Version: 2026-11-02 Effective date: November 2, 2026
FableForge LLC, Massachusetts, United States, operates FableArtist at fableartist.com and app.fableartist.com. Contact support@fableartist.com for privacy questions and requests. This notice explains data handling for our hosted service; it is not permission for optional marketing or other uses requiring separate consent.
1. Information we handle
- Accounts and profiles: account identifiers, email address, sign-in provider information and profile details you supply, such as display name, username, avatar, pronouns, date of birth, country, timezone and biography. Some fields are optional. Do not provide information you do not want processed for the corresponding feature.
- Creative projects: stories, prompts, imported text, reference images, likenesses, voices, audio, video, project settings, generated results and associated files that you submit or create. Your material may contain information about you or other people; submit it only with appropriate rights and permissions.
- Payments and usage: payment/session identifiers, payment status, purchased and promotional credits, holds, usage charges, model/request identifiers, token or media counts, timestamps and account ledger entries. Stripe collects payment card or bank details through its payment interface; do not send full payment details to our support team.
- Agreement records: account ID, accepted agreement/privacy version and content hashes, server acceptance time, age confirmation and the acceptance wording. These records are held server-side, separately from editable profile information. We do not require an identity-document upload merely to accept the agreement.
- Technical and support records: IP addresses and request information in service/security logs, device or browser information supplied in requests, error reports, support messages, and reports of suspected misuse. A support request may include information you choose to send. Do not attach suspected CSAM or unlawful imagery; report only non-content identifiers and a brief non-graphic description.
We receive this information from you, your sign-in provider, your use of the Service, our payment/infrastructure providers, and people reporting support or safety issues.
2. Why we use it
We use information to create and authenticate accounts; apply invitations and access controls; save projects and generate requested material; process payments, credits and refunds; maintain accounting and acceptance evidence; provide support; troubleshoot failures; protect accounts and systems; investigate abuse; comply with legal duties; and establish or defend legal claims.
We use data only as reasonably needed for these purposes or another purpose explained to you with any required consent. Where a legal basis is required, relevant bases may include providing the service under our contract, legitimate interests in operating and securing it, legal obligations, and consent for optional uses. Mandatory local protections continue to apply.
3. Providers and disclosures
The hosted service uses:
- Supabase for authentication and account, profile, billing and agreement records. See Supabase privacy information.
- Google Cloud and Firebase Hosting for hosting, project storage and related infrastructure. Hosted project files may be held on the application server and mirrored to private cloud storage. See Google Cloud privacy information.
- Stripe for payments and related payment/fraud processing. See Stripe’s Privacy Policy.
- fal.ai and the model providers used through it to process the prompts, relevant project context and reference media needed for the generation feature you select. Provider processing can involve subcontractors or underlying model operators. See fal’s Privacy Policy, Data Processing Addendum, and any terms linked for the selected model.
- Sign-in providers, such as Google, when you choose them. Their own notices govern information they process independently. Authentication libraries may be delivered through a third-party CDN, which receives ordinary network request information when contacted.
Provider retention, logging and model-training practices depend on the provider, model and contractual settings. Do not assume that submitted prompts or reference media have zero retention or are excluded from every third-party training use. We do not make that guarantee. Contact support before submitting material subject to confidentiality, sensitive-data or contractual restrictions that require specific assurances. We do not use your private projects to train our own general-purpose AI models without separate notice and permission.
We may share information with authorized personnel, contractors and professional advisers where reasonably necessary for service, support, security or legal purposes, subject to appropriate obligations. We may disclose information in a genuine business transfer, with required safeguards and notice. We do not publish your private projects for advertising without your permission.
We may disclose relevant information when legally required or permitted to respond to legal process, protect people or systems, investigate unlawful activity, or meet reporting duties. Suspected child exploitation may require reporting to NCMEC or competent authorities and restricted preservation of relevant evidence. We do not promise advance notice where prohibited or incompatible with a lawful investigation. An upstream provider may also have its own duties.
4. Cookies and browser storage
The studio uses authentication/session cookies to keep you signed in and uses local or session storage for preferences such as theme and sign-in navigation. Our agreement acceptance record is not stored solely in browser storage. Blocking necessary cookies may prevent sign-in. You can clear cookies through your browser or sign out using the Service.
Our current application does not use an advertising-pixel or session-replay integration to target advertising. Independent provider websites, including hosted payment and sign-in pages, have their own practices. Optional marketing or analytics requiring consent will be offered separately, not bundled into accepting the User Agreement. We do not sell personal information for money or provide private projects to advertisers for targeted advertising.
5. Retention, deletion and security
We generally retain account and project information while it is needed to provide your account and requested features. Contact support to request account closure, project deletion or information about a particular record. Deletion is not always immediate across active storage, cloud mirrors, provider systems, logs and backups. We assess and act on requests under applicable law, and explain relevant exceptions or verification requirements.
We may retain billing/transaction records, acceptance evidence, fraud/security records, legally required evidence and records needed for disputes or legal claims after account closure for the period reasonably needed or required by law. Preserved unlawful material must be restricted from ordinary access. We do not promise automatic erasure of financial or legal evidence when you close an account. Provider retention is also subject to their own applicable obligations and agreements.
We use access controls and other measures intended to protect information, but no service can guarantee absolute security. Do not submit credentials or unnecessary sensitive personal information in prompts. Keep your own lawful project backups; do not download or make extra copies of suspected unlawful imagery.
6. Your choices and rights
You can update available profile settings and contact support@fableartist.com to request access, correction, a copy, deletion, account closure, or an explanation of processing. Depending on where you live and applicable law, you may also have rights to portability, restriction, objection, withdrawal of consent, an appeal, or a complaint to a competent privacy authority. We may need proportionate information to verify your identity or authority. Do not email passwords, full card numbers or unnecessary identity documents.
We will not penalize you for exercising protected rights. Some information is necessary to provide the account or paid features, and deletion or objection can affect their availability. Withdrawing optional marketing permission does not require closing your account. Billing and statutory record-retention duties can limit what we can delete. If we decline a request, you may ask support for review and contact the relevant authority where available.
7. Location and age
Our company is based in the United States. Infrastructure and providers may process data in the United States, Canada or other countries, which may have different privacy protections. Where applicable law requires a transfer mechanism or other safeguards, those requirements must be met; account acceptance is not a waiver of them. Contact support before using the Service if your organization requires specific processing locations or a separate data-processing agreement.
The Service is for people aged 18 or older, subject to any higher contractual age requirement. If you believe a child has provided personal information or gained access, contact support. We will assess the report and take appropriate action under applicable law. Do not submit a child’s image or other information for sexualized or exploitative processing.
8. Changes and contact
We identify this notice by its version and effective date. We will provide notice of material changes and obtain separate consent where legally required. Acknowledging receipt of a notice does not waive your rights or authorize otherwise unlawful processing.
FableForge LLC — Massachusetts, United States Privacy, safety and account requests: support@fableartist.com Payment and refund questions: billing@fableartist.com