Legal centre.

The Terms page explains account, workspace, subscription, uploaded-material, AI-output, and acceptable-use rules.

The Privacy page explains the categories of data StoryHQ processes and how that data is used to provide the product.

The Security page describes current controls, including workspace isolation, MFA/session gates, private material serving, watermarking, provider processing, and security-header protections. It is explicit about what StoryHQ does not yet claim.

The DMCA page explains how copyright notices and counter-notices can be submitted. The DPA page describes the data-processing terms that apply where StoryHQ processes personal data on behalf of a workspace customer. The Subprocessors page lists the infrastructure, billing, email, AI, observability, and authentication providers currently used to operate StoryHQ.

These pages are written to be accurate to StoryHQ’s current product and operating posture. They are not a substitute for legal advice, and larger customers may require a separate written agreement, security review, or negotiated DPA before using StoryHQ for highly sensitive productions.