Privacy Policy

Effective Date: [2026.04.07]

Introduction

Welcome to the StoReel Canvas platform (hereinafter referred to as the "Platform" or the "Service"). This Privacy Policy details how we collect, use, disclose, and protect your personal information when you visit our website or otherwise interact with us. We highly value your privacy and security. By accessing or using this Service, you signify that you have read, understood, and agreed to the terms of this Privacy Policy. Please note that this policy does not apply to any third-party products or services, which are governed by their own privacy policies.

Article 1: Types of Information We Collect and Channels of Collection

When you use our Service, we collect data through the following channels:

  • Information You Actively Provide:
    • Account and Communication Information: Including your username, nickname, password, email address, and phone number. When you contact our support team, we collect the content of your messages and communication details.
    • Payment Data: Transaction confirmation records required when purchasing paid services. Full payment card data will be securely processed and stored directly by professional third-party payment service providers (such as Stripe and Antom); we do not retain such sensitive financial data.
    • User-Generated Content (UGC): Profiles, images, videos, and prompts that you create, upload, or generate through the Service.
    • Compliance Warning: Users are strictly prohibited from uploading highly sensitive Personally Identifiable Information (PII) belonging to themselves or others, or any data that may endanger the public interest; if a dispute arises due to a violation of applicable laws, the user shall bear full legal responsibility.
  • Automatically Collected Information:
    • To maintain and optimize the Service, we automatically collect device and usage data, including IP addresses, browser types, operating systems, mobile carriers, language preferences, time zones, device identifiers, network types, screen resolutions, interaction logs, and referring URLs.
    • We use Cookies and similar tracking technologies to maintain account login status (essential function Cookies) and analyze visitor behavior to optimize performance (performance Cookies).
  • Information from Third Parties: * If you register or log in using a third-party social media account such as Google, we may obtain your name, email address, and public profile information. We may also obtain information from public or commercial sources, such as marketing partners.

Article 2: Purposes and Methods of Processing Information

We use the collected information for the following business purposes:

  • To provide, maintain, and improve our core services and features, process subscriptions, and deliver content.
  • To conduct necessary service communications with you and provide customer support.
  • To ensure platform security and prevent fraud and malicious behavior.
  • AI Model Optimization: After implementing strict aggregation and de-identification (irreversible anonymization) measures, we may use these datasets for technical research and business analysis to continuously train and enhance our artificial intelligence models and service performance.
  • If you use the invitation feature, we will use the invitee's contact information to send an invitation (you must ensure that you have obtained the other party's authorization).

Article 3: Information Sharing and Disclosure

We explicitly promise: We never sell your personal data. However, to the extent permitted by law, we may share your information in the following circumstances:

  • Service Providers: Sharing with third parties bound by confidentiality obligations, such as cloud hosting, data analytics, payment processors, and advertising partners.
  • Professional Advisors and Corporate Affiliates: Sharing with professional advisors such as lawyers and auditors, as well as internally within the corporate group (parent company, subsidiaries) for operational optimization.
  • Legal and Security Requirements: Necessary disclosures made to comply with applicable laws, respond to lawful requests from law enforcement agencies, enforce service terms, or protect the safety and property of the company and the public.
  • Business Transfers: In transactions such as mergers, acquisitions, or asset sales, your data may be transferred as a business asset, and the assignee will be required to adhere to equivalent data protection commitments.

Article 4: Data Security Safeguard Mechanisms

We employ industry-standard technical and organizational security measures, including data transmission and static storage encryption, access controls, and regular security assessments, to protect your data from unauthorized access or modification. Despite these measures, internet transmission cannot be guaranteed to be 100% secure; you must assume the risk of transmission and properly safeguard your password. In the event of a data breach, we will initiate a response mechanism in accordance with the law and take reasonable remedial measures.

Article 5: International Data Transfers and Retention Periods

  • International Transfers: Your personal data may be transferred to and processed and stored in jurisdictions outside your country of residence (for example, our secure servers currently in Singapore). We will implement appropriate safeguards to ensure that data transfers comply with applicable privacy laws.
  • Data Retention: Unless tax or legal requirements mandate a longer retention period, we will only retain your data for the time necessary to fulfill the business purposes outlined in this policy. Upon expiration of the retention period or your termination of the Service, we will delete the data or thoroughly anonymize it.

Article 6: Minors and the Children's Online Privacy Protection Act (COPPA)

Our Service is not directed at minors. In accordance with relevant US laws, you must be at least 18 years old, or at least 13 years old and have the consent of a parent or legal guardian, to use this Service. We never knowingly collect personal information from children under 13. If we discover that we have collected such data without the consent of a legal guardian, we will immediately terminate the Service and take all reasonable steps to delete the relevant information.

Article 7: Your US Privacy Rights

Under the comprehensive privacy laws of certain US states (such as California, Virginia, Colorado, etc.), you may have the following statutory rights regarding your personal data:

  • Right to Know and Access: Request confirmation and obtain a copy of the personal information we hold about you.
  • Right to Rectification: Request the correction of inaccurate or incomplete personal information.
  • Right to Deletion: Request the deletion of your personal data, subject to certain exceptions.
  • Right to Restrict/Opt-Out: Restrict data processing or opt-out of targeted advertising (if applicable).
  • Right to Data Portability: Obtain a structured copy of your data for the purpose of data migration.
  • Right to Non-Discrimination: You will not be discriminated against in the quality or price of the services we provide when you exercise the above rights.
  • Response Time Adjustment: We will typically process your request within 45 days of receiving it and verifying your identity (in accordance with US state law standards). In certain complex situations, we reserve the right to charge a reasonable fee.

Article 8: Policy Modifications and Contact Us

We reserve the right to update this Privacy Policy at any time. Material changes will be posted on the website or notified to you via email, and we will seek your consent prior to implementation. Continued use of the Service signifies your acceptance of the revised terms.

If you have any questions regarding this Privacy Policy, or if you wish to exercise your privacy rights, please email us at: [email protected].

StoReel (Hong Kong) Limited：RM. 517, NEW CITY CENTRE, 2 LEI YUE MUN ROAD, KWUN TONG, KOWLOON., HONG KONG