Effective Date: ______01/10/2025____________

At Fantastory AI (“Fantastory AI,” “we,” “our,” or “us”), your privacy is of utmost importance. We are dedicated to protecting your personal data and maintaining the trust you place in our platform. This Privacy Policy outlines how we collect, use, process, and safeguard your information when you access our website or engage with our services.

By using Fantastory AI and its features, you consent to the practices described in this Privacy Policy. We are committed to complying with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and other relevant laws, to ensure your information is handled securely and transparently.

This Privacy Policy governs all interactions with Fantastory AI through our website and services. It does not cover third-party websites, services, or external entities that may be linked to our platform. We encourage you to review the privacy policies of those third parties before interacting with their services.

We process your personal data exclusively for legitimate purposes, such as delivering our services, enhancing your experience, complying with legal obligations, and ensuring the security of your interactions with our platform.

Your continued use of Fantastory AI after updates to this Privacy Policy signifies your acceptance of the revised terms. Thank you for choosing Fantastory AI. We are committed to providing a secure, innovative, and enriching environment that supports creativity, imagination, and learning while safeguarding your personal information.

1. SCOPE OF THIS PRIVACY POLICY:

1.1 This Privacy Policy outlines how Fantastory AI collects, uses, discloses, and processes personal data in connection with the following:

1. Our Website and Services: This includes our website, associated platforms, features, and services that reference or display this Privacy Policy (collectively referred to as the “Platform”).
2. Platform Users: Individuals who interact with our Platform to create personalized stories, characters, and digital collectibles or access other features and services offered by Fantastory AI.
3. Data Subjects: Any individual whose personal data is collected, processed, or used due to their interaction with our Platform, use of our services, or communication with us concerning our business operations.

1.2 This Privacy Policy provides a detailed overview of our practices and commitments concerning privacy and data protection. We comply with applicable laws, including the General Data Protection Regulation (GDPR) and other relevant data protection legislation, to ensure the secure and transparent handling of your personal data.

1.3 While specific data processing activities may be subject to varying legal requirements based on jurisdiction or unique circumstances, the principles outlined in this Privacy Policy apply broadly to ensure your data is collected and processed responsibly. Our commitment to safeguarding your privacy remains a cornerstone of all our operations, whether you are accessing Fantastory AI as a registered user, a visitor, or a potential customer.

2. DATA COLLECTION:

Fantastory AI collects various types of data to provide personalized services, improve the user experience, and maintain the security and functionality of our Platform. The categories of data we collect are outlined below:

2.1 Personal Information:

Fantastory AI collects essential personal information when you interact with our Platform. This includes your name, email address, billing and delivery addresses, and payment details. This data is required to process orders, manage your account, and deliver our services in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2.2 Device Information:

To optimize the performance of our Platform and ensure compatibility, we automatically collect technical details about your device, such as your IP address, browser type, operating system, and language preferences. This information is used to enhance the user experience and ensure seamless access.

2.3 Usage Data:

We collect information about how you interact with our Platform, including pages visited, time spent, features used, and actions performed. This data helps us analyze user behavior, personalize recommendations, and continuously improve our services.

2.4 Content Data:

Fantastory AI gathers and stores content you upload to the Platform, such as drawings, descriptions, or customization preferences. This information is critical for delivering our core services, such as personalized story creation and character development.

2.5 Technical Data:

To maintain the security and reliability of our Platform, we collect technical data, including login credentials, time zone settings, browser configurations, and IP addresses. This supports compliance with security standards and helps protect your data.

2.6 Order Information:

When you place an order, we collect details necessary to fulfill your request. This includes information about the items ordered, delivery addresses, and any special instructions provided.

2.7 Communication Data:

If you communicate with Fantastory AI through email, customer support, or other channels, we collect relevant data such as inquiry details, feedback, and service requests. This information is used to improve customer service and address issues effectively.

2.8 Subscription Data:

When you subscribe to our mailing list, we collect your email address to send newsletters, updates, and promotional offers. You can unsubscribe at any time by clicking the “unsubscribe” link in our emails or contacting us directly.

2.9 Cookies and Tracking Data:

We use cookies and similar tracking technologies to gather information about your interaction with our Platform. This includes browsing activity, preferences, and session details. For more information, refer to our Cookie Policy here.

2.10 Behavioral Data:

We analyze your activity on the Platform to understand preferences and interests. Aggregated behavioral data is used to enhance marketing strategies, recommend services, and improve user experience.

2.11 Aggregated and Server Data:

Fantastory AI collects general usage statistics, such as server hits, navigation patterns, and page views, to monitor trends and improve services. While this data is not linked to personally identifiable information, we may log certain details (e.g., IP addresses) for security purposes.

2.12 Legal Compliance Data:

We collect and retain data necessary to comply with legal obligations, including tax, accounting, and dispute resolution requirements. This ensures adherence to applicable laws and regulations.

2.13 Special Categories of Personal Data:

Fantastory AI does not intentionally collect sensitive personal data, such as health information or criminal records. We advise users not to share such information on our Platform. If such data is voluntarily provided, it will be processed in line with this Privacy Policy.

2.14 Implications of Refusing to Provide Data:

Providing personal data is voluntary; however, refusing to provide essential information for account registration or service fulfillment may limit access to certain features or services.

2.15 Third-Party and Public Sources:

We may supplement your personal data with information from publicly available sources, social media platforms, or marketing partners to improve our services and tailor your experience, as permitted by law.

3. CONSENT TO DATA PROCESSING AND TRANSFER:

3.1 By providing personal data to Fantastory AI, users, including those located outside the European Union, explicitly consent to the terms outlined in this Privacy Policy. Users acknowledge and agree that their personal data may be collected, stored, and processed in compliance with applicable laws in the jurisdictions where Fantastory AI operates, including the European Union, where Fantastory AI is based.

3.2 Fantastory AI complies with the General Data Protection Regulation (GDPR) and ensures that any international transfers of personal data are conducted with robust safeguards in place. These safeguards include, but are not limited to:

1. Legally approved mechanisms that ensure adequate protection of personal data during transfers to non-EU countries.
2. Compliance with data protection frameworks recognized by regulatory authorities to uphold user privacy and data security.
3. These measures are implemented to protect your personal data and guarantee the preservation of your rights, regardless of the jurisdiction in which data processing occurs.

3.3 If you do not consent to the collection, storage, or processing of your personal data as outlined in this Privacy Policy, we advise you to refrain from accessing or using the Fantastory AI Platform and related services. Continued use of our Platform constitutes your acceptance of this Privacy Policy and agreement to its terms.

4. UTILIZATION OF COLLECTED INFORMATION:

4.1 Purpose of Data Use:

Fantastory AI will use your personal data solely for the purposes for which it was collected, as outlined in this Privacy Policy. If we intend to use your data for purposes not specified here, we will provide prior notification and explain the legal basis for the additional processing, in compliance with the General Data Protection Regulation (GDPR).

4.2 Legal Basis for Processing Personal Data:

Fantastory AI ensures that all personal data processing is based on a valid legal basis under GDPR. These include:

1. Data processing required to fulfill our obligations, such as providing personalized story creation services through the Platform.
2. Processing necessary to meet statutory or regulatory requirements.
3. Processing based on your explicit consent for specific purposes, such as receiving promotional communications.
4. Processing essential to our legitimate business interests, provided it does not infringe upon your rights and freedoms.

4.3 Marketing Communications:

With your consent, we may use your personal data to send you promotional materials, product updates, and tailored recommendations. You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

4.4 Platform Functionality and User Experience:

We utilize your personal data to ensure the proper functioning of our Platform. This includes enabling seamless navigation, customization of content, and providing you with a user-friendly and engaging experience.

4.5 Service Optimization and Feedback:

Your interactions with our Platform help us improve its features, refine our services, and adapt them to meet user preferences, ensuring an enhanced experience for all users.

4.6 Customer Support:

We use your data to respond to your inquiries, resolve issues, and provide effective communication and assistance from our customer support team.

4.7 Data Security and Fraud Prevention:

To protect your data and transactions, we implement measures to detect and prevent fraudulent activities, monitor suspicious behavior, and safeguard the integrity of our Platform.

4.8 Legal Compliance:

We process your data as required to comply with applicable laws and regulations, including GDPR and other relevant legal frameworks.

4.9 Third-Party Services:

We may share your personal data with trusted third-party service providers for purposes such as payment processing, blockchain NFT integration, and content delivery. These third parties are bound by confidentiality agreements and are required to comply with GDPR.

4.10 Business Security and Protection:

Your data may be used to safeguard Fantastory AI’s operations, intellectual property, and services. This includes investigating potential threats, enforcing our Terms and Conditions, and mitigating risks.

4.11 Legal Rights and Disputes:

We may process your data to protect or defend our legal rights, respond to disputes, and comply with judicial or regulatory requests.

4.12 Analytics and Insights:

We analyze user behavior and activity on our Platform to gain valuable insights, optimize our services, improve audience segmentation, and deliver targeted content and recommendations.

4.13 Troubleshooting and Maintenance:

To ensure uninterrupted access and functionality, we use your data to identify, diagnose, and resolve technical issues and to perform ongoing maintenance of our Platform.

5. SHARING YOUR PERSONAL DATA:

5.1 Legal Obligations and Protection of Rights:

Fantastory AI may disclose your personal data when required by applicable laws, regulations, or legal processes, such as responding to court orders, subpoenas, or law enforcement requests. Additionally, we may share information to protect the rights, property, and safety of Fantastory AI, our users, or others, and to investigate or prevent fraud, unauthorized activities, or security breaches.

5.2 Third-Party Service Providers:

We work with trusted third-party service providers to deliver, maintain, and enhance our services. These providers include, but are not limited to:

1. Payment Processors: For handling transactions securely.
2. Cloud Storage and Hosting Services: For data storage and platform functionality.
3. Customer Support Platforms: For managing inquiries and support tickets.
4. Email Service Providers: For sending updates, transactional messages, and marketing communications.
5. Marketing Partners: For delivering targeted campaigns and promotional materials.
6. All service providers are contractually required to process your personal data securely, only for specified purposes, and in compliance with GDPR and this Privacy Policy.

5.3 Marketing Partners:

With your explicit consent, we may share your personal data with marketing partners to provide you with promotional offers or content tailored to your interests. You can withdraw your consent at any time by following the opt-out instructions in the communication or contacting us directly.

5.4 Affiliates and Business Partners:

We may share your personal data with affiliates, subsidiaries, or business partners to enable specific collaborations, promotions, or service offerings. Any entity receiving your data is obligated to adhere to the terms of this Privacy Policy.

5.5 Business Transfers:

In the event of a merger, acquisition, sale of assets, restructuring, or similar business transaction, your personal data may be transferred to the acquiring or successor entity. This entity will be bound by the terms of this Privacy Policy and must continue to safeguard your personal data as described herein.

5.6 Analytics Providers:

We utilize third-party analytics tools to gain insights into user behavior, measure the effectiveness of our services, and optimize platform performance. These tools may use cookies, pixels, or other tracking technologies to collect aggregated, non-identifiable data about your interactions with the Platform.

5.7 Professional Advisors:

When necessary, Fantastory AI may share limited personal data with professional advisors such as legal, financial, auditing, or insurance consultants. These advisors are bound by confidentiality agreements and are permitted to use the data only for the provision of their professional services.

5.8 Compliance with Legal and Regulatory Obligations:

To meet our obligations under applicable Italian, EU, and other relevant laws, we may process and share personal data for tax reporting, accounting, and other regulatory purposes.

5.9 Security and Fraud Prevention:

We may share your personal data with relevant authorities, law enforcement, or specialized service providers to investigate, prevent, or address fraudulent activities, unauthorized access, cyberattacks, or other security-related issues.

6. DATA STORAGE AND SECURITY MEASURES:

At Fantastory AI, we are dedicated to protecting your personal data through robust storage and security practices that comply with the General Data Protection Regulation (GDPR) and applicable

data protection laws.

6.1 Data Retention Policy:

1. Your personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations.
2. Retention periods are determined based on the nature of the data, its processing purposes, and applicable legal requirements.
3. Once the retention period expires, or upon your request (if legally permissible), your personal data will be securely deleted, anonymized, or restricted from further use.

6.2 Storage and Accessibility:

1. All personal data collected is securely stored on servers within the European Economic Area (EEA) to comply with GDPR standards.
2. In cases where data is transferred outside the EEA, Fantastory AI ensures the implementation of appropriate safeguards, such as EU Standard Contractual Clauses or equivalent legal mechanisms, to protect your data.

6.3 Security Procedures:

1. Fantastory AI employs state-of-the-art security technologies, including encryption, secure socket layer (SSL) protocols, firewalls, and access controls, to protect against unauthorized access, alteration, or disclosure.
2. Regular security audits, penetration tests, and risk assessments are conducted to identify and mitigate vulnerabilities.
3. While every effort is made to protect your data, no system is entirely immune to risks. We cannot guarantee absolute security against hacking, cyberattacks, or other unauthorized intrusions.
4. In the event of a data breach, affected users and relevant supervisory authorities will be notified within 72 hours, as required by GDPR.

6.4 User Responsibility:

1. Users are responsible for maintaining the confidentiality of their account credentials and should refrain from sharing sensitive information through unsecured channels.
2. Unauthorized attempts to bypass security measures, such as hacking or gaining unauthorized access, are strictly prohibited and may result in legal consequences.

6.5 Disclaimer of Liability:

1. Although Fantastory AI employs stringent security measures, we cannot accept liability for data breaches or unauthorized actions by third parties that are beyond our reasonable control.
2. Users are advised to exercise caution when sharing personal information online and to report any suspicious activities related to their accounts promptly.

7. YOUR RIGHTS:

As a user of Fantastory AI, you have several rights regarding your personal data under the General Data Protection Regulation (GDPR). These rights are outlined below:

7.1 Access and Correction:

1. You have the right to request access to the personal data we hold about you, allowing you to verify that it is being processed lawfully.
2. If any of your personal data is incomplete or inaccurate, you may request that it be updated or corrected.

7.2 Erasure (Right to Be Forgotten):

You may request the deletion of your personal data where:

1. It is no longer necessary for the purposes for which it was collected.
2. You withdraw your consent (where consent is the legal basis for processing).
3. The data has been unlawfully processed or must be deleted to comply with legal obligations.

7.3 Objection to Processing:

1. You have the right to object to the processing of your personal data for specific purposes, such as direct marketing.
2. If you object to processing based on legitimate interests, we will stop processing your data unless we can demonstrate compelling legitimate grounds to continue.

7.4 Data Portability:

You may request that your personal data be transferred to you or a third party in a structured, commonly used, machine-readable format. This applies only to data processed with your consent or as part of a contract.

7.5 Withdrawal of Consent:

If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Note that withdrawing consent may affect your access to certain features of the Platform, but it will not affect the lawfulness of processing conducted before your withdrawal.

7.6 Managing Your Account:

1. You can update your account information by logging into your profile settings on the Platform.
2. For assistance with account updates, contact us directly at support@fantastoryai.com.

7.7 Marketing Communications:

1. You can opt out of receiving promotional emails by clicking the “unsubscribe” link included in our emails.
2. Opting out of promotional communications does not affect your receipt of essential service-related emails, such as transactional or administrative notices.

7.8 Cookie and Tracking Management:

You can manage cookies and tracking technologies through your browser or device settings. Please note that disabling certain cookies may impact your ability to use specific features on the Platform. For more information, refer to our Cookie Policy here.

7.9 Exercising Your Rights:

1. To exercise any of these rights, please contact us at support@fantastoryai.com.
2. We may need to verify your identity before processing your request to ensure your personal data is not disclosed to unauthorized individuals.

7.10 We aim to respond to all legitimate requests within one month. For complex requests, we may require additional time and will notify you accordingly.

8. COMPLAINTS:

8.1 If you have any concerns or wish to make a complaint regarding this Privacy Policy or the way Fantastory AI handles your personal data, please contact us at support@fantastoryai.com.  We are committed to addressing your concerns promptly and will respond to your complaint as soon as possible.

8.2 If you are not satisfied with our response or believe that we have not processed your personal data in compliance with the General Data Protection Regulation (GDPR) or applicable.

9. LINKS TO THIRD-PARTY WEBSITES:

9.1 External Links:

The Fantastory AI platform may include links to third-party websites, applications, or services. These links may lead to content, advertisements, or services not operated or controlled by Fantastory AI. Any personal data you provide when interacting with these external links is governed by the privacy policies and practices of those third parties, which are entirely independent of Fantastory AI’s policies.

9.2 Data Privacy on External Websites:

Fantastory AI cannot guarantee the security or privacy of information shared with third-party websites or services. We strongly recommend that you review the privacy policies of any external websites or applications before sharing personal data, to understand how your information will be collected, used, and protected.

9.3 Disclaimer of Responsibility:

Fantastory AI does not endorse, monitor, or assume responsibility for the content, security measures, or privacy practices of third-party websites linked from our platform. Accessing and interacting with these external websites is at your own risk. Fantastory AI is not liable for any data breaches, misuse, or other issues arising from your use of these third-party services.

9.4 Recommendations for Users:

To protect your personal data, we encourage you to:

1. Exercise caution when providing personal information on external platforms.
2. Familiarize yourself with the privacy and security policies of any third-party websites or services accessed via links on Fantastory AI’s platform.

10. NFTS AND BLOCKCHAIN TECHNOLOGY:

10.1 Fantastory AI allows users to save characters and stories as NFTs, leveraging blockchain technology for ownership and preservation.

10.2 Data stored on the blockchain is public and immutable. Once an NFT is minted, it cannot be modified or deleted.

10.3 Users are responsible for securing their blockchain wallets. Fantastory AI is not liable for wallet security breaches, loss of private keys, or unauthorized access.

10.4 Ownership rights of minted NFTs are subject to the terms outlined at the time of creation.

11. CHILDREN’S PRIVACY:

11.1 Fantastory AI is designed to be safe for children:

1. We collect minimal personal data necessary for providing services.
2. Parents or guardians must consent to account creation and any purchases for users under 13.
3. Content is monitored to ensure a safe and educational environment.

12. MODIFICATIONS AND UPDATES TO OUR PRIVACY POLICY:

12.1 To maintain compliance with legal requirements and align with industry best practices, Fantastory AI regularly reviews and updates this Privacy Policy. Any changes will be published on this webpage, and the “Last Updated” date at the top of the document will reflect the most recent revisions. For significant updates, we may notify you through additional methods, such as email or in-platform notifications.

12.2 Fantastory AI reserves the right to update or modify this Privacy Policy at any time. Unless stated otherwise, revisions will take effect immediately upon being posted on the Fantastory AI website.

12.3 We encourage you to review this Privacy Policy periodically to stay informed about how Fantastory AI manages and protects your data and to remain aware of your rights under the policy.

Updated On: _________________