Fableform, Inc. (“Fableform,” “we,” “us,” or “our”) operates the Fableform platform, website (fableform.ai), desktop application, and related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.
By accessing or using Fableform, you agree to this Privacy Policy. If you do not agree, you are not authorized, and must not, use the Service.
1. Information We Collect
Fableform's architecture is designed to give your creative work maximum privacy while maintaining the coordination layer needed to run the platform. Your media files are stored in the location you choose, such as your own device or a network drive you select. When you use an AI feature, the content that feature needs passes through our servers to the Third-Party Model providers (as defined in our Terms of Service) that perform it. Projects synced to your Fableform account, including all team-shared projects, are also stored on our servers, as described below. Our servers store the information needed to manage your account, route and audit generation requests, maintain visual continuity within your projects, and process billing and compliance. The categories below describe what we collect and where it lives.
1.1 Information You Provide
- Account Information: Name, email address, password, and optional profile details when you create an account.
- Payment Information: Billing address and payment method details processed through our third-party payment processor. We do not store full credit card numbers on our servers.
- Generation Inputs and Outputs: When you use an AI feature, the content that feature needs transits through our servers to the Third-Party Model provider that performs it. Depending on the feature, this includes prompts and reference images sent to image, video, and 3D models; screenplay text you import and choose to parse; messages, attachments, and project context you share with the Fable assistant; images used in compositing and image-analysis tools; and voice recordings for dictation, which are transcribed into text and not stored. Reference images and generated files are held in temporary storage while a request is processed: generated files are available for one hour and are deleted automatically within about a day. We retain a generation audit record for each generation request, which includes the text of your prompt, the Third-Party Model provider and model used, generation settings, cost, timestamp, and outcome. Generation audit records are retained for billing, cost tracking, dispute resolution, and abuse monitoring.
- Project Files and Media: Your media files (video, audio, images, and generated media) and your project file (.fbl) are stored in the location you choose, such as your local device or a network drive you select. When a project is synced to your Fableform account (required for team sharing), we store its contents on our servers so your devices and collaborators stay in sync. This includes screenplay text, prompts, shot and scene descriptions, characters and elements, comments, Fable assistant memories, and the names and folder locations of your media files, plus periodic autosave backups of the project database. The media files themselves are not uploaded; media you share with your team travels over your own shared drive. If you use a third-party network drive, that service handles your files under its own terms.
- Project Registry and Memory Data: We store project registry information on our servers, including project names, ownership, collaborator permissions, the project's folder location on your device, and other project-level metadata needed to coordinate access. We also store project memory embeddings: numeric representations, created by a Third-Party Model provider, of facts the Fable assistant saves about your project, used to recall relevant context. We store a short label with each embedding, not the underlying text.
- Fable Assistant Conversations: Your conversations with the Fable assistant, including attachments, are stored on our servers with your project.
- Communications: Messages you send to us via email, contact forms, or in-app support channels, and any diagnostic bundle (including recent app logs) you choose to send with a support request.
1.2 Information Collected Automatically
- Usage Data: Metadata about your use of the Service, such as features used, generation request counts, pages visited, session duration, and interaction patterns. The text of your prompts is stored in the generation audit log described in Section 1.1, not in usage analytics.
- Device and Technical Data: IP address, browser type, operating system, device identifiers, and screen resolution.
- Log Data: Server logs including access times, error reports, and referring URLs. Operational logs and error alerts may include excerpts of prompts and chat messages, along with your user ID, for troubleshooting; these are retained as described in Section 4.
- Cookies and Similar Technologies: We use cookies, local storage, and similar technologies for authentication, preferences, and analytics. See Section 7 for details.
- Content Safety Screening: Images you upload or generate are automatically screened for prohibited content using AWS Rekognition and Google Cloud Vision. The terms associated to such screening are set forth in the separate Terms of Service. This screening can detect faces and recognize public figures so we can enforce our rules on real-person likeness. If screening detects apparent child sexual abuse material, we preserve and report it as required by law. S
1.3 Information from Third Parties
- Authentication Providers: If you sign in via a third-party service, we receive your name, email, and profile image as authorized by that provider.
- Analytics Services: We use privacy-respecting analytics to understand aggregate usage patterns.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process transactions and manage your account
- Route generation requests to Third-Party Model providers on your behalf
- Recall relevant project context for the Fable assistant through similarity search
- Screen content for safety and enforce our Acceptable Use Policy
- Audit and meter generation activity for billing, cost tracking, dispute resolution, and abuse monitoring
- Send transactional communications (receipts, account updates, security alerts)
- Send marketing communications (only with your consent; you may opt out at any time)
- Monitor for abuse, fraud, and violations of our Terms of Service
- Comply with legal obligations
- Improve our algorithms, infrastructure, and user experience through aggregated, de-identified usage analytics
3. How We Share Your Information
We do not sell your personal information. We share information only in the following circumstances:
3.1 Service Providers
We share data with third-party vendors who perform services on our behalf, including:
- Third-Party Model Providers: Content you submit to AI features is transmitted to Third-Party Model providers to fulfill your requests. Our providers currently include Google (Gemini models through Google Cloud and Google AI Studio), OpenAI, Anthropic, Kling AI, World Labs, and fal.ai. We reserve the right, in our sole discretion, to add (or drop) Third-Party Model providers at any time. Each processes this content under its own terms, which may evolve from time-to-time and which are out of our control. For example, Kling AI currently stores data on servers in Singapore and keeps prompt and output logs for up to 30 days. For some features, such as reusable characters and elements or 3D worlds, the provider keeps the reference material you supply under its own terms. See the Terms of Service that govern the use of, and reliance on, Third-Party Model providers, and the following Sections of this Privacy Policy: Section 4 regarding provider retention; Section 5 regarding AI training; and Section 10 regarding the locations in which these providers may process data.
- Content Safety Providers: AWS Rekognition and Google Cloud Vision screen images for prohibited content, as described in Section 1.2.
- Payment Processing: Your payment information is processed by our payment provider under their own privacy policy.
- Cloud Infrastructure: Our servers, databases, and storage are hosted by Amazon Web Services (AWS) in the United States.
- Operational Tools: We use workplace and monitoring tools, such as Slack, to receive error alerts, which may include your user ID and short excerpts of the request that failed.
3.2 Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Fableform, our users, or the public.
3.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
3.4 With Your Consent
We may share information for other purposes with your explicit consent.
4. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. Specifically:
- Account data: Retained until you delete your account.
- Project files and media: Your media files are stored in the location you choose, not on our servers, and we cannot delete, restore, or recover them on your behalf. Synced project content and Fable assistant conversations are retained until you delete the project. Autosave backups are kept on a rolling basis: the most recent 20, plus one per day for 30 days.
- Project registry and memory data: Retained on our servers until you delete the project or your account, subject to backup retention and legal compliance.
- Generation audit records: Billing and usage fields (provider, model, settings, cost, timestamp, and outcome) are retained for 7 years for financial compliance and dispute resolution. The prompt text in each record is retained for 3 years for dispute resolution and abuse monitoring, then deleted.
- Generated files and reference uploads (temporary storage): Available for 1 hour after generation and deleted automatically within about a day.
- Operational and diagnostic logs and error alerts: Retained for up to 90 days.
- Support diagnostic bundles: Retained for up to 1 year.
Upon account deletion, we will delete your account information, the projects you own (unless you first transfer them to a collaborator) with their synced content, autosave backups, and Fable assistant conversations, within 30 days. We keep generation audit records and billing records for the periods above, for financial compliance and to resolve billing, abuse, and intellectual property disputes. We keep other information only where required by law, or where a third-party provider holds it under its own retention practices.
Third-Party Model providers may retain inputs and outputs under their own terms, for example for abuse monitoring, safety review, or content moderation. Retention periods vary by provider: some delete content shortly after a request is processed, while others keep it for up to 30 days or for the duration of the provider's service agreement. Content flagged by a provider's safety systems may be kept longer, and may be reviewed by the provider's personnel or contractors, who may be located outside the United States. These retentions are governed by the providers' own privacy and data processing terms. Where we are able to request deletion on your behalf from a provider, we will do so.
Beta and pre-release programs. If you participate in a Fableform beta or other pre-release program, expanded diagnostic records of your generation requests and responses (including prompt text and response metadata, but not your generated media) may be retained longer than standard operational logs, for up to 12 months, as described in the applicable Beta Access Agreement. Those terms apply only to participants in the relevant program.
5. AI Training and Your Content
Fableform does not use your content to train AI models.
Your screenplays, images, videos, prompts, and generated outputs are not used by Fableform to train, fine-tune, or improve any AI model. Your creative work remains yours.
We use Third-Party Model providers only under terms or account settings that currently prohibit them from using content submitted through Fableform to train their models. These protections are set out in each provider's own terms and data processing agreements, and in some cases are commitments made to a partner through which we access a provider's services rather than to Fableform directly. We continue to negotiate, update, and expand these protections as we add or evaluate new providers. Please refer back to our Terms of Service that address these model training risks, obligations, and responsibilities in greater detail.
If you would like to know which Third-Party Model providers are currently engaged for your generation requests, or to limit your generations to a specific subset of providers, please contact us at privacy@fableform.ai.
Your prompts, reference images, and generated output files transit through our servers to and from the Third-Party Model provider you select. Generated output files are available for one hour and deleted automatically within about a day. A record of each generation request, including the text of the prompt, is retained in the generation audit log described in Section 1.1. Your media files remain in the storage location you choose. Synced project content is stored on our servers as described in Section 1.1.
6. Data Security
We implement commercially reasonable technical and organizational measures to protect your information, including:
- Encryption in transit using TLS, and encryption at rest on AWS using customer-managed keys
- JWT-based authentication with secure token handling
- Secrets management isolated from application code, with service credentials stored in AWS Secrets Manager
- Role-based access controls at the project and team level
- Periodic review of our security practices
- Data processing terms with our Third-Party Model providers
No system is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
7. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential Cookies: Authentication, session management, security. Required for the Service to function.
- Preference Cookies: Remembering your settings and preferences.
- Analytics Cookies: Understanding aggregate usage patterns to improve the Service. We use privacy-respecting analytics tools.
We do not use advertising cookies or sell data to advertisers. You can manage cookie preferences through your browser settings. Disabling essential cookies may impair Service functionality.
8. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your personal data held on our servers, subject to legal retention requirements and the limitations described in Section 4 regarding third-party providers and generation audit retention. Media files stored in the location you choose are under your control and can be deleted directly from there at any time.
- Portability: Request an export of your data in a machine-readable format.
- Opt-Out: Opt out of marketing communications at any time.
- Objection: Object to certain processing activities where permitted by law.
- Limit Use of Sensitive Personal Information: Where applicable, limit our use of sensitive personal information to purposes necessary to provide the Service.
To exercise these rights, contact us at privacy@fableform.ai. We may need to verify your identity before fulfilling a request in order to protect the security of your information. We will respond within 30 days (or as required by applicable law).
California Residents (CCPA / CPRA)
California residents have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know what personal information is collected and how it is used, the right to request deletion, the right to correct inaccurate information, the right to opt out of the sale or sharing of personal information, and the right to limit the use of sensitive personal information. We do not sell personal information.
European Residents (GDPR)
If you are located in the European Economic Area or the United Kingdom, our legal bases for processing include: performance of our contract with you, your consent, our legitimate business interests, and compliance with legal obligations. Where personal data is transferred outside the EEA or the UK to a country without an adequacy decision, we rely on Standard Contractual Clauses or other lawful transfer mechanisms. You have the right to lodge a complaint with your local supervisory authority.
Other US States
If you reside in a state with a comprehensive privacy law (including Virginia, Colorado, Connecticut, Utah, Texas, and others as they take effect), you may have rights similar to those described above. Please contact us at privacy@fableform.ai to exercise any such rights.
9. Children's Privacy
Fableform is not intended for anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a person under 18, we will delete it promptly.
10. International Data Transfers
Fableform is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States.
In addition, certain service providers, including some of our Third-Party Model providers, operate data centers outside the United States. As a result, your prompts, reference images, and related generation data may be processed in regions including but not limited to the European Economic Area, the United Kingdom, Singapore, and other parts of Asia, depending on which features and providers your requests route to. Some providers process requests in global regions they select, or use affiliates or subprocessors located in additional countries. Where required by applicable law, we rely on Standard Contractual Clauses, adequacy decisions, or other recognized transfer mechanisms for international data transfers.
11. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the “Last Updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
13. Security Incidents
If we become aware of a security incident that affects your personal information, we will notify you and, where required, the appropriate authorities in accordance with applicable law.
14. Contact Us
If you have questions about this Privacy Policy or our data practices:
Email: privacy@fableform.ai
Mail:
Fableform, Inc.
1111 6th Ave Ste 550
PMB 584726
San Diego, CA 92101-5211