Soft Story Audio

Optional ad measurement

We use the OpenAI measurement pixel only when you allow ad cookies. It sends page visits, conversion types, product identifiers and, where applicable, amount, currency and deduplication event IDs to OpenAI to measure ads. The SDK stores attribution and browser identifiers in cookies; requests also involve your IP address and browser information. Automatic advanced matching in the OpenAI SDK may normalize and hash supported customer information on the page in your browser for conversion matching. Our tracking code does not include voice scripts, audio files, payment credentials or raw email addresses. The __oppref cookie lasts 30 days after being written and __obref lasts 365 days after creation; browser settings may shorten these periods. Your choice is stored in your browser. Declining through Ad cookie settings on this page or the service stops future measurement and removes the SDK identification cookies. Declining does not limit the service. Events opt out of future user-level personalization. See the OpenAI Privacy Policy for its data handling.

Early access registration data

For early access registration, we record your email, registration time, display language, campaign tags and entry point, a country code estimated by Cloudflare, and a coarse mobile, tablet, or desktop device category. Where configured, we retain hashes of IP and device information to detect duplicates and abuse; we do not store raw IP addresses or user agents in the registration list. We use this information for launch notices, benefit verification, and registration analysis by country and device. With ad measurement consent, we count preregistration page views, form starts, submission attempts and success responses by date and coarse source, country and device categories; this aggregate contains no email, IP address, user agent or visitor identifier. We do not infer categories for earlier registrations. When we send the launch notice, we may record its sending, delivery, or bounce status and update time.

1. Personal Information We Collect

The Company collects and processes the following personal information. (1) Account information: the email address, display name, and Google account identifier provided when you sign in with Google. Google sign-in does not share your Google password with the Company. When an existing email and password account is used, the credentials entered are verified through our authentication provider. (2) Payment information: a payment-provider customer identifier, your order and payment records, and the buyer name, mobile number, and billing country you enter or select at checkout. The buyer name and mobile number are passed to the payment window as required by the card networks and are not stored by the Company; the billing country is retained with the order record as the basis for determining the place of supply for VAT. Card numbers and other payment credentials are collected directly by the payment provider; the Company neither receives nor stores them. (3) Service usage information: the text you enter for speech synthesis, the audio generated from it, and your credit-deduction history. When you use project saving, we also process the project name, script, studio AI conversation, editing settings, saved WAV files and previous synthesis takes. (4) Automatically generated information: an authentication token (HTTP-only cookie) used to keep you signed in, and an API key if you use the API. (5) Support chatbot usage: the messages you enter while using the chatbot (the Company does not separately store these). The Company does not ask you to submit sensitive information. Please do not include it in synthesis text or support messages. Information you choose to submit may be processed to provide the Service; you may request deletion or exercise other rights under Section 6 below.

2. Purposes of Use

The information we collect is used to verify your identity and keep you signed in, to synthesize your submitted text into speech, and to operate and improve the quality of the service. We also use it to save and restore projects and to improve scripts and generate replies through the studio AI assistant. Studio AI conversations are used for research and development only with separate optional consent. However, text submitted on the free plan and the speech generated from it may also be used for research and development to improve synthesis quality, such as quality evaluation and building training data. Text and output from paid plans are not used for this purpose. Regardless of plan, the Company may review and process submitted text, generated audio, account information and usage records only as necessary to assess compliance with laws, regulations and guidelines applicable in Korea and service regions, and with the Terms and Acceptable Use Policy; prevent illegal content, rights violations and abuse; and handle reports and disputes. Processing requires a lawful basis under applicable law. Paid users’ text and output remain excluded from training and research to improve speech-synthesis quality. Scope, retention and user rights are governed by the Privacy Policy.

3. Retention and Destruction

Personal information is destroyed without delay once its collection and use purposes are fulfilled or when a member withdraws their account. Text submitted for speech synthesis and the resulting output are retained only for the period necessary to provide the service and then deleted; electronic files are destroyed by a method that makes them unrecoverable. Saved project scripts, conversations and settings are retained in the server database, and WAV files and previous synthesis takes in private file storage, to save and restore your work. Removing a project from the list does not immediately and permanently erase the retained server data. You may request deletion or exercise other rights using the contact in Section 6. However, text and generated speech from the free plan may be retained beyond that period for the research and development purpose described above. You may ask us to stop such use and delete your records at any time through customer support, and we will act without delay. Compliance review and report or dispute handling are limited to the minimum information relevant to the case, accessible only to personnel authorized for that work. Information retained for a specific report, incident or dispute is kept only as long as needed to resolve that matter and then deleted without delay, except for records and periods required by law. This purpose does not authorize blanket or indefinite retention of every user’s content. Access, correction, deletion and processing-restriction requests are handled under this policy and applicable law.

4. Processing Consignment and Overseas Transfer (as necessary to perform the contract)

To provide the service, the Company entrusts processing to the following parties, and data may be processed overseas in the course of this. This constitutes consignment and storage necessary to enter into and perform the contract under Article 28-8(1)(3) of the Personal Information Protection Act, and disclosure in this policy takes the place of separate consent. (1) Account authentication and database: Supabase, Inc. (USA). Data transferred: email address, name, account identifier, service usage records, project name, script, studio AI conversation, editing settings and audio-storage metadata. Data is stored in the Republic of Korea (Seoul) region, transmitted over encrypted transport (HTTPS) at sign-up, sign-in and project saving or use, and retained until you close your account. (2) Web hosting and file storage: Cloudflare, Inc. (USA). Data transferred: access information, service request data, generated audio files, project WAV files, previous synthesis takes and synthesis job state, sent as you use the service and retained per Section 3. (3) Speech synthesis (AI inference): RunPod, Inc. (USA) and Modal Labs, Inc. (USA). Data transferred: the text you submit, sent at the time of each synthesis request and not retained by those providers once synthesis completes. (4) Support chatbot hosting: Vercel Inc. (USA). (5) Support chatbot response generation (AI): OpenAI, L.L.C. (USA). When you use the support chatbot, the messages you enter are sent to generate responses, and the Company does not separately store those conversations. OpenAI does not use data sent through its API to train its models and deletes it after retaining it for up to 30 days. (6) Studio AI script improvement and response generation: Anthropic PBC (USA). At each AI request, the current script, line text, recent conversation and canvas state, such as the selected voice and editing state, are sent over HTTPS. Project WAV files retained by the Company are not included in this AI request. The provider handles and retains data under the applicable API agreement and data processing policy. (7) Consent-based usage analytics: PostHog. The transmission scope is described in Section 9. Consigned items are kept to the minimum necessary to operate the service, and the Company ensures that processors do not use the data for any other purpose. The Company does not sell personal information. Optional ad measurement is described separately above.

Anthropic data handling notice

5. Overseas Provision to a Third Party for Payment (separate consent)

This section covers international payments handled by Lemon Squeezy as an independent seller (Merchant of Record). Domestic Korean payments use Toss Payments via PortOne and do not send personal data to the international payment provider described here, so this consent is not required for domestic payments. Processing and overseas transfers needed to operate the service are covered in section 4. Where separate consent is required under Article 28-8(1)(1) of the Korean Personal Information Protection Act, we disclose the following and obtain consent before sending information for international checkout. (1) Data transferred: Email address; internal account identifier; selected product information and order and payment records (item, amount, date) (2) Destination, timing, method: United States · when checkout creation is requested and payment is processed · sent over encrypted transport (HTTPS) (3) Recipient: Sold through Link, LLC (f/k/a Lemon Squeezy LLC) (354 Oyster Point Blvd, South San Francisco, CA 94080, USA) · contact https://www.lemonsqueezy.com/privacy (4) Purpose and retention: To process payment, issue receipts, meet tax obligations, and handle refunds and disputes. Retained while the transaction relationship continues and for any period required by applicable law, per Lemon Squeezy’s privacy notice. (5) How to refuse, and the effect: You may refuse. If you refuse, you cannot buy credits or subscribe through Lemon Squeezy international checkout. Free credits and domestic Korean payments remain available without this consent. You may request withdrawal of consent at business@softstorycorp.com.

6. Rights of the Data Subject

You may request access to, correction of, or deletion of your personal information, a halt to its processing, or withdrawal of your consent to overseas transfer at any time by contacting business@softstorycorp.com, and the Company will act on your request without delay.

7. Data Protection Officer

Officer: Youngjae Cheon. Contact: business@softstorycorp.com.

8. Security Measures

The Company applies reasonable technical and administrative safeguards, including access-permission management, encryption in transit and access controls, to prevent the loss, theft, leakage or alteration of personal information.

9. Cookies and Automatic Collection Tools

This site uses an authentication token (an HTTP-only cookie) to keep you signed in. Optional ad measurement follows the separate notice above and is enabled only with consent. Separate usage analytics (PostHog) sends feature codes, numeric measures such as usage counts and elapsed time, and randomly generated identifiers only with consent. It excludes scripts, conversations, project names, audio files, email addresses and URL tokens; automatic screen capture and session recording are disabled. You may refuse cookie storage in your web browser settings, but doing so may limit some features such as signing in.

10. Remedies for Rights Infringement

If you need to resolve a dispute or report an infringement, you may contact the Personal Information Dispute Mediation Committee (kopico.go.kr) or the Privacy Infringement Report Center (privacy.kisa.or.kr, 118).

11. Changes to This Policy

This policy may be revised in line with changes to laws or the service; any changes will be announced on this page.