payment processing and subscription billing. Personal data processed: billing address, contact information, email address, payment information. Place of processing: United States. Privacy policy

Analytics

Google Analytics and Google Tag Manager (Google LLC) Measuring how visitors use this website and which campaigns bring them here. Personal data processed: trackers, usage data. Place of processing: United States. Privacy policy

Interaction with live chat

LeadConnector chat widget (LeadConnector LLC) Live chat on this website. Personal data processed: data communicated while using the service, trackers, usage data. Place of processing: United States. Privacy policy

Scheduling demos and calls

Calendly (Calendly LLC) Booking a demo or support call. Personal data processed: email address, first name, last name, contact information. Place of processing: United States. Privacy policy

Testimonials Collected on Behalf of Our Customers

When you record or submit a testimonial through a collection link, you are sharing it with the business that sent you that link. That business is the controller of your testimonial and decides whether it is published and where. StoryProof stores and processes it on their behalf as a data processor. To have a testimonial edited or removed, contact the business you submitted it to, or contact us and we will pass your request on.

The Rights of Users

You may exercise certain rights regarding your data processed by us. In particular, you have the right to:

Withdraw your consent at any time. You can withdraw consent you previously gave to the processing of your personal data.
Object to processing of your data. You can object to processing carried out on a legal basis other than consent.
Access your data. You can learn whether we process your data, obtain disclosure of certain aspects of the processing, and obtain a copy of the data.
Verify and seek rectification. You can verify the accuracy of your data and ask for it to be updated or corrected.
Restrict the processing of your data. In certain circumstances you can restrict processing, in which case we will only store the data.
Have your personal data deleted. In certain circumstances you can have your data erased by us.
Receive your data and have it transferred to another controller. You can receive your data in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller.
Lodge a complaint. You can bring a claim before your competent data protection authority.

Where personal data is processed for direct marketing purposes, you can object to that processing at any time without giving any justification. For other processing carried out in the public interest or for our legitimate interests, you may object on grounds related to your particular situation.

To exercise any of these rights, email support@storyproof.io. Requests are free of charge and we answer them as early as possible and always within one month.

Additional Information About Data Collection and Processing

Legal action

Your personal data may be used by us for legal purposes in court or in the stages leading to possible legal action arising from improper use of the service. You acknowledge that we may be required to reveal personal data upon request of public authorities.

System logs and maintenance

For operation and maintenance purposes, the service and any third-party services may collect files that record interaction with the service (system logs) or use other personal data, such as the IP address.

Do Not Track

This website does not respond to "Do Not Track" requests. To find out whether any of the third-party services it uses honor them, please read their privacy policies.

Changes to this privacy policy

We may change this privacy policy at any time by notifying you on this page and, where technically and legally feasible, by email. Please check this page often and refer to the date at the top. Where changes affect processing based on your consent, we will ask for your consent again where required.

Definitions and Legal References

Personal Data (or Data) Any information that directly, indirectly, or in connection with other information allows a natural person to be identified.
Usage Data Information collected automatically through the service, such as IP addresses, the URLs requested, the time of a request, the browser and operating system used, and details of the path followed within the site.
User The individual using the service who, unless otherwise specified, coincides with the Data Subject.
Data Subject The natural person to whom the personal data refers.
Data Processor The natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
Data Controller (or Owner) The natural or legal person, public authority, agency or other body that determines the purposes and means of the processing of personal data. For this website and the StoryProof service, the controller is StoryProof LLC.
Tracker Any technology, such as cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting, that enables the tracking of users.
Cookie A small set of data stored in your browser.

This privacy policy has been prepared on the basis of provisions of multiple legislations, including Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

Contact Us

For any question about this privacy policy or how your data is handled, contact us at: