This Privacy Policy (the "Policy") describes how InStories (referred to in this Privacy Policy as "Company", "we", "us" or "our"), as the operator of the instoriesai.com website (the "Site") and developer of the mobile application, automatic application and smart home application associated with InStories (the "Application"), collects information when you visit the Site or use the Application, or any other website, pages, features or content owned or operated by the Company (separately and collectively, the "Service"). This policy also explains how we use and disclose the information we collect from you, and your rights with respect to that information. Terms that are not defined in this Policy will have the meanings given to them in our Terms of Use.

Please read the Terms of Use carefully before using or accessing our Services. By agreeing to the Terms of Use, you agree to the collection, storage, use and disclosure of your information as described in this Privacy Policy. Please note that if you do not agree with anything in this Privacy Policy, you should not use the Service.

We will notify you of changes to this Privacy Policy by posting the amended terms on the Service or via the email address we have on file. By continuing to use the Service after such changes are posted, you agree to be bound by the revised Policy. To find out when we last updated this policy, please refer to the date indicated after "Last Modified" at the top of this policy. If you do not agree to the changes, you must immediately stop using the Service. In addition, we may provide you with "just-in-time" disclosures or additional information about the collection, use, and data sharing practices of specific parts of our Service. These notices may provide additional information about our privacy practices or additional choices about how we treat your information.

A.Account Information. You can use our Service as a guest or you can create an account. When you create an account with us, we will ask you to provide certain personal information, which may include: name, email address and password. We may request additional information necessary to establish and maintain your account.
B.Information that you provide to us directly and voluntarily. If you visit or access our Service, we may collect information that you provide to us when you communicate with one of our departments, such as customer service or technical services. You may also choose to provide us with additional information about yourself in your profile and more.
C.Information Collected Automatically Through the Service. We may automatically collect information about you when you use the Service. For example, we collect information about your listening preferences so that we can suggest other audiobooks that we think may be of interest to you. We may also track your behavior in our App, including, without limitation, what you click on in the App and what audiobooks you collect.
D.Cookies and similar tracking technologies. We use "cookies" and similar tracking technologies to collect information about your use of the Service and to provide you with interest-based advertising. For example, we collect information about how you interact with the features of our Site, how much time you spend on certain pages, and whether you have received an error message on our Service.
E.Geolocation information. We collect your geolocation data when you use our Service. For example, your device may be set up to share your real-time location information with us. In addition, content you create or share with us while using our Service may contain recorded geolocation information. In addition, some of the information we collect from your device (for example, IP address) may sometimes be used to approximate the location of your device.
F.Device information. We collect information about the device you use to access or use our Service. For example, we may collect the following information from your device: the type of device you use (e.g., mobile, automatic, smart home device, etc.); your Advertising ID ("IDFA" or "AdID"); type of network connection (for example, Bluetooth, WiFi, 3G, 4G, LTE, etc.); operating system and version (for example, iOS, Android or PC); the language settings of your mobile device; and your mobile service provider.

In some cases, the information we collect about you comes from third-party sources, as described below.
A.Third Party Applications or Services. We may collect information about you or others from third-party applications or services available on our Service. For example, when you create an account with us, you can do so by choosing to connect your existing social media account to our Service (e.g. Facebook, Google+, etc.). We receive certain information from your social media account based on your permissions and information that you have made public. We use this information to create an account for you on our Service.
B.Public databases and social media platforms. For users who upload content to our Service, we may populate your content submissions with publicly available information from other platforms, which may include personal information about you. The purpose of collecting information is to streamline your upload process and make it easier for you to upload content to our platform. For example, we may collect descriptions, social media accounts, or tags that you have used for the app on other platforms so that you can use the same information on our Service.
C.Your friends and family. We may receive your personal information from other users, such as your friends and family, when they wish to share something with you through or about our Service. When you invite others to join our Service, we will contact them on your behalf.

We use the information we collect through the Service to help us better understand how the Site or Service and our products, applications and services are used. We will only use your personal information as described in this Policy or as disclosed before such processing takes place.
If you believe that we are processing your information for purposes incompatible with the purposes for which we originally collected your information or subsequently obtained your consent, you may choose not to allow us to use your personal information for such processing. However, by limiting how we may process your information, some or all of the Service may not be available to you.
We describe below how we use your personal information:
A.To provide our service. In order to provide our service to you, we need to process certain personal information about you. We also share information about you at your request and with third parties performing functions on our behalf. When we share your information with these third parties, we only share the information that is necessary for the third party to perform its functions and to the extent permitted by applicable law. We cannot provide our service to you without processing your personal information.
B.To send you service-related communications. We want to ensure that you stay informed of news, updates or changes related to the Service or Account by sending you email communications, in-app notifications, and any other method permitted by law. For example, we may send you communications about changes to our security policies, your transaction information, or other important transaction information. Unlike marketing communications, service-related communications are not promotional in nature. You may not unsubscribe from service-related communications because such communications are part of our Service.
C.To respond to you. When you contact us with questions, comments or any other concerns, we use any information you provide to respond to you. We cannot respond to you without processing your personal information.
D.To enforce our terms, agreements or policies. When you access or use our Service, you are bound by our Terms of Service and policies, including this Privacy Policy. We ensure your compliance with our terms, agreements and policies (the "Terms") by: monitoring, investigating, preventing and mitigating any suspected or actual prohibited, unlawful or illegal activity on our Service or violations of our Terms; enforcing our Terms with third parties and/or partners; and, where applicable, collecting fees based on your use of our Service. We cannot perform our Service in accordance with our Terms without processing your personal information.
E.To ensure the security of our service. The security of your information requires us to process your personal information in order to improve and enforce our security measures. For example, we may process your personal information to combat spam, malware, security risks or malicious activity, or to monitor and verify your identity to prevent unauthorised access to your information. We cannot ensure the security of your information on our Service without processing your personal information for these purposes.
F.To comply with legal and regulatory obligations. Our business is subject to certain laws and regulations that may require us to process your personal information. For example, we may process your personal information to pay our taxes, fulfill our business obligations or, if necessary, to manage our risks as required by applicable law. We cannot perform our Service in accordance with our legal and regulatory obligations without processing your personal information for these purposes.
G.To personalize and enhance your experience on our Service. We want you to have the best possible experience on our Service, which is why we customize our Service based on your preferences (e.g., language selection, time zone, etc.), allow you to connect to your favorite third-party applications, and more. We cannot ensure your continued enjoyment of our Service without processing your personal information for such purposes.
H. Conductresearch and development activities. We want to continue to provide you with new or expanded services and products that you value. To do this, we analyse how you interact and use our Service and other personal information about you for research and development purposes. We apply technical, administrative and physical safeguards to your personal information when we use it for research and development purposes, such as pseudonymising or de-identifying your information, where possible, and limiting access to personnel performing research and development activities. We cannot ensure your continued enjoyment of our Services without processing your personal information for such purposes.
I.To Engage in Marketing Activities. We may engage in marketing activities with you to keep you updated about new products and services you may be interested in. We process your personal information, such as your contact information, to send you marketing communications, provide you with information about upcoming events, webinars or other relevant materials, and to deliver targeted marketing to you.

We also share user information with third parties in some other circumstances as follows:
A.Employees and Third-Party Service Providers. We disclose your information to our employees, contractors, affiliates, distributors, dealers, vendors and suppliers (collectively, the “Service Providers”) who provide certain services to us or on our behalf, such as operating and supporting the Service, analyzing data, or performing marketing or consulting services. These Service Providers will only have access to the information needed to perform these limited functions on our behalf. All our Service Providers are required by contract to handle your personal information in accordance with this Policy.
B.Corporate Organization. As a global company we may share your personal information within the Company’s corporate organization to provide you with the Service or respond to your requests. We have shared business processes, technical systems and management structures between legal entities in our corporate group.
C.Mergers and Acquisitions; Bankruptcy. We may share your personal information in the event we decide to sell, buy, merge or otherwise reorganize our business. We will handle and protect your personal information in accordance with this Policy in the event we share your information for such purposes.
D.Affiliated Businesses. As permitted by law or your consent, we may share your personal information with affiliated businesses. We will identify the affiliated business to you at the time of data collection.
E.Upon Your Request. Our Service allows you to interact with third-party apps and websites, friends and family, and more. For example, you can connect your Facebook account with our Service or share any content of our app on other platforms. We will share your personal information upon your request. Please note, once you decide to share information with others, we no longer control how such information may be used by the third parties in receipt of your personal information. Furthermore, some parts of our Service are publicly available, which means that any information you provide in these parts of our Service may be analyzed, collected, and used by others with access.
F.To Protect You, Us, or Others. We will share your personal information in the event we believe, in good faith, that such a disclosure would protect your interests or rights, or the interests or rights of others, including the Company and its personnel.
G.Compliance with Legal Obligations and Disclosure to Public Authorities. To the extent permitted by law, we will disclose your information to government authorities or third parties if:
• required to do so by law, or in response to a subpoena or court order or similar request from judicial or public authority; or,
• we believe that you have abused the Site or Service by using it to attack other systems or to gain unauthorized access to any other system, to engage in spamming or otherwise to violate applicable laws.
You should be aware that, following disclosure to any third party, your information may be accessible by others to the extent permitted or required by applicable law, unless specific restrictions have been implemented. As permitted by law, we will try to inform you of a law enforcement request, subpoena, or similar request from judicial or public authority disclosure prior to providing our response.

The Service is not intended for children under age of 16 or the applicable age of majority without consent from a parent or guardian. We do not knowingly collect or distribute personal information from or about children under the age of 16, unless permitted to do so by local law as based on the jurisdiction in which the child resides.
If a parent or guardian becomes aware that his or her child has provided us with personal information without their consent, he or she should contact us at goodstoriesservice@gmail.com. If we become aware that a child under 16 or the applicable age of majority has provided us with personal information, we will take steps to delete such information from our files.

We implement industry standard security measures intended to protect against the loss, misuse and alteration of the information under our control. Please be aware that no data transmission over the Internet can be guaranteed to be 100% secure. As a result, the Company cannot guarantee or warrant the security of any information you transmit on or through the Service and you do so at your own risk.
You should keep your account login information confidential, and make sure any wireless connections to our Service is secure. If you believe your account information has been compromised or that you have experienced unauthorized access to your account information, please contact us immediately at goodstoriesservice@gmail.com.

If you choose to use the Service or provide your information to us, your information may be transferred to, processed and maintained on servers or databases located outside of the country or jurisdiction where you are located, including Hong Kong Special Administrative Region. Such countries or regions may have laws that are less protective than the country or regions in which you reside. If you do not want your information transferred to or processed or maintained outside of the country or jurisdiction where you are located, you should not use the Site or Service.

Our Service may include links to third party websites or social media services. We do not control how such third parties collect, use, share or secure your personal information. Please read the privacy policies and settings on the third-party websites and social media services to ensure you are adequately informed how your personal information is handled.

A “Do Not Track” signal is a preference you may set on your browser, but we do not respond to Do Not Track signals.

You sign up to receive marketing communications from us. Marketing communications include any communications to you that are only based on advertising or promoting products and services. Transactional communications about your account or our Services are not considered “marketing” communications.
If you reside in the European Economic Area ("EEA"), the United Kingdom ("United Kingdom") or Switzerland, please see Section 15 below.

If you have registered an account with us, you may contact us to review, update, correct or delete the personal information we have on file. If you have any questions about your personal information about our Service, please contact us at goodstoriesservice@gmail.com. We will respond to reasonable requests without undue delay. When you seek to access or update your personal information, we may ask you to verify your identity before we can respond to your requests to ensure the security of your account.
If you reside in the European Economic Area ("EEA"), the United Kingdom ("United Kingdom") or Switzerland, please see Section 15 below.

Although retention requirements may vary from country to country, we generally apply the retention periods set out below. Please contact us if you have any questions about our retention periods or if you wish to delete your account.
• Marketing. We keep your marketing details for as long as you are still using our app.
• Activity data. We may store activity data, your user account information and content for a period of time after your account is closed for the purposes of establishing or defending legal claims, auditing and crime prevention.
• Telephone recordings. We may record our calls with you for call quality purposes. As required by applicable law, we will notify you that a call will be recorded before doing so. Any phone call with you may be kept for up to six years.
• Cookie and similar tracking data. We retain all information collected via cookies, clear gifs, flash cookies, web page counters and other technical or analytical tools for up to one year from the expiration of the cookie or the date of collection.

This section applies only to individuals who access or use our Service while located in the European Economic Area, Switzerland and/or the United Kingdom (collectively, the "Designated Countries") at the time of data collection. We may ask you to identify the country in which you are located when you use some of the Services, or we may rely on your IP address to identify the country in which you are located.
When we rely on your IP address, we cannot apply the terms of this section to anyone who hides or otherwise hides their location information from us so as not to appear in the designated countries. If any of the terms in this section conflict with other terms contained in this Policy, the terms in this section will apply to users in designated Countries.
A.Our relationship with you. InStories is a data controller with respect to any personal information collected from individuals accessing or using its Service. A "data controller" is an entity that determines the purposes for which and the manner in which any personal information is processed. All third parties who act as our service providers or otherwise act on our behalf are "data processors" who process your personal information in accordance with our instructions.
B.Marketing. We will only contact individuals located in the designated countries electronically (including by email or SMS) based on our legitimate interests, to the extent permitted by applicable law, or the individual's consent. Where we rely on a legitimate interest, we will only send you information about our Services that is similar to that which has been the subject of a previous sale or negotiations of a sale.
C.Legal bases for the processing of your personal information. We describe our legal bases for processing throughout this Policy. Below you will find a list of the purposes described in our policy with the corresponding legal bases for the processing. Generally, the legal bases on which we rely to process your personal information include: your consent to the processing; the fulfilment of our legal obligations; the need to protect your vital interests; the need to fulfil our obligations under any contract we have entered into with you or to take steps at your request before entering into a contract with you; the need to deal in the public interest; or for our legitimate interests as described in these sections.

Section	Purposes of the processing	Legal basis for processing
4 (a)	Third-party applications or services	The processing is based on our contractual obligations or to take measures at the request of the person before entering into a contract.
4 (b)	Public databases and social media platforms
4 (c)	Your friends and family
5 (a)	To provide our service
5 (b)	To send you service-related communications
5 (c)	To answer you
5 (d)	To enforce our terms, agreements or policies
5 (e)	To ensure the security of our service
6(a)	Third-party employees and service providers
6 (b)	Organization of the company
6 (d)	Affiliated companies
5 (g)	To personalize and improve your experience on our service	The processing is based on our legitimate interest in better understanding you, maintaining and improving the accuracy of the information we store about you and better promoting or optimizing our Services.
5 h)	Conduct research and development
6 (c)	Mergers and acquisitions; Bankruptcy
6 (g)	To protect you or others
5 (f)	To comply with legal and regulatory obligations	The processing is necessary to comply with our legal obligations, the public interest or your vital interests.
6 h)	Compliance with legal obligations and disclosure to public authorities

D.Your individual rights. We provide you with the rights described below when you use our Service. If you wish to exercise your rights under applicable law, please contact us at the address goodstoriesservice@gmail.com. Please note that we may seek to verify your identity when we receive a request for individual rights from you to ensure the security of your personal information.
o Right to Withdraw Your Consent. If we ever asked for your consent to process your personal information, you have the right to withdraw your consent at any time. A withdrawal of consent will not affect the lawfulness of our processing or the processing of any third parties based on consent before your withdrawal.
o Right of Access. Upon your request, we will provide you with a copy of your personal information in our files without undue delay and free of charge, unless we permitted by law to charge a fee. Your access may limited to the extent it would adversely affect the rights and freedoms of other individuals.
o Right to Rectification (or “Correction”). You may request to correct or update any of your personal information in our files. We may provide you with the ability to update some or all of your personal information directly via the Services.
o Right to Erasure (or the “Right to be Forgotten”). Upon your request, we will erase any of your personal information in our files that: is no longer necessary in relation to the purposes for which it was collected or otherwise processed; was collected in relation to processing that you previously consented to, but later withdrew such consent; or was collected in relation to processing activities to which you object, and there are no overriding legitimate grounds for our processing.
o Right to restriction. You have the right to limit our processing of your personal information under certain conditions. During the period during which the restriction of processing applies, we will only process your restricted personal information with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. We will inform you if or when the restriction is lifted.
o Right to object. You may object to our processing at any time and to the extent permitted by applicable law if we process your personal information on the following legal bases: consent; contract; or legitimate interests. We may continue to process your personal information if this is necessary for the defense of legal claims, or for any other exception permitted by applicable law.
o Right to data portability. If we process your personal information on the basis of a contract with you or on the basis of your consent, or if the processing is carried out by automated means, you may request to receive your personal information in a structured, commonly used and machine-readable format, and that we transfer your personal information directly to another "controller", where technically feasible, unless the exercise of this right would infringe the rights and freedoms of others. Your right to data portability only applies to personal information that you provide to us.
o Notification to third parties. When we respond to your requests for individual rights for accuracy (or rectification), erasure or limitation of processing, we will inform third parties who also process the relevant personal information, unless this proves impossible or involves a disproportionate effort. At your request, we will identify these third parties.
o Automated individual decision-making, including profiling. You have the right not to be subject to a decision based solely on the automated processing of your personal information, including profiling, which produces significant legal or similar effects on you, unless an exception applies under applicable law.
o Limitations to individual rights claims. We may limit your individual rights claims in the following ways:
• When denial of access is required or permitted by law;
• When granting access would have a negative impact on at least the privacy of at least;
• To protect our rights and property; and
• When the request is frivolous or heavy.
o Right to lodge complaints. If you believe that we have violated or violated your privacy rights under applicable law or this Policy, please contact us at goodstoriesservice@gmail.com so that we can work with you to resolve your concerns. You also have the right to lodge a complaint with a competent supervisory authority located in a Member State of your habitual residence, place of work or place of the alleged infringement.

Please also feel free to contact us at goodstoriesservice@gmail.com if you have any questions about this privacy policy.