Privacy Policy

Who we are

StorySell System is offered by Salto Innovation Kft., Andrássy út 45, 2. em. 1a, 1061 Budapest, Hungary (company registration number 01-09-397386), "Salto Innovation", "we" or "us". We are the controller of the personal data described here. For any privacy question or request, write to contacto@saltoinnovation.com.

StorySell System is built, hosted and run for us by JT Digital d.o.o., a company registered in Slovenia, which processes personal data only on our instructions under a data processing agreement.

Data we collect

• Account data: your name, email address and password. Passwords are stored only as secure hashes; we cannot read them. Password reset and email change links use short-lived tokens. If you tick the newsletter box at sign-up, we also record when you gave that consent.
• Billing data: the plan you buy, your payments and refunds, and your subscription's status and renewal date. Stripe, our payment provider, collects your card details, billing address and any tax ID at checkout. We never see or store your full card number.
• Your content: the product materials you upload (images, documents, plain text), the product links you paste and the pages we fetch from them, the brand and product facts you enter or edit, the strategies and other output generated from them, and any comments or feedback you leave in the app.
• Usage data: the products and strategy versions you create, so we can apply your plan's limits.
• Beta application, if you applied to the beta: name, email address, best contact (for example a WhatsApp number), whether you work as an agency or a brand owner, how many brands you manage, the marketplaces you sell on, a product listing URL, how you brief design work today, who executes your designs, your monthly capacity, your agreement to give feedback, and your reasons for joining.
• Technical data: IP addresses and request details in server logs, used to rate-limit sign-in and public forms, keep the service secure, and fix problems.
• Analytics and advertising data, only if you accept cookies: the pages you visit and how you use them (including clicks, scrolling and mouse movement, recorded by Microsoft Clarity), the ad that brought you, your device and browser, and the identifiers in the cookies listed on our Cookie Policy page.

StorySell System does not need special categories of personal data (such as health data) or other people's personal data. Please leave them out of what you upload.

How we use your data, and why

Each purpose rests on a legal basis under the GDPR:

• Creating and running your account, generating your strategies and applying your plan: performance of our contract with you (Article 6(1)(b)).
• Taking payments, issuing invoices and keeping accounting records: performance of the contract, and our legal obligations under tax and accounting law (Article 6(1)(c)).
• Transactional email, such as password resets, email change confirmations, notices about your plan and, for beta testers, invitations and reminders: performance of the contract.
• Our newsletter, sent only if you ticked its box at sign-up: your consent (Article 6(1)(a)). You can withdraw it at any time through the unsubscribe link in every newsletter or by writing to contacto@saltoinnovation.com, and withdrawing does not affect your account.
• Keeping the service secure, preventing abuse, rate limiting and troubleshooting: our legitimate interest in a safe, working service (Article 6(1)(f)).
• Improving StorySell System from the feedback you give and from how its features are used: our legitimate interest in improving the product. This never includes training AI models on your content.
• Measuring visits to our site and the results of our advertising, and showing our ads to past visitors, through Google, Meta and Microsoft Clarity: your consent, given in the cookie banner (Article 6(1)(a)). You can withdraw it at any time on our Cookie Policy page.
• Reviewing beta applications: steps taken at your request before entering a contract.
• Establishing or defending legal claims: our legitimate interest.

AI processing

Reading your materials and writing your strategies means processing your content with AI models. Some run on infrastructure operated by JT Digital d.o.o. in the European Union; others are provided through the APIs of OpenAI and Anthropic. Your content is sent only to produce your results, and our providers are not permitted to use it to train their models. They may keep it for a short period to detect abuse, under their data processing terms.

AI output is generated automatically, but no decision with legal or similarly significant effects on you is made by automated means.

Who we share data with

We never sell personal data. Data reaches only the providers we need to run StorySell System, each acting on our instructions under a data processing agreement:

• JT Digital d.o.o. (Slovenia): builds and operates StorySell System, its transactional email and the AI models it runs itself.
• NEOSERV d.o.o. (Slovenia): the servers that run StorySell System and its database, and the mailbox our email is sent from, on behalf of JT Digital.
• Hetzner Online GmbH (Germany): storage for the files you upload, and the servers for the AI models and page fetching JT Digital runs itself, on behalf of JT Digital.
• OpenAI and Anthropic (United States): AI processing, as described above.
• fal (Features and Labels, Inc., United States): video generation from product images, used only when we make a video for you.
• Stripe: payments, invoices and the billing portal. Stripe is also an independent controller for some payment data, for example to prevent fraud and meet its own legal obligations, under its own privacy policy.
• Google: the web fonts on our pages are loaded from Google Fonts, so your browser sends your IP address to Google when a page loads. Google sets no cookies for this.

If you accept analytics and advertising cookies, data about your visit also goes to Google (Google Tag Manager, Google Analytics and Google Ads), Meta Platforms (the Meta Pixel) and Microsoft (Clarity). Google and Meta also use it as independent controllers under their own privacy policies, for example to show our ads to people who visited our site. If you do not accept, none of these tools is loaded.

We may also disclose data to our professional advisers, or to authorities when the law requires it.

Transfers outside the EU

StorySell System's servers, database and stored files are all in the European Union. OpenAI, Anthropic, fal, Stripe, Google, Meta and Microsoft may process data in the United States. Where a recipient is certified under the EU-U.S. Data Privacy Framework, the transfer relies on the European Commission's adequacy decision; otherwise it relies on the European Commission's standard contractual clauses. You can ask us for a copy of the safeguards that apply.

How long we keep it

• Account data and your content: for as long as your account exists, including while a plan has lapsed and your workspace is read-only. You can delete your account at any time from the Account page; we then remove your data within 30 days, and backups rotate it out after that.
• Billing and accounting records: 8 years, as accounting law requires. They are kept even after you delete your account.
• Your newsletter consent record: for as long as your account exists.
• Beta applications that do not lead to an account: deleted no later than 12 months after submission.
• Password reset and email change tokens: they expire within hours and are then removed.
• Server logs: trimmed automatically once they reach a fixed size, so they hold only recent activity.
• Analytics and advertising cookies: for the durations listed on our Cookie Policy page, unless you delete them sooner. Google, Meta and Microsoft keep the data they collect under their own retention periods.

Your rights

Under the GDPR you can ask us for access to your data, correction, deletion, restriction of processing, and a portable copy. You can object to processing based on our legitimate interest, and withdraw consent at any time without affecting what happened before. You can see and change most of your account data, or delete your account, on the Account page. For anything else write to contacto@saltoinnovation.com and we will respond within a month.

You can also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH, Falk Miksa utca 9-11, 1055 Budapest, naih.hu) or with the supervisory authority where you live or work.

Security

Connections to StorySell System are encrypted, passwords are stored only as secure hashes, sign-in and public forms are rate-limited, and access to the production systems is limited to the people who run the service.

Who StorySell System is for

StorySell System is a service for businesses and is not meant for anyone under 18.

Changes to this policy

When our data practices change we will update this page and the date at the top. Account holders will be told about significant changes by email.