HAPPY ALIEN AI ยท STORYDRAFT
Privacy Policy
How Happy Alien AI handles information when you use StoryDraft.
Last updated: October 19, 2026
Who we are
Happy Alien AI operates StoryDraft. For privacy questions or requests, contact support@happyalien.ai. This policy covers the StoryDraft website and conversion service. It does not cover how you distribute or collect learner information through courses you publish elsewhere.
Information we process
We process your account email and authentication information; uploaded documents, images and extraction packages; extracted text and metadata; your course settings and review choices; AI interpretations; generated projects and reports; subscription status, payment references and usage counts; and messages you send to support. Operational records can include IP addresses, request details, timestamps, errors and security events. Files may contain personal information, so remove information that is not needed for your course before uploading.
How we use information
We use information to authenticate users, process and store conversions, provide downloads and support, manage subscriptions and plan limits, prevent abuse, diagnose failures and maintain the service. Where applicable law requires a legal basis, these activities rely on providing the requested service, legitimate interests in operating and protecting it, compliance with legal obligations, or consent where required.
AI processing
Course preparation can send source text, narration scripts, question content, image references and relevant images to OpenAI. Image analysis can send images and available context to Google Gemini. AI preparation may run automatically when available; you should not assume that uploaded material stays solely on StoryDraft's servers. Provider processing and retention depend on the applicable provider terms and account settings. We do not promise zero provider retention or make a blanket promise about provider training use. Review OpenAI's privacy information and Google's privacy information. Contact us before uploading material with special confidentiality or data-processing requirements.
Service providers and other disclosures
We use Render for hosting and file storage, Supabase for account authentication, Stripe for payment processing, OpenAI and Google for AI features, and PostHog (US hosting) for usage analytics. Email delivery and network infrastructure providers may also process information needed to deliver the service. Providers receive information relevant to their functions. Payment details are entered through Stripe; StoryDraft receives subscription and transaction information rather than storing full card numbers. We may disclose information when required by law, to protect users and the service, or in connection with a business transfer subject to applicable privacy obligations. Uploaded courses are not made public by default.
Browser storage
StoryDraft uses browser local storage and session storage to maintain sign-in sessions, remember a selected plan, restore course review choices and resume a conversion. Clearing this storage can sign you out or remove saved local choices. Service providers may use their own cookies or similar technologies when you interact with their services. We use PostHog (US hosting) to understand page visits, signup, app use, uploads, builds and download requests. Before sign-in, these events use a random browser identifier. We save your first visit's campaign labels (utm_source, utm_campaign and utm_content) and referring website origin in local storage and attach them to later events. We do not send referrer paths or query strings. After sign-in, we link earlier browser activity to your account ID and send your account email to PostHog as a person profile property. We also send an internal/test-user flag calculated from an email allowlist so we can exclude our own testing from reports. Signing out resets the browser analytics identifier and saved attribution for the next user. Clearing browser storage also clears these values. These analytics exclude uploaded content, filenames, course titles, author prompts and raw error messages. Build failures carry only a bounded error category. We deliberately disable GeoIP processing and do not forward your browser IP address or user agent to PostHog. We do not enable session recording or automatic click tracking. Browser analytics are disabled when your browser sends Do Not Track or Global Privacy Control. Separately, we record server-side AI usage metrics, including model, token counts, processing time and estimated cost, in PostHog to manage operating costs. These metrics do not include prompts, responses or uploaded content. When a conversion has an allowed browser analytics context, server-side metrics use the same browser or signed-in account identifier and campaign labels as product events. Without that context, AI cost metrics use an aggregate service identifier instead of a visitor identifier. Signup measurement keeps a separate record of new account IDs and completion status to avoid counting repeat logins as new signups; pending records also keep first-visit attribution until confirmation.
Retention
Conversion files are temporary. The current application default is a 24-hour conversion retention period; the configured period can vary. Download and keep the files you need. Expired jobs are scheduled for cleanup, and you can delete a conversion from your account. Cleanup is not a promise of immediate removal from every backup or provider system. Account, billing, security, support and failed-job diagnostic records are separate from conversion files and may remain longer for service operation, legal obligations and dispute resolution. Provider retention follows the applicable provider arrangements. Contact us to request account deletion or ask about retained information.
Your choices and requests
You can edit course choices, download available outputs, delete conversions and manage your subscription. Email support@happyalien.ai to request account closure, access, correction, deletion or an export of personal information, or to object to or restrict processing where applicable law provides those rights. We may need to verify your identity and retain records where legally required. Depending on where you live, you may also complain to a privacy regulator. Deleting a conversion does not delete your account or cancel billing.
Security and international processing
We use account access controls and other safeguards to protect information, but no system is completely secure. Our providers may process information in countries other than yours, including the United States. Contact us if your organization needs specific processing locations or contractual safeguards before using the service.
Children and updates
StoryDraft is intended for adult course authors, not children. Do not create accounts for children or upload unnecessary student personal information. If you believe a child has provided personal information through an account, contact us. We will update this policy as practices change, revise the date above and provide notice of material changes through the service or account email as appropriate.