Privacy

Privacy Policy

This page explains how StoryAfter handles customer details and story materials, including photos, audio recordings, scripts, and memories used to create personal story videos.

Last updated: 30 April 2026.

Who controls your data

StoryAfter is operated by Codo Digital Ltd, company number 12307247, 128 City Road, London, EC1V 2NX. VAT number: GB312156347. You can contact us at care@storyafter.co.uk.

What we collect

We collect your name, email address, order details, the featured person's name, relationship, story purpose, package choice, tone preference, scripts, memories, review notes, photos, audio recordings, support emails, payment status, Stripe checkout identifiers, and delivery records. Payment card details are handled by Stripe and are not stored by StoryAfter.

How we use information

We use customer information to create and deliver the story video, generate or edit AI image, voice, and video content, provide support, send order emails, prevent misuse, handle refunds or disputes, and meet legal, tax, or accounting obligations.

Our lawful reasons

We use order and customer information because it is needed to provide the service you buy from us. We use some information for our legitimate interests in running, securing, improving, and protecting the service. We keep payment and accounting records where the law requires us to do so. If you give us written permission to use a testimonial, example, or final video in marketing, we rely on that permission.

Living customer data

UK data protection law applies to living people. Information about living customers and other living people in the materials you send is handled as personal data. We restrict access to people who need it to process, review, produce, support, or administer an order.

Story materials

Photos, audio recordings, scripts, and memories are treated as sensitive family material. They are received by email through Google Workspace, used only for the ordered video and support for that order, and are not used in public examples or marketing without written permission.

AI processing

StoryAfter uses OpenAI and Argil to help generate or edit images, synthetic voice, and video from customer-provided materials. If you provide an unsuitable photo, such as a group shot, we may use AI to create a solo image for the video. If you provide audio recordings, we may use them to create a synthetic voice for the video.

Service providers

We use Netlify for site hosting, Netlify Blobs for order records, Stripe for checkout and payment status, Postmark for outgoing transactional email, Google Workspace for incoming customer emails and media, Google reCAPTCHA to protect the order form from spam and abuse, and OpenAI and Argil for AI generation. Some providers may process information outside the UK. Where required, we rely on their contractual safeguards for international transfers.

Cookies and analytics

The StoryAfter site does not currently use analytics cookies. Google reCAPTCHA may process browser and interaction signals to protect the order form from spam and abuse. Stripe may use its own cookies and fraud-prevention tools when you go to Stripe Checkout.

Retention and deletion

Source media and work files are deleted 90 days after delivery. Final videos are retained for 12 months after delivery so we can support redownloads and customer queries. Order and payment records are retained for 6 years for accounting, tax, support, dispute, and legal record purposes. We may keep limited information for longer where required for a dispute, fraud prevention, or legal obligation.

Your choices

You can contact care@storyafter.co.uk to request access, correction, deletion, restriction, objection, portability, or help with privacy questions. We may need to keep some information where the law requires it or where it is needed for a dispute or accounting record.

Complaints

Please contact us first if you have a privacy concern. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.