Version: 1.0
Effective Date: October 1, 2026
StoryToShop LLC · Spicewood, TX 78669 · privacy@storytoshop.ai
This Privacy Policy applies to everyone who uses StoryToShop — visitors, buyers, and Sellers. It is also incorporated into the StoryToShop Seller Agreement under Section 46.
1. Introduction
StoryToShop LLC ("StoryToShop," "we," "us") respects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit our website, register as a Seller, or make a purchase through a StoryToShop storefront.
We do not sell personal information.
2. Information We Collect
2.1 Account and identification information. Name, email address, physical address, business name, business tax identification number, and phone number.
2.2 Financial and payout information. Bank account details and payment card information, collected and processed by Stripe. StoryToShop does not store full payment card numbers.
2.3 Transaction data. Order history, order contents, shipping and tracking details, buyer–Seller communications conducted through StoryToShop, refunds and disputes, and sales totals.
2.4 Technical and contract-execution data. IP address, browser user-agent string, device identifiers, timestamps, and the canonical version identifier and SHA-256 hash of the agreement or policy accepted.
2.5 Usage data. Pages viewed, storefronts and listings viewed, clicks, referral source, and search activity on the platform.
2.6 Information you choose to provide. Support messages, complaint submissions, and materials you supply in response to a verification or originality request.
3. How We Use Information
We use this information to:
- Provide, maintain, and secure the StoryToShop platform and storefronts;
- Process transactions, facilitate payouts, and calculate and remit sales tax where marketplace facilitator law requires it;
- Verify Seller identity where required by the federal INFORM Consumers Act;
- Detect and prevent fraud, abuse, and security incidents;
- Operate search, discovery, recommendations, and analytics;
- Communicate about orders, accounts, legal notices, and policy changes;
- Handle disputes, complaints, and enforcement; and
- Comply with legal obligations and enforce our agreements.
We do not use Seller creative content to train generative-AI models, and we do not provide it to third parties for that purpose, as stated in Section 18 of the Seller Agreement.
4. Contract and Audit Evidence
Under the Electronic Signatures in Global and National Commerce Act (15 U.S.C. § 7001) and the Texas Uniform Electronic Transactions Act (Tex. Bus. & Com. Code Ch. 322), StoryToShop records and retains acceptance evidence for the Seller Agreement and incorporated policies: the Seller user and store identifiers; the Agreement version and SHA-256 hash; a snapshot of each incorporated policy's version and SHA-256 hash; the two separately recorded checkbox values and timestamps; the typed electronic-signature name, business name, and signer's title or capacity; the acceptance source and database timestamp; the IP address; and the browser user-agent string.
Purpose. To establish evidentiary integrity, satisfy non-repudiation standards, and prove acceptance of the Seller Agreement.
Your access. Registered Sellers may request a copy of their own acceptance records at any time by writing to privacy@storytoshop.ai. We respond with the recorded version, hash, timestamp, and the document text that was accepted.
Retention. Acceptance records are retained on an ongoing basis for as long as StoryToShop operates the marketplace. They are the evidence that a binding agreement was formed, they are recorded in an append-only log, and they are not deleted on account closure or in response to a deletion request. Section 7 explains how this interacts with your deletion rights.
5. How Long We Keep Information
We keep personal information for as long as it is needed for the purposes described in this Policy, and for as long as we are required to keep it by law.
In practice that means:
- Contract acceptance and audit evidence is retained on an ongoing basis, as described in Section 4. It is not deleted.
- Transaction and order records are retained for as long as required for tax, accounting, dispute, and chargeback purposes.
- Account, support, and dispute records are retained while the account is open and for as long afterward as needed to resolve or defend a matter that could still arise from it.
- Security and fraud records are retained for as long as needed to protect the marketplace and its users.
Where a legal hold, an open dispute, an investigation, or a statutory obligation applies, we retain the relevant records until it is resolved.
6. How We Share Information
We share personal information only as follows.
6.1 Service providers. Stripe (payment processing, settlement, payouts, identity verification, and tax calculation), hosting and infrastructure providers, email delivery, customer support tooling, and fraud and security vendors. Service providers may use the information only to perform services for us.
6.2 Between buyers and Sellers. StoryToShop is the settlement merchant for card transactions on the marketplace, so your payment information is processed by StoryToShop and Stripe rather than by the Seller. When you place an order, we give the Seller the information needed to fulfill it and provide customer service. Sellers are bound by Section 20 of the Seller Agreement, which limits what they may do with that information — they may not sell it, rent it, add you to unrelated marketing lists, or send you unlawful marketing.
6.3 Marketplace transparency. Once a Seller reaches the statutory thresholds under the INFORM Consumers Act, we disclose the Seller's verified business contact information as federal law requires.
6.4 Legal and regulatory. Tax authorities including the Texas Comptroller of Public Accounts, and regulators, courts, or law enforcement responding to valid legal process. Where we are legally permitted to do so, we make reasonable efforts to notify the affected Seller before disclosing their information.
6.5 Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Policy continuing to apply.
6.6 With your direction or consent. Where you ask us to share information with someone else.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
7. Your Privacy Rights
Depending on where you live, you may have the right to:
- Know and access the personal information we hold about you;
- Correct inaccurate personal information;
- Delete personal information, subject to the exceptions in this Section;
- Obtain a portable copy of information you provided to us;
- Opt out of the sale of personal information, sharing for targeted advertising, and profiling with significant effects — noting that we do not sell or share personal information for these purposes; and
- Not be discriminated against for exercising these rights.
How to make a request. Email privacy@storytoshop.ai with your request and the email address associated with your account. We will verify your identity before acting, and we will respond within the period required by applicable law.
Appeals. If we decline your request, you may appeal by replying to our decision or writing to privacy@storytoshop.ai with the subject line "Privacy Appeal." We will review the appeal and respond in writing with our decision and the reasons for it. If the appeal is denied, you may contact your state Attorney General to submit a complaint.
Limits on deletion. Some records cannot be deleted on request because we are required to keep them or because deleting them would destroy evidence of an agreement or a transaction. These include contract acceptance and audit evidence (Section 4), transaction and tax records, identity verification records required by the INFORM Consumers Act, and records subject to a legal hold. Where we cannot delete a record, we tell you which record and why, and we delete everything else covered by your request.
Authorized agents. You may designate an agent to make a request on your behalf, with proof of authorization.
8. Sensitive Information
We do not knowingly collect sensitive personal information beyond what is necessary to operate the platform and meet legal obligations — for example, government identification numbers collected for identity verification under the INFORM Consumers Act or by Stripe for payment compliance. We do not use sensitive information for advertising or profiling.
9. Children
StoryToShop is not directed to children. Sellers must be at least eighteen years old. We do not knowingly collect personal information from children under thirteen. If we learn we have, we delete it. Contact privacy@storytoshop.ai if you believe a child has provided us information.
10. Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember preferences, secure the platform, measure performance, and understand how the marketplace is used. Essential cookies are required for the site to function. You can control non-essential cookies through your browser settings or through the cookie controls we provide.
We honor Global Privacy Control and similar browser-based opt-out signals where applicable law requires it.
11. Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, including encryption in transit, access controls, multi-factor authentication for accounts, and monitoring. No system is perfectly secure. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by law.
12. Where Information Is Processed
StoryToShop operates in the United States and processes personal information in the United States. At launch, StoryToShop is offered only to Sellers located in the United States.
13. Changes to This Policy
We may update this Privacy Policy. When we make a material change, we will update the version number and effective date above and notify Sellers by email or through the platform before the change takes effect. Prior versions are retained and available on request.
14. Canonical Route
/legal/privacy is the canonical public privacy route. /privacy issues a permanent redirect to /legal/privacy to maintain link compatibility.
15. Contact Us
StoryToShop LLC
Attn: Privacy
Spicewood, TX 78669
privacy@storytoshop.ai
Privacy requests and questions: privacy@storytoshop.ai