Privacy Policy

Operator and scope

LEE DAEUK (trade name: Storism, hereinafter the "Operator") applies this policy to information handled through the Storism website, Storism Studio, the Storism widget, related APIs, and support.

Personal information handling business operator

LEE DAEUK (trade name: Storism)

Address

The address will be disclosed without delay upon request through the contact information at the bottom of this page.

Contact for requests and complaints

Requests and complaints are accepted through the contact information at the bottom of this page.

Information collected or processed

We collect or process the following information when you use Studio, the landing page, or the widget.

• Account, company, team, and settings information.
• Stories, media, products, and widget settings you register.
• Subscription, invoice, and payment status information. Stripe handles payment card details; Storism does not store them.
• Landing page visits, demo interactions, sign-up clicks, and an analytics identifier.
• Widget installation site, display, playback, and click events, an analytics identifier, and error or performance information.
• Information included in support inquiries and email communications.
• IP address, browser information, and access, request, and error logs needed to operate and protect the service. These are handled separately from widget analytics events.

Purposes of use

We use this information for the following purposes.

• Providing accounts, widgets, content management, and support.
• Processing payments, subscriptions, notices, and inquiries.
• Measuring use of the landing page and widgets and improving the service.
• Preventing misuse, protecting security, and complying with legal obligations.

Transmission to external services, outsourcing, and handling outside Japan

We use external providers to operate the service. They may handle information as our processors or under their own policies.

Even when we use facilities in Japan, providers or their subcontractors may store, process, or access information outside Japan.

• Supabase: authentication, database, and API. The main database is in Japan, but processing outside Japan may occur.
• Vercel: website hosting and operational logs. Main server processing is in Japan, but processing outside Japan may occur.
• Upstash: request limits and misuse prevention. Main storage is in Japan, but handling outside Japan may occur.
• Cloudflare R2: storage of media and billing or accounting records. Storage is not limited to Japan.
• Cloudflare Turnstile: bot verification for registration and login. Information may be handled outside Japan.
• Stripe: payments, invoices, and subscriptions. Handling outside Japan may occur.
• Resend: authentication and billing emails. Sending is processed in Japan; account information and email records are stored in the United States.
• Google: receipt and storage of support email. Handling outside Japan may occur.

Provision to third parties

The Operator does not sell or provide personal data to third parties except with the individual's consent, where required by law, or where otherwise permitted by law. Handling through the external services listed above that does not constitute provision to third parties under applicable law, such as outsourcing, is not included in this restriction.

Retention and deletion

We retain information for as long as needed to provide the service, meet legal obligations, and handle billing, disputes, and security matters. Information no longer needed is deleted or anonymized.

Cancelling a paid plan does not delete the account or registered content. Even after account deletion, legally required records and backups may remain for a necessary period.

Security measures

We limit authorized personnel, manage authentication and access rights, protect devices, review access logs, and oversee service providers. Details are available on request to the extent disclosure does not undermine security.

Cookies and sessions

Studio uses cookies to maintain login sessions. Some features may be unavailable when cookies are disabled.

Analytics identifiers for the landing page and widget are generated in the browser and are not stored in cookies or localStorage.

Information for users who install the widget

Users who install the widget should provide visitors with any notice or consent required by the law applicable to their website, including notice of widget analytics and external services.

Requests for disclosure, correction, and deletion

You may request notice of purposes of use, disclosure, correction, addition, deletion, suspension of use, erasure, cessation of third-party provision, or disclosure of third-party provision records by contacting us below. We do not charge a fee for requests.

We may request the minimum information needed to verify your identity or a representative’s authority. We will respond under applicable law and notify you of any legally required reason if a request cannot be fulfilled.

Revisions

We will publish revisions on this page and notify users when required by law or the nature of the change.