Privacy Policy

This privacy notice covers all Storiverse services across apps, web, and social media. It explains how personal information is collected and used, who it is shared with, the legal bases for processing, your rights, and how to request data access, deletion, or transfer.

When joining brand Partner Projects, some personal information and content are shared with Partners under their own privacy policies. This notice should be read alongside the Terms of Use.

Storiverse Limited operates these services. The company is registered in England (number 13651972) at 4th Floor, Elevator Studios, 25 Parliament Street, Liverpool, L8 5RN, UK.

The platform enables brands to create videos with participant contributions. Partners are brands that invite submissions for specific projects. When joining a Partner's Project, contact details are shared so Partners can communicate about content use and rights clearance.

Questions about privacy or rights requests can be directed to:

Voluntary submissions

Through service use (cookies, pixels, beacons, log files)

From third parties

Email addresses from employers or authorised third parties, used solely for Project invitations.

Provision of Storiverse service

Registration information creates accounts, verifies identity, and enables service access. Legal basis: contract performance.

Sharing registration data with Partners

Name and email shared with relevant Partners for Project communication and rights clearance. Other registration information available for Partner content review and selection. Legal basis: contract performance and consent when submitting information.

Use of submitted content

Content containing personal information or images is used when Partners use the Project content. May also be used to promote Storiverse and demo functionality. Legal basis: contract performance and legitimate interest. Sensitive personal data use requires consent from content submission, with confirmation that others appearing have consented.

Sharing content with Partners

Submitted content shared with relevant Partners for independent use per Terms of Use and Project-specific Content Terms. Legal basis: contract performance and consent.

Derivative content

Video and image analysis creates transcripts, scene descriptions, emotional tone, and physical trait tags. Information is logged to content rather than users, enabling analysis and searching. Available to Partners for content review and selection. Legal basis: anonymised information requires no basis; non-anonymous uses legitimate interest.

Inviting to Projects

Email addresses from Partners or employers used solely for Project invitations. Legal basis: legitimate interest in providing quality service.

Recommending Projects

User and content information analysed to recommend projects from other Partners. Legal basis: legitimate interest in service quality and user opportunity.

Data analytics and insight

Usage information analysed to understand habits and measure service effectiveness. Anonymised information requires no basis; non-anonymous uses legitimate interest.

Marketing communications

Newsletters and marketing materials sent where consent has been given. Legal basis: user consent.

Third party processors

Personal information shared with processors (server hosts, database managers, technology providers) who cannot independently use data. Legal basis: legitimate interest in quality service.

Service administration

Used to improve services, answer queries, and seek feedback. Legal basis: legitimate interest.

Business administration and legal compliance

Used to comply with legal obligations, enforce rights, protect third-party rights, and support business transitions. May involve sharing with lawyers, accountants, and authorities. Legal basis: legitimate interest for record-keeping and transitions; legal obligation for compliance.

Consent is provided at the point of collection via options offered, by submitting information with a clear understanding of its use, or by contacting us using the details provided.

Storiverse services use cookies and similar technologies. See our Cookie Policy for details on management and deletion.

Amazon Web Services (AWS)

AWS hosts, deploys, and manages mobile app infrastructure. User-inputted data (including personal information) is stored following industry-standard practices. See the AWS Privacy Notice for details.

Heap Analytics

Collects anonymised user behaviour data to optimise experience. See their Privacy Policy for details.

Smartlook

Captures anonymised user interactions (screen recordings, touch events) to identify and resolve issues. See their Privacy Policy for details.

OneSignal

Sends push notifications; may access name for personalisation and collect device, location, and preference data. See their Privacy Policy for details.

MUX

Analyses video performance with anonymised device, playback, and interaction data. See their Privacy Policy for details.

By using Storiverse, you agree to data collection and transmission to these services per their respective policies.

Though UK-based, data may transfer outside the EEA to processors or subcontractors in the USA for business or legal reasons. Transfers are lawful with appropriate security arrangements. Where the European Commission deems protection inadequate, agreements include binding corporate rules or standard terms approved by the Information Commissioner and Commission.

No specific retention period is set. Data is kept only as long as necessary for the purposes for which it was collected, taking into account business relevance and any legal or regulatory obligations.

We are committed to keeping your information secure. Information security policies, rules, and technical measures are in place to protect data from unauthorised access, misuse, disclosure, unauthorised modification, and unlawful destruction or accidental loss. All employees and processors handling personal information are required to maintain confidentiality.

Right of access

Upon request, we will confirm whether we are processing your information and provide a copy. Reasonable fees may apply for additional copies.

Right to rectification

Inaccurate or incomplete information can be corrected. Partners will be notified where possible.

Right to erasure

Data can be deleted in certain circumstances, such as when no longer needed or when consent is withdrawn. Partners will be notified where possible.

Right to restrict processing

Processing can be blocked in circumstances such as accuracy disputes or objections. Data storage continues during any restriction. You will be notified before restrictions are lifted.

Right to data portability

In certain circumstances, you can obtain your personal information in a structured, commonly-used, machine-readable format to reuse or transfer to a chosen third party.

Right to object

You can request that we stop processing your information if we are relying on legitimate interests (unless compelling grounds exist), using it for direct marketing, or using it for research purposes (unless it is a public interest task).

Rights regarding automated decision-making

We do not make decisions based solely on automatic processing or profiling that have a legal or similarly significant effect, except where necessary for the entry into or performance of a contract.

Right to withdraw consent

Where consent is the legal basis for processing, you can withdraw it at any time by contacting us using the details in section 03.

Right to lodge a complaint

Privacy concerns can be reported to the UK Information Commissioner's Office at ico.org.uk/concerns or by calling 0303 123 1113.

We make changes periodically to reflect updates to our services and legal or regulatory requirements. Significant changes will be notified by email. We encourage you to review this notice periodically.

Users must be at least 13 years old. We do not intentionally collect information from under-13s; any such information discovered will not be used without further consent. Users aged 13 to 18 can register, but parental consent is typically required before uploading content and may involve signed consent documents.