Privacy Policy

Last updated: July 28, 2026

1. Introduction

Storyield ("we", "our", or "us") operates the storyield.com website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR), the ePrivacy Directive, Argentina's Personal Data Protection Act (Law 25.326), and all applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is Storyield. For any data protection inquiries, please contact us at info@storyield.com.

3. Information We Collect

3.1 Information You Provide

  • Account registration data (name, email address, business name)
  • Instagram account information connected via Meta OAuth
  • Story Payment data you create or accept (merchant-approved media, eligibility result, disclosure, store link, consent record, and optional donation setting)
  • Billing information for Merchants (billing contact, company name, billing address, tax identification number, and subscription plan details), used to invoice subscription fees and verified-Story fees
  • Communication data when you contact us

We do not collect payment card, bank account, or other payment-instrument data from Influencers. Influencers never pay and never receive money through Storyield, so no such data is needed, requested, or stored.

3.2 Information Collected Automatically

  • Device information (browser type, operating system)
  • Usage data (pages visited, time spent, interactions)
  • IP address and approximate location
  • Cookies and similar tracking technologies (see our Cookie Policy)

3.3 Information from Third Parties

  • Instagram profile data and Story insights via the Meta Graph API

4. Legal Basis for Processing (GDPR Article 6)

  • Consent (Art. 6(1)(a)): Where you have given explicit consent, such as for marketing communications and cookie tracking.
  • Contract Performance (Art. 6(1)(b)): Processing necessary to provide our services, including connecting Instagram accounts, checking whether an Influencer is eligible to pay with a Story, publishing a merchant-approved Story after explicit confirmation, and billing Merchants for subscription fees and per-Story fees.
  • Legitimate Interests (Art. 6(1)(f)): Analytics, fraud prevention, and service improvement where our interests do not override your rights.
  • Legal Obligation (Art. 6(1)(c)): Compliance with tax, accounting, and regulatory requirements.

5. How We Use Your Information

  • To provide, operate, and maintain our platform
  • To coordinate Story Payments initiated in a Merchant's checkout
  • To publish and monitor Instagram Stories on your behalf (with explicit consent)
  • To send transactional emails and service notifications
  • To detect and prevent fraud or unauthorized activity
  • To improve our services and develop new features
  • To invoice Merchants for subscription fees and per-Story fees, and to maintain related billing and accounting records
  • To comply with legal obligations

6. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

  • Meta Platforms (Instagram): To publish Stories and access insights as authorized by you.
  • Cloud Infrastructure Providers: For hosting and data storage (EU-based servers preferred).
  • Billing and Accounting Providers: To issue invoices to Merchants and manage subscription and per-Story fee billing. These providers act as processors on our behalf.
  • Law Enforcement: When required by law or to protect our legal rights.

6a. Instagram & Meta Platform Data

When an Influencer connects an Instagram Business or Creator account, Storyield accesses a limited set of data through the Meta Graph API, and only after the Influencer grants explicit authorization via Instagram OAuth. We request the following permissions and use them strictly as described:

  • instagram_business_basic: We read basic profile data (username, account ID, account type, follower count) once at onboarding and refresh it periodically, solely to confirm the account is a Business or Creator account and to determine, on a binary basis (eligible / not available), whether you can pay for a purchase with a Story. We do not share this profile data with Merchants beyond the eligibility result and the campaign reporting described below.
  • instagram_business_manage_insights: We read Story-level insights (reach, views, replies, shares, profile visits) for the specific approved Story published through a Story Payment, solely to verify that the Story remained live for the full 24 hours with its rendered creative, disclosure and link intact, and to report verified performance to Merchants. Insights are accessed and stored in aggregated form only — we never access, store, or share data that identifies individual followers or viewers.
  • instagram_business_content_publish: When you accept a Story Payment, you authorize Storyield to publish a single Instagram Story on your behalf — the final merchant-approved media with the required creator, Storyield and disclosure labels rendered into it. Each publication requires your explicit confirmation in the app — we never publish automatically, on a schedule, or in bulk. Every published Story includes a visible paid-partnership disclosure (e.g. "#Ad").

Access tokens issued by Meta are stored encrypted at rest and are used only to provide the features above. You can revoke Storyield's access at any time from your Instagram settings or by deleting your Storyield account; revocation immediately disconnects your account and stops all further data access. Our use of Instagram data complies with the Meta Platform Terms and the Meta Developer Policies. We do not sell Instagram data, nor use it for advertising, for profiling of individuals, or for any purpose other than operating the Service.

7. International Data Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy. Account data is retained for the duration of your account plus 30 days after deletion. Billing and accounting records (e.g. invoices for your Storyield subscription and verified-Story fees) are retained for 7 years as required by tax and accounting regulations.

9. Your Rights (GDPR Articles 15-22)

You have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Erase your data ("right to be forgotten") (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Withdraw consent at any time (Art. 7(3))

To exercise any of these rights, email info@storyield.com or use our Data Deletion Request page.

10. Data Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, access controls, and regular security audits to protect your data.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance.

13. Contact & Supervisory Authority

For privacy inquiries: info@storyield.com

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority — in the EU/EEA, your national Data Protection Authority; in Argentina, the Agencia de Acceso a la Información Pública (AAIP) under Law 25.326.

Protección de Datos Personales — República Argentina (Ley N.º 25.326)

Responsable del tratamiento

El responsable del tratamiento de los datos personales recolectados a través del Sitio y de la Plataforma es Eva Inés Vega, CUIT N.º 27-11769339-8, con domicilio en Combatientes de Malvinas 3544, Ciudad Autónoma de Buenos Aires (CP 1431), República Argentina. Correo electrónico de contacto: info@storyield.com.

Finalidad del tratamiento

Los datos personales son tratados con las siguientes finalidades: (i) la prestación, administración y facturación de los servicios contratados por los Comercios; (ii) la gestión de la relación contractual y comercial; (iii) el cumplimiento de obligaciones legales, fiscales y contables; (iv) la verificación de Story Payments; y (v), previo consentimiento, el envío de comunicaciones comerciales.

Derechos del titular de los datos

El titular de los datos personales tiene derecho a solicitar el acceso, rectificación, actualización y supresión de sus datos, en los términos de los artículos 14, 15 y 16 de la Ley N.º 25.326. El ejercicio de estos derechos es gratuito y podrá canalizarse mediante comunicación a info@storyield.com, acreditando su identidad.

Autoridad de control

La Agencia de Acceso a la Información Pública (AAIP), Órgano de Control de la Ley N.º 25.326, tiene la atribución de atender las denuncias y reclamos que se interpongan con relación al incumplimiento de las normas sobre protección de datos personales.

Leyenda legal (Disposición DNPDP N.º 10/2008)

"El titular de los datos personales tiene la facultad de ejercer el derecho de acceso a los mismos en forma gratuita a intervalos no inferiores a seis meses, salvo que se acredite un interés legítimo al efecto conforme lo establecido en el artículo 14, inciso 3, de la Ley N.º 25.326. La AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, Órgano de Control de la Ley N.º 25.326, tiene la atribución de atender las denuncias y reclamos que se interpongan con relación al incumplimiento de las normas sobre protección de datos personales."