Back to Home

Privacy Policy

Effective Date: May 17, 2026 · Last Updated: June 6, 2026

Fableform LLC (“Fableform,” “we,” “us,” or “our”) operates the Fableform platform, website (fableform.ai), desktop application, and related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

By accessing or using Fableform, you agree to this Privacy Policy. If you do not agree, please do not use the Service.


1. Information We Collect

Fableform's architecture is designed to give your creative work maximum privacy while maintaining the coordination layer needed to run the platform. Your creative files are stored on your local device. Our servers store the information needed to manage your account, route and audit generation requests, maintain visual continuity within your projects, and process billing and compliance. The categories below describe what we collect and where it lives.

1.1 Information You Provide

  • Account Information: Name, email address, password, and optional profile details when you create an account.
  • Payment Information: Billing address and payment method details processed through our third-party payment processor. We do not store full credit card numbers on our servers.
  • Generation Inputs and Outputs: When you initiate a generation request, the prompts and reference images you select transit through our API pipeline to the AI provider you choose. Generated output files return through the same pipeline and are temporarily cached on our servers for up to one hour, after which they are automatically deleted. We retain a generation audit record for each request, which includes the text of your prompt, the AI provider used, generation cost, duration, timestamp, and outcome. Generation audit records are retained for billing, cost tracking, dispute resolution, and abuse monitoring.
  • Local Project Files: Your screenplays, video and audio assets, image references, and your project's working files (saved on your device in a local project database) are stored on your local device. The creative contents of your projects are not stored on our servers.
  • Project Registry and Continuity Data: We store project registry information on our servers, including project names, ownership, collaborator permissions, and other project-level metadata needed to coordinate access. We also store visual continuity embeddings, which are numeric representations of scene and asset descriptions used for similarity search within your projects. These embeddings include the source text that was embedded but do not include your generated images, videos, or audio files.
  • Communications: Messages you send to us via email, contact forms, or in-app support channels.

1.2 Information Collected Automatically

  • Usage Data: Metadata about your use of the Service, such as features used, generation request counts, pages visited, session duration, and interaction patterns. The text of your prompts is stored in the generation audit log described in Section 1.1, not in usage analytics.
  • Device and Technical Data: IP address, browser type, operating system, device identifiers, and screen resolution.
  • Log Data: Server logs including access times, error reports, and referring URLs. Some operational logs may include prompt text for diagnostic purposes; these logs are retained as described in Section 4.
  • Cookies and Similar Technologies: We use cookies, local storage, and similar technologies for authentication, preferences, and analytics. See Section 7 for details.

1.3 Information from Third Parties

  • Authentication Providers: If you sign in via a third-party service, we receive your name, email, and profile image as authorized by that provider.
  • Analytics Services: We use privacy-respecting analytics to understand aggregate usage patterns.

1.4 Identity Verification Information

Certain features of the Service, including participation as a seller in our marketplace, require identity verification. Where applicable, we work with a third-party identity verification provider to collect and confirm information such as government-issued identification documents and a photograph used to confirm that the document matches the person presenting it. Depending on the verification flow used, this process may include biometric data such as facial geometry. Identity verification is required only for users who participate in features that call for it, and is used solely to confirm your identity and to meet legal and compliance obligations associated with those features.

Identity verification information is collected and processed by our verification provider under their own privacy practices and our data processing agreement with them. Some categories of this information, including government identification and biometric data, may be considered sensitive personal information under applicable law. You may have additional rights with respect to this information. See Section 8.


2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and manage your account
  • Route generation requests to AI providers on your behalf
  • Maintain visual continuity within your projects through similarity search of embedded scene and asset descriptions
  • Audit and meter generation activity for billing, cost tracking, dispute resolution, and abuse monitoring
  • Send transactional communications (receipts, account updates, security alerts)
  • Send marketing communications (only with your consent; you may opt out at any time)
  • Verify the identity of users for marketplace participation and other regulated features
  • Monitor for abuse, fraud, and violations of our Terms of Use
  • Comply with legal obligations
  • Improve our algorithms, infrastructure, and user experience through aggregated, de-identified usage analytics

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

3.1 Service Providers

We share data with third-party vendors who perform services on our behalf, including:

  • AI Generation Providers: Your text prompts and reference images are transmitted to third-party AI providers to fulfill generation requests. See Section 5 regarding AI training and Section 10 regarding the locations in which these providers may process data.
  • Identity Verification Providers: Where required for marketplace participation or other regulated features, identity information is shared with our verification provider to confirm your identity.
  • Payment Processing: Your payment information is processed by our payment provider under their own privacy policy.
  • Cloud Infrastructure: Our servers and databases are hosted on secure cloud infrastructure.
  • Blockchain Services: Where you choose to register your work on a public blockchain, the registration information is recorded on that blockchain. Blockchain transactions are public by design and, once recorded, cannot be deleted or modified. You will be informed before initiating any on-chain action.

3.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Fableform, our users, or the public.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

3.4 With Your Consent

We may share information for other purposes with your explicit consent.


4. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data: Retained until you delete your account.
  • Local project files: Your project files and creative contents are stored on your local device, not on our servers. We do not have the ability to delete, restore, or recover these files on your behalf. You may delete or export your projects directly from your local device at any time.
  • Project registry and continuity data: Retained on our servers until you delete the project or your account, subject to backup retention and legal compliance.
  • Generation audit records: Including prompt text, provider, cost, duration, and outcome. Retained for 7 years for financial compliance, dispute resolution, and abuse monitoring.
  • Generated output files (server cache): Retained for up to 1 hour after generation, then automatically deleted by a background sweeper.
  • Operational and diagnostic logs: Retained for up to 90 days.

Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law, necessary for legitimate business purposes (such as fraud prevention or financial records), or held by a third-party provider under their own retention practices.

Some AI generation providers may retain certain inputs and outputs for limited periods as part of their own safety, security, or content-moderation operations. These retentions are governed by the providers' own privacy and data processing terms. Where we are able to request deletion on your behalf from a provider, we will do so. Some retentions, such as those required for a provider's content safety obligations, may continue for a defined period before deletion.

Information recorded on a public blockchain is technically permanent and cannot be deleted by Fableform, the provider, or any other party, even upon account closure or a deletion request.

Beta and pre-release programs. If you participate in a Fableform beta or other pre-release program, certain generation request and response records (including prompt text and response metadata, but not your generated media) may be subject to expanded retention as described in the applicable Beta Access Agreement. Those terms apply only to participants in the relevant program and only for its duration and a limited period afterward.


5. AI Training and Your Content

Fableform does not use your content to train AI models.

Your screenplays, images, videos, prompts, and generated outputs are not used by Fableform to train, fine-tune, or improve any AI model. Your creative work remains yours.

When we transmit your prompts and reference images to AI generation providers to fulfill your generation requests, we do so on the basis that the provider will not use your content to train their models. We contract with our AI generation providers on this basis and work to maintain data processing agreements with each provider that reflect this principle. We continue to negotiate, update, and expand these protections as we add or evaluate new providers.

If you would like to know which AI providers are currently engaged for your generation requests, or to limit your generations to a specific subset of providers, please contact us at privacy@fableform.ai.

Your prompts, reference images, and generated output files transit through our pipeline to and from the AI provider you select. Generated output files are not persistently stored on our servers and are deleted from our cache within one hour. A record of each generation request, including the text of the prompt, is retained in the generation audit log described in Section 1.1. The original creative files in your projects (your screenplays, video and audio assets, and other working files) remain on your local device and are not transmitted to our servers.


6. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including:

  • Encryption in transit using TLS, and infrastructure-level disk encryption at rest provided by our hosting platform
  • JWT-based authentication with secure token handling
  • Secrets management isolated from application code, with API keys and provider credentials stored outside version control
  • Role-based access controls at the project and team level
  • Regular security assessments
  • Data processing agreements with our AI generation and identity verification providers

No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security.


7. Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Essential Cookies: Authentication, session management, security. Required for the Service to function.
  • Preference Cookies: Remembering your settings and preferences.
  • Analytics Cookies: Understanding aggregate usage patterns to improve the Service. We use privacy-respecting analytics tools.

We do not use advertising cookies or sell data to advertisers. You can manage cookie preferences through your browser settings. Disabling essential cookies may impair Service functionality.


8. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data held on our servers, subject to legal retention requirements and the limitations described in Section 4 regarding third-party providers, generation audit retention, and public blockchains. The creative files in your projects, stored on your local device, are under your control and can be deleted directly from your device at any time.
  • Portability: Request an export of your data in a machine-readable format.
  • Opt-Out: Opt out of marketing communications at any time.
  • Objection: Object to certain processing activities where permitted by law.
  • Limit Use of Sensitive Personal Information: Where applicable, limit our use of sensitive personal information to purposes necessary to provide the Service.

To exercise these rights, contact us at privacy@fableform.ai. We may need to verify your identity before fulfilling a request in order to protect the security of your information. We will respond within 30 days (or as required by applicable law).

California Residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know what personal information is collected and how it is used, the right to request deletion, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right to limit the use of sensitive personal information. We do not sell personal information.

Identity verification data, including government identification and any biometric information, is treated as sensitive personal information.

European Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, our legal bases for processing include: performance of our contract with you, your consent, our legitimate business interests, and compliance with legal obligations. Where personal data is transferred outside the EEA or the UK to a country without an adequacy decision, we rely on Standard Contractual Clauses or other lawful transfer mechanisms. You have the right to lodge a complaint with your local supervisory authority.

Other US States

If you reside in a state with a comprehensive privacy law (including Virginia, Colorado, Connecticut, Utah, Texas, and others as they take effect), you may have rights similar to those described above. Please contact us at privacy@fableform.ai to exercise any such rights.

Biometric Information

Where we or our verification provider collect biometric information from you in connection with identity verification, we will obtain any consents required by applicable state biometric privacy laws and handle that information in accordance with those laws.


9. Children's Privacy

Fableform is not intended for children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.


10. International Data Transfers

Fableform is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States.

In addition, certain service providers, including some of our AI generation providers, operate data centers outside the United States. As a result, your prompts, reference images, and related generation data may be processed in regions including but not limited to the European Economic Area, the United Kingdom, and parts of Asia, depending on which features and providers your generations route to. Where required by applicable law, we rely on Standard Contractual Clauses, adequacy decisions, or other recognized transfer mechanisms for international data transfers.


11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.


12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the “Last Updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.


13. Security Incidents

If we become aware of a security incident that affects your personal information, we will notify you and, where required, the appropriate authorities in accordance with applicable law.


14. Contact Us

If you have questions about this Privacy Policy or our data practices:

Email: privacy@fableform.ai

Mail:
Fableform LLC
1111 6th Ave Ste 550
PMB 584726
San Diego, CA 92101-5211