Privacy Policy
Last updated: 2026-09-21
This Privacy Policy explains how Story Story ("we", "us" or "our") handles personal data when you visit story-story.co, create an account or use our social media monitoring service.
1. Who to contact
Story Story is responsible for the personal data used to manage its website, customer relationships and accounts. For any privacy question or request, contact [email protected].
When customers use Story Story to monitor social media accounts, they are responsible for determining the purpose and lawful basis of their monitoring. Our role in handling that content depends on the service provided and the applicable agreement with the customer.
2. Information we collect
Depending on how you use Story Story, the information processed may include:
- Account information: your name, work email address, company, account credentials and subscription details.
- Billing information: information needed to manage your subscription, payments and invoices.
- Support messages: information you provide when contacting us, including the content of your request.
- Service content: social media usernames, profiles, stories, posts, reels, videos and associated metrics collected from the platforms you choose to monitor, as well as your workspace settings and reports. This content may include personal data about people who do not have a Story Story account.
- Technical and usage information: IP address, browser and device information, pages visited, referral sources, campaign parameters and cookie identifiers.
We receive information directly from you, through your use of our website and service, and from the social media platforms or integrations used to deliver the features you request. Required fields are identified during signup; without that information, we may be unable to create your account or provide the requested service.
3. Why we use personal data
We use personal data to create and manage accounts, provide monitoring and reporting features, administer subscriptions, respond to support requests, maintain security and understand how our website is used.
Depending on the activity, the legal basis is performance of our contract with you, compliance with legal obligations, our legitimate interests in securing and improving the service and managing business communications, or consent where required. Where we rely on legitimate interests, those interests must be balanced against your rights. You may withdraw consent at any time, without affecting processing already carried out lawfully.
4. Cookies and analytics
Cookies and similar technologies can support account sessions, service functionality and audience measurement. You can manage or delete cookies through your browser settings. Blocking necessary cookies may affect access to some features.
Our marketing website uses Mixpanel to measure page views, clicks on signup links and referral and campaign attribution. Its configuration uses a cookie on the story-story.co domain and sends analytics to Mixpanel's EU endpoint. Recorded properties include visited pages, referring pages, campaign parameters and the text and placement of signup links clicked. Automatic interaction capture and session recording are disabled on the marketing website.
Analytics cookies are subject to consent requirements where applicable. Browser controls do not replace any consent required by law. For questions about analytics or to request that we stop processing identifiable analytics data about you, contact [email protected].
5. Who receives personal data
Data may be accessed by the people who operate and support Story Story and by service providers needed for hosting, infrastructure, billing, communications and analytics. If you enable an integration or share content with your workspace, relevant information is made available to the selected service or recipients.
We may also disclose information where required by law or necessary to establish, exercise or defend legal claims. Third-party platforms and connected services apply their own privacy policies to processing under their control.
6. International transfers
Depending on the providers and integrations involved, personal data may be processed outside your country. Where data protection law requires safeguards for an international transfer, these may include an adequacy decision or approved contractual safeguards. Contact us for information about the destinations and safeguards applicable to your data.
7. How long data is kept
Retention depends on the purpose and type of information. Account data is needed for the duration of the customer relationship; monitored content is subject to the retention period of your subscription. Support records are kept for the time needed to resolve and follow up on requests. Billing records may need to be retained to meet accounting and tax obligations.
Security, dispute resolution and other legal obligations may justify keeping limited information after an account closes. Contact us to request deletion or ask about the retention period applicable to a particular category of data.
8. Your rights
Depending on the law applicable to you, you may have the right to access, correct or delete your personal data, restrict processing, object to processing, and receive certain data in a portable format. These rights are subject to the conditions and exceptions set out in applicable law.
Send requests to [email protected]. Please describe your request and provide enough information for us to locate the relevant data. We may need to verify your identity. If your request concerns content monitored on behalf of a customer, we may need to coordinate with that customer.
You can also lodge a complaint with your local data protection authority, including the CNIL in France.
9. Security and your account
Protect your account credentials and contact us promptly if you suspect unauthorized access. No internet service can guarantee absolute security; avoid sending unnecessary sensitive information in support messages or uploaded content.
10. Children
Story Story is a professional service intended for users aged 18 and over, as described in our Terms and Conditions. If you believe a child has provided personal information directly to us, please contact us so we can investigate.
11. Changes to this policy
We may update this policy as the service or applicable requirements change. The latest version will be available on this page with its updated date. For any questions, email [email protected].