Privacy Policy
Last updated: August 14, 2026
1. Overview
This policy explains what information StoryAudit, operated by Weavara LLC ("we," "us," "our"), collects when you use storyaudit.app (the "Service"), and how it's used. StoryAudit is built so that the actual work, parsing and auditing your Storyline .story files, and checking or drafting a translation from an XLIFF file, happens entirely client-side, in JavaScript running in your own browser. Your course and translation files are read locally from your device using standard browser file APIs; they are never transmitted to our servers, uploaded to cloud storage, or sent to a third party as part of generating a report or a translation draft.
2. Information we do collect
| Category | What it is | Why |
|---|---|---|
| Account info | Email address, any profile info you provide (e.g. via Google or Microsoft sign-in), and, on team plans, your organization's name and member list, all handled through our authentication provider, Clerk | To create and secure your account, and to communicate with you about your subscription |
| Billing info | Subscription status, plan, and billing history. Payment card details are collected and processed directly by Clerk's billing infrastructure and its payment processor; we do not receive or store full card numbers | To manage your subscription and trial |
| Basic technical data | Standard web server/hosting logs (e.g. IP address, browser type) generated automatically by our hosting provider when you load the site | Security, abuse prevention, and troubleshooting |
| Support correspondence | Emails you send to support@storyaudit.app and any information you choose to include in them | To respond to your question and improve the Service |
We do not currently use third-party analytics or advertising trackers on storyaudit.app.
3. Information we do not collect
We do not receive, view, or store: the contents of your .story files or XLIFF translation exports; any reports, exports, drafts, or PDFs StoryAudit generates from them; or any course content, images, audio, video, or text extracted or translated during an audit. All of that processing, translation, and any downloads happen entirely on your own device.
4. How we use information
We use the information above only to:
- provide, secure, and operate the Service, including keeping you signed in and managing seats on team plans;
- manage your trial, subscription, and billing;
- respond to support requests and account questions;
- send transactional emails about your account, billing, security, or important changes to the Service or these policies (we don't currently send marketing emails; if that ever changes, you'll be able to opt out);
- detect, investigate, and prevent fraud or abuse; and
- comply with legal obligations.
5. How we share information
We do not sell your personal information, and we do not share it with third parties for advertising. We share it only:
- with the service providers listed in Section 8 (Clerk, Vercel), to the extent needed for them to run sign-in, billing, and hosting on our behalf;
- with your organization's administrators, on team plans (they can see the names/emails of members on their plan);
- if required by law, subpoena, or other legal process, or where reasonably necessary to protect the rights, safety, or property of our users, ourselves, or others;
- in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply and we'll make reasonable efforts to notify you; or
- at your direction or with your consent.
6. Security
We rely on reputable providers (Clerk for authentication and billing, Vercel for hosting) and standard safeguards such as encryption in transit (HTTPS/TLS) to protect the limited account data we handle. No method of transmission or storage is completely secure, so we can't guarantee absolute security. By design, though, the most sensitive material involved in using StoryAudit (your course and translation files, reports, and drafts) never reaches us at all.
7. Cookies and local storage
Our authentication provider, Clerk, sets cookies necessary to keep you signed in. The Service also uses your browser's local storage to remember preferences (like which mode you last used, or which report sections you've toggled off). This stays on your device and isn't sent to us.
To make repeat audits faster and more useful, the Service also stores two things in your browser's own database (IndexedDB), entirely on your device: a cache of recently generated reports (keyed by a fingerprint of the file's contents, so re-opening the same course is quick), and a local run history: the file names, dates, and issue counts of audits you've run on this device, which powers the in-app run history and its PDF/text export. None of this is transmitted to us or anyone else. You can erase the run history at any time with the "clear history" control in the app, and remove everything (cache and history both) by clearing your browser's site data for storyaudit.app.
8. Third-party services
- Clerk: authentication and subscription billing. See Clerk's privacy policy.
- Google Fonts: used to load the site's display typeface. Loading a font may share your IP address with Google's font-serving infrastructure. See Google's privacy policy.
- Vercel: our hosting provider; serves the static site and app files and generates standard access logs. See Vercel's privacy policy.
- Chrome/Edge on-device translation: Translation Check's optional machine-drafted translation runs on the Translator model built into Chrome or Edge. The first time you translate into a given language on a device, your browser downloads that language's model directly from Google's (Chrome) or Microsoft's (Edge) infrastructure. Only the model itself is downloaded, never the contents of your file, and the translation then runs locally on your device. Like any download, the request itself shares your IP address and standard browser information with Google or Microsoft, along with which language model is being requested. The browser's handling of this feature is governed by the browser vendor's own privacy policy: Google / Microsoft.
9. Data retention and deletion
We retain account and billing information for as long as your account is active, plus a reasonable period afterward for legal, tax, and dispute-resolution purposes. Hosting access logs are retained only for the short periods our hosting provider keeps them. Data stored in your own browser (preferences, report cache, run history) stays on your device until you clear it, as described in Section 7. To request deletion of your account and associated data, email support@storyaudit.app.
10. Your rights and choices
You can ask us to access, correct, export, or delete the account information we hold about you at any time by emailing support@storyaudit.app from your account email address (we use that to verify it's really you). We'll respond within a reasonable time, and in any case within the period required by applicable law. You can also cancel your subscription at any time from within the Service.
If you are in the European Economic Area, the United Kingdom, or a similar jurisdiction: our legal bases for processing are performance of our contract with you (account, billing, and providing the Service), our legitimate interests (security, abuse prevention, and troubleshooting), and consent where required. You also have the rights to object to or restrict certain processing, to data portability, and to lodge a complaint with your local supervisory authority.
If you are a California resident: we do not sell or "share" personal information as those terms are defined in the CCPA/CPRA, and we don't use it for cross-context behavioral advertising. You have rights to know, access, correct, and delete personal information, and we will not discriminate against you for exercising them.
Because we don't track you across other websites or apps, there is no cross-site tracking to opt out of; browser "Do Not Track" or Global Privacy Control signals don't change anything, since we already treat everyone that way.
11. International users
The Service is operated from the United States, and the limited account information we handle is processed in the United States (and wherever our service providers operate), where privacy laws may differ from those in your country. Where account information of EEA, UK, or Swiss users is transferred to the United States, we rely on our service providers' participation in the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses as the transfer mechanism. By using the Service, you understand your account information will be handled as described in this policy. Your course and translation files, as always, are processed only on your own device wherever you are.
12. Children's privacy
The Service is intended for business and professional use and is not directed at children. Consistent with our Terms of Use, we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us at support@storyaudit.app and we will delete it.
13. Changes to this policy
We may update this policy from time to time. Changes will be reflected by updating the "Last updated" date above, and for material changes we will make reasonable efforts to provide additional notice, such as an email to your account address or an in-app notice, before they take effect.
14. Contact
Questions about this policy, or want to exercise a data access/deletion request? Email support@storyaudit.app, or write to: Weavara LLC, 6545 Market Ave. North STE 100, Canton, OH 44721 USA.