Privacy

Privacy Policy

Last updated: 13 March 2025

Story by Numbers is operated by Jason Yergeau, a sole proprietor based in Haarlem, the Netherlands. This policy explains what personal data we collect through our website at storybynumbers.com and our video platform at app.storybynumbers.com (“BridgeVideo”), and how we use it.

1. What we collect

Account data

When you create a BridgeVideo account, we store your email address, full name, and avatar URL as provided by our authentication provider. Accounts are created through Supabase, a third-party authentication service.

Project and media data

Content you create in BridgeVideo — projects, uploaded images, video, audio, GeoJSON files, and rendered video output — is stored on our servers and in cloud storage (Amazon S3). We store metadata about your uploads including file names, file sizes, dimensions, and MIME types.

Social media accounts

If you connect an Instagram account for publishing, we store your Instagram username, profile picture URL, and an access token. The access token is encrypted at rest using Fernet (AES-128-CBC) encryption.

API keys

If you generate API keys, we store a SHA-256 hash of each key along with a display prefix, a name you assign, usage timestamps, and expiration dates. We never store API keys in plain text.

Billing data

We track account credit balances and transaction history (top-ups, usage) within the platform. We do not collect or store payment card details directly.

Server logs

Our servers log API requests, including IP addresses, timestamps, and request metadata. These logs are used for debugging and security monitoring.

2. What we do not collect

We do not use analytics trackers, advertising pixels, or third-party cookies on either storybynumbers.com or app.storybynumbers.com. We do not track you across other websites.

3. How we use your data

  • To authenticate you and manage your account
  • To store and render your video projects
  • To publish content to connected social media accounts at your request
  • To process content through AI services (text generation, text-to-speech) when you use those features
  • To generate maps when your projects include map elements
  • To track credit usage and billing
  • To maintain and secure the platform

4. Third-party services

We share data with the following third parties only as needed to operate the platform:

  • Supabase — authentication and user management
  • Amazon Web Services (S3, Lambda) — file storage and video rendering
  • OpenAI — AI-assisted features (project content sent to their API when you use AI tools)
  • Anthropic — AI-assisted features
  • ElevenLabs — text-to-speech generation (text you submit is sent to their API)
  • Meta / Instagram — video publishing to your connected Instagram account
  • MapTiler — map tile rendering for projects that include maps

Each of these services has its own privacy policy. We encourage you to review them. We do not sell your data to any third party.

5. Data storage and security

Your data is stored in a PostgreSQL database and Amazon S3, hosted on infrastructure we control. Social media tokens are encrypted at rest. API keys are hashed and never stored in plain text. All connections to our services use HTTPS/TLS encryption in transit.

6. Data retention

We retain your account data and project content for as long as your account is active. Render job progress data is held temporarily (up to 24 hours) and then discarded. If you delete your account, we will delete your personal data and project content within 30 days.

7. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent at any time

To exercise any of these rights, contact us at the address below.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

9. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. We will not reduce your rights under this policy without your explicit consent.

10. Contact

Story by Numbers
Jason Yergeau
Haarlem, the Netherlands
jason@storybynumbers.com