Privacy Policy

Introduction

Welcome to Story Shapers. Our platform exists to connect people through meaningful storytelling, and these terms ensure a respectful and inspiring environment. This project is an invitation to a new way of seeing the world. It is non-denominational, standing for the unity of people beyond polarity. Story Shapers is a project for the people, by the people. Please read the following carefully to understand your rights and responsibilities.

Effective Date: 01 June 2025

Company: Story Shapers Ltd ("Story Shapers", "we", "us")

Short version: We collect the minimum we need to run the Platform, protect the community, and help creators thrive. We don’t sell your data. You can access or correct your info anytime. If something goes wrong, we’ll tell you.

‍

1) Who this is for

‍
• Creators – people who submit media to publish.
• Viewers/Users – anyone who visits, watches, comments, follows, or buys a subscription/course (if/when offered).

⸻

2) The information we collect

‍

2.1 You give us
• Account & profile: name/handle, email, password, bio/links, avatar.
• Creator submissions: media files, titles/descriptions, tags, contributor names, releases/permissions where relevant.
• Community activity: comments, messages, likes, reports/flags.
• Payments (if/when offered): handled by our payment processor; we don’t store full card numbers (we see transaction IDs/status only).
• Support: messages you send to us and any files you attach.

2.2 We collect automatically
• Log & device data: IP address, device/browser type, timestamps, pages viewed, basic diagnostics.
• Cookies or similar: to keep you logged in, remember preferences, and measure what’s working. See Cookies below.

2.3 We receive from others (sometimes)
• Service providers: payment status, email delivery/engagement, CDN/streaming performance.
• Public sources: your public social handle/URL if you link it.

⸻

‍

3) Why we use your information (and our good-faith reasons)

‍
• Run the Platform: accounts, streaming, moderation, security, uptime.
• Publish & amplify creator work: hosting, formatting (clips/thumbnails/captions), promotion on our channels.
• Community safety: prevent spam, fraud, abuse; handle reports and takedowns.
• Comms: account notices, new releases, product updates, newsletters (only if you opt in).
• Insights: understand what content resonates to improve the experience (in aggregate, not to profile individuals).
• Legal & compliance: record-keeping, contractual obligations, responding to valid legal requests.

We do not sell personal information. Period.

⸻

4) Where we store and process data

‍
• Primary storage: local encrypted hard drives under Story Shapers’ control (Aotearoa New Zealand).
• Streaming/CDN: we use Bunny.net to deliver video/files quickly worldwide. That means your content or technical data may be cached or routed through servers outside NZ so playback is fast. See Bunny’s privacy materials for how they safeguard data.  

⸻

5) Cookies & similar tech (keep it simple)

‍
• Essential cookies: sign-in, security, load balancing. Required for the site to work.
• Preferences: remember settings (e.g., volume, captions).
• Analytics: privacy-respecting measurement to see what’s working (no creepy cross-site tracking).
• Your choices: you can block cookies in your browser; essential cookies may be required to log in. We’ll offer a banner/controls where the law requires it.

⸻

6) Sharing your information (when and with whom)

We share only what’s needed to run the Platform:
• Vendors/processors: hosting/storage, CDN/streaming (Bunny.net), email delivery, analytics, customer support, payments. Contracted to use data only for our services.
• Legal/safety: if we must comply with law, protect someone’s safety, or defend our rights.
• Business changes: if we restructure, merge, or sell parts of the business, we’ll ensure your rights travel with your data and we’ll notify you.

We don’t sell or rent your personal information.

⸻

7) Creators: your media & personal data

‍
• You own your media (see our Terms). We process files and related info to host, display, repurpose for social formats, and promote within our mission.
• We avoid edits that distort meaning; major editorial changes are discussed first (see Terms).
• If you withdraw media, we’ll remove it from our Platform and channels within 30 days (backups and third-party caches may linger briefly).
• We don’t use your media or personal data to train AI models unless you explicitly opt in.

⸻

8) Your rights & choices

‍
• Access & correction: You can ask for a copy of your personal info and request corrections. We’ll respond within a reasonable time as NZ law requires.  
• Deletion: Ask us to delete account info we no longer need (we’ll keep what’s legally required, e.g., transaction records).
• Marketing opt-out: Unsubscribe in any email or adjust your settings.
• Creators: you can request media takedown as per our Terms.

If you’re in the EU/UK, you may also have rights to object/restrict processing and data portability. Contact us and we’ll help, or reach out to your local data authority.

⸻

9) Data retention (how long we keep things)

‍
• Account data: while your account is active; if inactive, we aim to delete or anonymise after 24 months.
• Logs & analytics: typically 12 months (shorter where feasible).
• Backups: encrypted, rolling up to 90 days.
• Legal/financial records: as required by law (usually 7 years in NZ).
• Creator media: while published; removed within 30 days of withdrawal.

⸻

10) Security (what we do + honest limits)

‍
• Encryption in transit, restricted admin access, least-privilege permissions, monitored infrastructure, and vetted vendors.
• Bunny.net provides network-level security and global delivery protections.  
• No system is perfect. If we detect a notifiable privacy breach, we’ll notify affected people and the NZ Privacy Commissioner as required (the Commissioner expects notice within about 72 hours of becoming aware).   

⸻

11) Children

You must be 13+ to use the Platform. If you’re under 18 and submitting media, get consent from a parent/guardian. If we learn we’ve collected personal info from someone under 13 without consent, we’ll delete it.

⸻

12) International users

We operate from Aotearoa New Zealand. By using the Platform, you understand your information may be transferred to, stored in, or processed in countries where our providers (like a global CDN) operate. We take steps to protect it and only work with providers who commit to strong privacy and security.  

⸻

13) Complaints & your privacy rights in NZ

If you’re in New Zealand and have concerns, you can contact the Office of the Privacy Commissioner. We genuinely try to resolve issues directly first. (The NZ Privacy Act 2020 sets out the principles for collecting, using, and disclosing personal info.)  

⸻

14) Changes to this Policy

We’ll update this page when we make material changes and, where practical, email registered users/creators. We’ll date changes at the top. If you keep using the Platform after changes take effect, that means you accept the updated Policy.

⸻

15) Contact us

‍
• Privacy & data requests: contact@storyshapers.org
• General: contact@storyshapers.org
• Takedowns: contact@storyshapers.org

Please include your account email and enough details for us to help you quickly.