OPENSTORY™ PRIVACY POLICY

Last Updated: January 20, 2026

Openstory Inc. ("Openstory," "we," "our," or "us") respects your concerns about privacy. This Privacy Policy applies to the personal information we collect through the Openstory application and/or website and related features (collectively, the "Services"). The Services may include, without limitation, access to and consumption of webtoons, web novels, and other digital content, as well as creator publishing tools, community features, translation/localization tools, and tools that enable creation, remixing, or other transformative/derivative works ("Creator Tools").

OVERVIEW OF PRIVACY POLICY

In this Privacy Policy, we describe the types of personal information we process through the Services, how we use it, with whom we may share it, and the choices and rights available to you. We also describe the measures we take to safeguard information and tell you how to contact us about our privacy practices.

For more detailed information, please review the sections below:

1. Data Controller
2. Information We Collect
3. How We Use the Information We Collect
4. Information Sharing
5. Retention of Personal Information
6. Your Rights
7. Exercising Your Rights and Your Choices
8. How We Protect Personal Information
9. Children's Personal Information
10. Contact Us
11. Links to Other Websites
12. Updates to Our Privacy Policy
13. Regional Privacy Disclosures (United States)

1. Data Controller

Openstory Inc. is the data controller for personal information processed in connection with the Services, unless otherwise stated at the time of collection.

You can contact us in writing at:

Or by email at: cs@openstory.me

2. Information We Collect

We collect personal information in connection with the Services as described below.

A. Information you provide directly

When you use our Services, you may provide personal information after being informed at the time of collection. For example:

• Contact information: We may collect your name, email address, and other contact details when you create an account, contact Customer Care, subscribe to newsletters, participate in promotions or events, or request information. If a user is considered a child under applicable law, we may collect a parent/legal guardian's email address (and, where required, the child's name) to obtain consent.
• Account information: When you create an account, we may collect your date of birth (or age range), nickname/handle, email address, and password. If you log in using a third-party account, we may receive information such as your email address, nickname, and/or profile picture, depending on the provider and your settings.
• Creator profile and publishing information (Creators): If you publish or distribute content through the Services (including webtoons, web novels, episodes, images, audio, video, story metadata, thumbnails, tags, descriptions, and other materials), we may collect information you make available via your public profile (e.g., profile picture, bio, social links, website), as well as publishing and moderation-related metadata.
• Payout / tax and verification information (Creators): If you participate in monetization programs (e.g., ad revenue sharing, subscriptions, tips, payouts), we may collect information necessary to process payouts and comply with applicable tax and financial laws. This may include legal name/business name, country of residence, address, email, signature, and tax identification information (e.g., Tax ID) where applicable. Such information is used solely for payout processing, tax reporting, and compliance with legal obligations, and is retained in accordance with applicable law.
• Surveys and promotions: When you participate in surveys, contests, or promotions, we may collect information such as your name and contact details, and other information reasonably required to administer such activities and deliver rewards or prizes.
• Customer Care information: When you contact us, we may collect any information you choose to provide, such as the content of messages, requests, or inquiries. Communications may be transmitted through our systems and may be associated with your account or email address.
• User Content, Derivative Works, and Creative Inputs: The Services may allow you to create, upload, post, or otherwise submit content (including fan works, adaptations, remixes, or other derivative/transformative works), as well as prompts, instructions, text, images, audio, video, and other inputs used with Creator Tools ("User Content"). User Content may contain personal information (about you or others) if you include it. If you choose to publish User Content publicly, it becomes publicly available as described in Section 4.

B. Identifiers and similar information

We may collect identifiers and similar information such as:

• device identifiers and related technologies (e.g., cookies, pixels, beacons, mobile ad identifiers);
• unique pseudonyms/user aliases or customer/account numbers;
• telephone number (collected for account registration, verification, or security purposes, where applicable);
• online identifiers and Internet Protocol (IP) address and similar identifiers.

C. Information collected through cookies and similar technologies

We and third parties may use cookies, web beacons, pixels, tags, SDKs, and other tracking technologies (collectively "cookies") to gather statistical information, save preferences, provide features, and deliver and measure advertising (including interest-based ads, where permitted). These cookies may be used to track you across devices and websites/apps over time, subject to applicable law and your choices.

Most web browsers accept cookies by default, but you can usually modify your browser settings to disable or reject cookies. Some Services functionality may be limited if cookies are disabled.

For more information about cookies, including how to manage them, visit: www.aboutcookies.org or www.allaboutcookies.org

D. Information about your use of the Services

In addition to information you provide, we collect information about how you use the Services, including:

• Service usage information: interactions with the Services; dates and times of use; reading/consumption preferences (e.g., genres, recent views); comments, likes, and community interactions; subscriptions/follows; download history; event participation; and, where applicable, balances and usage of virtual items, credits, coins, passes, or similar in-product features.
• Contest/promotion administration: date of participation, responses, and nature of prizes offered.
• Device and log information: device model, OS version, IP address, device settings, approximate location derived from IP address, referrer URLs, network type, and similar log data.
• Transaction/purchase details: We generally do not collect or process payment card details. Payments may be processed by Apple App Store, Google Play, PayPal, or other payment providers. We may receive transaction details such as purchase confirmations, transaction identifiers, and purchase history as necessary to validate transactions and provide purchased items/services.
• Inferences: We may draw inferences about your interests and preferences based on interactions with the Services and (where applicable) advertising partners, consistent with law and your choices.

E. Information collected through third-party analytics

We may use third-party analytics providers to help evaluate use of the Services and improve performance and user experience. Information may be disclosed to or collected directly by these providers, subject to their policies and applicable law.

3. How We Use the Information We Collect

We may use information collected above for the following purposes:

[For Users and Creators]

• Identify and authenticate you; administer your account.
• Provide the Services and features you request, including enabling access to digital content (webtoons, web novels, and other content) and enabling Creator Tools.
• Facilitate publishing, distribution, and community interaction, including displaying public profiles and public content where you choose to share them.
• Respond to requests, questions, and instructions; provide Customer Care.
• Conduct surveys, analytics, and research to improve the Services.
• Send information and rewards for campaigns, events, promotions, and contests.
• Validate transactions; prevent fraud and abuse; deliver and protect digital content.
• Provide personalized experiences and recommendations (e.g., based on age/usage patterns).
• Provide and measure advertising, including personalized or interest-based advertising where permitted by law and subject to your settings/choices.
• Send communications via email and/or in-product notifications (e.g., push notifications), consistent with your communication preferences.
• Monitor and analyze trends, usage, and activities; maintain service reliability and security.
• Create de-identified, anonymized, or aggregated information (where permitted).
• Verify age and provide age-appropriate content and experiences.
• Protect against, identify, and prevent fraud, misuse, and other illegal activity; enforce policies; protect rights, property, and safety.
• Comply with and enforce applicable laws, legal process, industry standards, and our policies.
• Carry out any other purpose described at the time information was collected.

[User Content, Derivative Works, and Creator Tools]

In addition to the above, we may use User Content and related metadata to:

• Host, store, process, transmit, display, and distribute User Content as directed by you and as necessary to operate the Services.
• Enable workflows for creation, translation/localization, editing, moderation, safety checks, discovery/search, and recommendations.
• Detect and prevent spam, fraud, and policy violations; enforce our terms and community guidelines.
• Develop and improve the Services, including features and tools, and to train, evaluate, and improve automated systems (including machine learning models) to the extent permitted by law and consistent with any settings/choices we provide. Where required by law, we will obtain consent or provide appropriate notices for certain processing activities.

4. Information Sharing

We disclose or share personal information as described below:

• Publicly Available Information: Information you choose to make public can be seen by anyone, including those without accounts. This may include your nickname, profile picture, bio, social links, public profile information, and any User Content you publish publicly (including associated metadata such as titles, tags, descriptions, and timestamps). Please be mindful that public postings may be indexed by search engines or shared by others.
• Service Providers: We may share information with vendors that provide services on our behalf, such as hosting, cloud infrastructure, customer support tools, security/fraud prevention, analytics, content moderation, communications delivery, and advertising/measurement services. These providers are contractually restricted in how they may use information.
• Payment Partners: Payment and purchase information is processed by payment partners for payment processing and anti-fraud purposes. We may receive purchase confirmations and transaction details needed to validate transactions.
• Advertising Partners: We may share information with advertising partners to deliver more relevant ads and measure ad performance, subject to applicable law and your choices. Depending on your jurisdiction, certain disclosures may be considered a "sale" or "sharing" of personal information for targeted advertising.
• Marketing Partners: We may share information to enable participation in promotions, to market the Services on other platforms, and to measure marketing effectiveness.
• Affiliates and Corporate Group: We may share information with affiliates or entities under common control (if any) for the purposes described in this Privacy Policy, to the extent permitted by law.
• Legal and Safety: We may disclose information:
  • to comply with law or respond to compulsory legal process (e.g., subpoenas, court orders);
  • to verify or enforce compliance with policies governing the Services;
  • to protect our rights, property, or safety, or those of users, partners, or others.
• Business Transfers: We may disclose information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, or sale of assets.
• With Your Consent or at Your Request: We may share information when you consent or direct us to do so.
• Links to Other Websites, Devices, Apps, and Features: The Services may link to or integrate with third-party services that operate independently. Their privacy practices are governed by their own notices and policies.

5. Retention of Personal Information

We retain personal information for as long as necessary to:

• provide the Services and fulfill the purposes described in this Privacy Policy;
• comply with legal, tax, accounting, or regulatory obligations;
• resolve disputes, enforce agreements, and protect against fraud and abuse; and
• for legitimate business purposes (including maintaining records), where permitted by law.

When we no longer need personal information, we will delete, de-identify, or securely destroy it consistent with our retention policies and applicable law.

6. Your Rights

Your personal information belongs to you. Depending on the jurisdiction in which you reside and subject to applicable law and exceptions, you may have rights such as:

• Access/Right to Know: request access to personal information we hold about you.
• Correction: request correction of inaccurate personal information.
• Deletion: request deletion of personal information.
• Data Portability: request a portable copy of certain personal information.
• Opt-Out: opt out of certain processing, such as targeted advertising or certain disclosures that may be considered "sale" or "sharing" under applicable law.
• Withdrawal of Consent: where processing is based on consent, withdraw consent at any time (without affecting prior lawful processing).
• Appeal/Complaint: appeal certain decisions or lodge complaints with relevant authorities where applicable.

7. Exercising Your Rights and Your Choices

To exercise rights, contact us as described in Section 10. We may need to verify your identity and, where permitted by law, may decline requests that are unreasonably repetitive, require disproportionate effort, or would impair the rights of others.

Account controls:

• You can access or correct certain account information via your account settings.
• You may request deletion of your account via in-app/account settings (where available) or by contacting us. If you are a creator with published content, additional steps may be required to manage or remove public content prior to account deletion, depending on product functionality and legal obligations.

Communications:

• You may manage communication preferences (including marketing) through settings or by using unsubscribe mechanisms in emails.

Cookies and ads:

• You may manage certain cookies through cookie settings (where available), browser controls, or mobile OS privacy settings. You may also limit ad personalization via device settings and (where available) in-app "Ads Settings" or "Privacy Choices."

8. How We Protect Personal Information

We maintain safeguards designed to protect personal information we collect. However, no method of transmission over the internet is completely secure. To the extent permitted by law, we cannot guarantee absolute security of information transmitted to us. You play an important role in protecting your account by keeping credentials confidential and notifying us if you suspect unauthorized access.

9. Children's Personal Information

The Services are designed for a general audience unless otherwise indicated. Where we have actual knowledge that we are collecting personal information from children under applicable age thresholds (e.g., under 13 in the United States), we will obtain verifiable parental consent where required by law, and provide required notices and protections.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us at:

Email: cs@openstory.me

Or write to:

11. Links to Other Websites

The Services may include hyperlinks to third-party websites or services. This Privacy Policy does not cover how those third parties process personal information. We recommend reviewing their privacy policies.

12. Updates to Our Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will post the updated policy through the Services and indicate the "Last Updated" date at the top. For material changes, we may provide additional notice as required by law.

13. Regional Privacy Disclosures (United States)

13.1 For U.S. Residents

This section supplements the Privacy Policy and applies to U.S. residents.

Information we process:

• We may request date of birth or age-related information to help verify eligibility for certain features and tailor content and advertising.
• If parental consent is required for a child, we may collect a parent/legal guardian email address (and where required, the child's name) to provide notice and obtain consent.

13.2 For Consumers Residing in Certain U.S. States

This section supplements the Privacy Policy and applies to consumers who reside in U.S. states with comprehensive privacy statutes, to the extent applicable, and excluding applicants and personnel.

A. Collection, Use, and Disclosure of Personal Information

(1) Categories of Personal Information We Collect

In the last 12 months, we may have collected categories such as:

• Identifiers (e.g., name, email, account name, device identifiers, IP address, online identifiers, date of birth/age range, contact information).
• Customer records and verification information (e.g., payout or tax processing information where applicable).
• Commercial information (e.g., records of purchases, subscriptions, transaction history).
• Internet or other electronic network activity information (e.g., interactions with the Services, browsing/app usage information, advertising interactions).
• Sensory information (e.g., images/audio/video you upload or create, where you choose to provide them).
• Inferences drawn from the above (e.g., preferences and interests).

(2) Sensitive Personal Information

Depending on your activities and where you reside, we may process certain information that could be considered "sensitive" under state law (e.g., precise geolocation if you enable it; government identifiers for tax purposes for creators). We use such information only as permitted by law and for limited, disclosed purposes (e.g., compliance, fraud prevention, payout processing), unless we provide additional notice or choices.

(3) Sources of Personal Information

We may collect personal information from:

• You and your devices through your use of the Services;
• Service providers and vendors who help operate the Services;
• Advertising networks and analytics providers (subject to law and your choices);
• Payment partners; and
• Social media networks or third-party login providers (if you choose to connect them).

(4) Business and Commercial Purposes

See Section 3 for purposes of collection and use.

(5) Categories of Third Parties to Whom We Disclose

We may disclose personal information to:

• Service providers/vendors;
• Payment partners;
• Advertising/marketing and analytics providers;
• Other users (if you choose to make content public);
• Professional advisors (e.g., auditors, legal counsel);
• Government entities or law enforcement where required.

(6) "Sale" / "Sharing" / Targeted Advertising

Depending on your state of residence and how state law defines these terms, certain disclosures (e.g., to advertising partners for targeted advertising) may constitute "sale" or "sharing." We provide opt-out rights where required.

B. Consumer Rights

Depending on your state and subject to applicable law and exceptions, you may have the right to:

• Know/Access: request information about the personal information we collect, use, and disclose.
• Delete: request deletion of personal information.
• Correct: request correction of inaccurate personal information.
• Portability: request a portable copy of certain personal information.
• Opt Out: opt out of targeted advertising and/or certain disclosures considered "sale" or "sharing."
• Non-Discrimination: not be discriminated against for exercising rights.
• Appeal: appeal a denial of a rights request where required.

How to submit requests

Submit requests by contacting us at cs@openstory.me. We may verify your identity before processing requests. Authorized agents may submit requests on your behalf where permitted by law, subject to verification of authority.

C. Data Retention

See Section 5 for retention principles.

D. Contact

For privacy inquiries and rights requests, contact: cs@openstory.me