Privacy Policy
Last updated: April 14, 2026
Storyteller AI Inc. (hereinafter "the Company") recognizes the importance of protecting personal information and handles it appropriately in compliance with the EU General Data Protection Regulation (GDPR) and the Japanese Act on the Protection of Personal Information.
Table of Contents
- 1. Data Controller Information
- 2. Types of Personal Data Collected
- 3. Legal Basis for Data Processing
- 4. Purposes of Data Use
- 5. Data Retention Period
- 6. Data Sharing (Third-Party Disclosure)
- 7. Data Transfers Outside the EU
- 8. Your Rights (GDPR Articles 15-22)
- 9. Data Protection Officer (DPO)
- 10. Right to Lodge a Complaint
- 11. Automated Decision-Making
- 12. Cookies and Tracking Technologies
- 13. Security Measures
- 14. Changes to This Policy
1. Data Controller Information
Company Name: Storyteller AI Inc.
Address: 7F N&E BLD., 1-12-4 Ginza, Chuo-ku, Tokyo 104-0061, Japan
Representative: CEO Hidetsugu Yui
Contact: contact@storytlr.ai
Website: https://www.storytlr.ai
2. Types of Personal Data Collected
We may collect the following personal data:
2.1 Information Directly Provided
- Name, email address
- Phone number (optional, form submissions only)
- Company name, department, job title
- Inquiry details, requests
- Service usage information
2.2 Information Automatically Collected
- IP address, browser type, language settings
- Access date/time, referral URL
- Device information (OS, screen size, etc.)
- Cookie ID, advertising identifiers
- Page views, click behavior, time spent on site
3. Legal Basis for Data Processing (GDPR Article 6)
We process data based on the following legal grounds:
- Consent (Article 6(1)(a)): When you have given explicit consent (e.g., marketing email subscriptions)
- Performance of a Contract (Article 6(1)(b)): When necessary for the provision of services
- Legitimate Interests (Article 6(1)(f)): Service improvement, security maintenance, fraud prevention
- Compliance with Legal Obligations (Article 6(1)(c)): When fulfilling obligations required by law
4. Purposes of Data Use
- Provision, operation, and improvement of services
- Responding to inquiries
- Providing service-related information (newsletters, seminar announcements, etc.)
- Usage analysis and statistical processing
- Fraud prevention and security maintenance
- Legal compliance and dispute resolution
- Customer support and troubleshooting
5. Data Retention Period
We retain data for the following periods:
- Inquiry Data: 3 years after resolution
- Contract/Transaction Data: 7 years after contract termination (legal obligation)
- Access Logs: Up to 2 years
- Cookies: Up to 2 years (varies by type)
- Marketing Consent: Until consent is withdrawn, or 3 years from last interaction
After the retention period, data is securely deleted or anonymized.
7. Data Transfers Outside the EU
Our company is based in Japan, and some of our service providers are located outside the EU (e.g., United States, Japan). For data transfers outside the EU, we implement the following appropriate safeguards:
- Standard Contractual Clauses (SCCs): Execution of contractual clauses approved by the European Commission
- Adequacy Decisions: Transfer to countries recognized by the European Commission as providing an adequate level of protection
- Explicit Consent: Your explicit consent
For details about data transfers, please .
8. Your Rights (GDPR Articles 15-22)
If you reside in the European Economic Area (EEA), you have the following rights:
8.1 Right of Access (Article 15)
The right to access your personal data held by us and obtain a copy
8.2 Right to Rectification (Article 16)
The right to request correction of inaccurate or incomplete personal data
8.3 Right to Erasure / Right to Be Forgotten (Article 17)
The right to request deletion of personal data under certain circumstances
8.4 Right to Restriction of Processing (Article 18)
The right to request temporary suspension of data processing
8.5 Right to Data Portability (Article 20)
The right to receive data in a structured, machine-readable format and transfer it to another controller
8.6 Right to Object (Article 21)
The right to object to processing based on legitimate interests or direct marketing
8.7 Rights Related to Automated Decision-Making (Article 22)
The right to object to automated decision-making, including profiling
To exercise these rights, please contact us via our or contact@storytlr.ai. We will respond within one month.
9. Data Protection Officer (DPO)
For inquiries regarding data protection, please contact our Data Protection Officer:
Name: [Data Protection Officer Name]
Email: dpo@storytlr.ai
Inquiries are accepted via email.
10. Right to Lodge a Complaint
If you have concerns about our data processing, please contact us first. You also have the right to lodge a complaint with the supervisory authority in your country of residence.
Japan: Personal Information Protection Commission (PPC)
https://www.ppc.go.jp/
EU: National Data Protection Authorities (DPAs)
List of EDPB Members
11. Automated Decision-Making and AI Use
We do not currently engage in fully automated decision-making or profiling that produces legal or similarly significant effects on our customers. Should we implement such processing in the future, we will, in accordance with GDPR Article 22 and EU AI Act Article 86, provide clear advance notice, obtain explicit consent, maintain Human-in-the-Loop review, and guarantee the right to explanation.
For details on the AI systems we provide and use, transparency principles, prohibited practices, high-risk restrictions, and hallucination disclosures, see ourAI Usage Policy.
13. Security Measures
We implement the following technical and organizational measures to protect personal data:
- Communication protection through SSL/TLS encryption
- Access control and permission management
- Regular security audits
- Regular security training for employees
- Data breach notification processes
- AI governance framework compliant with ISO/IEC 42001:2023
In the event of a data breach, we will notify the supervisory authority within 72 hours and promptly inform affected customers.
14. Changes to This Policy
We may update this policy in response to changes in laws or improvements to our services. For significant changes, we will notify you via our website or email.
We recommend reviewing this page periodically.