This policy explains what personal information iStories collects, why we collect it, who else handles it and what you can ask us to do with it. iStories is run by Lee Robson in Sydney, and we handle personal information in line with the Australian Privacy Principles.
Last updated: 15 October 2026
What we collect
When you contact us, send a brief or request a guide: your name, email address, business name and anything else you put in the form.
When you use AI-Stories:
- The answers you give the AI teams, their drafts and your feedback. These stay in your browser and travel to our server only while the team is working; we don’t keep a copy of your conversation.
- If you ask for your pack by email: your name, email address, website (if you give it), your brief and whether you’d like marketing emails.
- If you buy: the email address you bought with, your Stripe customer reference and a record of what you bought and when (plan, renewal date, any refund). We keep this to give you access, let you sign in and handle refunds and tax records. Signing in sends a one-time link to that email address.
- If you use AV Studio: the image descriptions you type and any image you ask to change. Images aren’t stored on our side; they stay in your browser until you download them.
When you pay: Stripe, our payment processor, handles your card and billing details, including the billing address you enter. We never see or store your card number.
Usage limits: to stop the free trial and the members’ tools being abused, we count how many campaigns and images are used each day. Those counts are kept against a scrambled code made from your internet address, or against your purchase. Daily counts expire within two days. The record that a connection has used the free trial, and the record that a single campaign has been used, each last 30 days. We don’t store your internet address itself.
Why we collect it
To answer your enquiry, send you what you asked for, run the AI-Stories teams and AV Studio, give you access to what you’ve bought, keep the free trial fair, follow up on a request you’ve made, and keep the records a business is required to keep.
We only send you marketing emails if you’ve ticked a box to say you want them. Leaving it unticked never affects what you asked for, and every marketing email has an unsubscribe link.
Cookies
The members’ area uses one cookie to keep you signed in. It’s needed for the area to work, and it ends when you sign out or after 30 days without a visit. The AI chat remembers your conversation in your browser’s session storage, which clears when you close the tab. We don’t use advertising cookies on istories.io.
We count visits to istories.io with a cookie-free analytics service. It shows us which pages are read, which sites send visitors here, and the kinds of browser and device used. It doesn’t store anything in your browser or fingerprint visitors.
Who else handles your information
We use a small number of service providers to run the site and deliver AI-Stories:
- Website hosting and security, which also measures visits, protects our forms against spam, and stores the members’ sign-in sessions and the daily usage counts.
- A form service, which passes contact, brief and guide requests to us by email.
- AI model providers, which write the AI teams’ drafts from your briefs and feedback, and create AV Studio images from your descriptions.
- An email delivery service, which sends the AI-Stories pack to you, and a copy of your request to us, when you ask for the pack by email, and sends members their sign-in links.
- Stripe, which processes AI-Stories payments, holds your card and billing details, and runs the billing portal where you manage your subscription.
Under their terms with us, the AI model providers don’t use what we send them to train their models. Each provider handles data under its own privacy terms. Email us if you’d like to know who they are.
Information sent overseas
Most of these providers are based in the United States, and your information may be processed there or in other countries where they operate. We use providers that commit to protecting the information they handle for us.
Research guide requests
iStories also runs a separate site at research.istories.io for its research guides. When you request a guide there, we collect your name, email address and your agency or business name, and use them to send you the guide.
That form has its own optional marketing box. Tick it and we may occasionally send you iStories research, AI integration resources and service updates. Leave it unticked and you still get the guide.
Submissions to that site are handled by its own form service. Visits to research.istories.io are measured with Google Analytics 4, which may set cookies to record page visits, form use and where visitors came from.
How we protect and keep it
We store your information with providers that protect it against misuse, loss and unauthorised access. We keep it only as long as we need it to provide what you asked for, follow up where you’ve agreed to that, and meet record-keeping obligations. Then we delete it.
Disclosure
We don’t sell, rent or trade your personal information. We share it only with the providers above so they can do their job, or where the law requires it.
Your rights
You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Email info@istories.com.au and we’ll respond within 30 days.
If you think we’ve mishandled your information, tell us first and we’ll try to put it right. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Links to other sites
This site links to other websites. We don’t control their content or how they handle your information, so check their policies before you give them any details.
Changes
We may update this policy. When we do, we’ll change the date at the top of this page.