Privacy Policy

1. What data we collect

• Photos of children. You upload one or more photos so we can illustrate the storybook. These are processed by our AI system and stored temporarily (see retention below).
• Child’s first name and age. Used to personalize the story text and illustrations.
• Your email address. Required for our magic-link sign-in flow (we send you a link to open the creator), order confirmations, shipping updates, and any support correspondence.
• Payment information. Collected and processed entirely by Stripe. We never see or store your full card number.
• Shipping address. Required to deliver the printed book.
• IP address and device information. Collected automatically for rate-limiting, fraud prevention, and analytics.
• Story preferences. Template choice, art style, custom story text, and fun-fact details you provide.

2. How we use your data

• Book generation.Your child’s photo, name, age, and story preferences are sent to Google’s Gemini AI to generate personalized illustrations.
• Order fulfillment. We share your shipping address and book files with Lulu (our print partner) to produce and ship the hardcover book.
• Transactional emails. We use Resend to send order confirmations, shipping notifications, and support replies.
• Analytics. We use Vercel Analytics to understand how people use the site. This data is aggregated and non-identifying.
• Fraud prevention. IP addresses and device fingerprints are used to prevent abuse of the free preview system.

3. Children’s privacy

We understand that photos of children are sensitive data. Here is how we handle them:

• COPPA compliance. TinyTalers does not knowingly collect personal information directly from children under 13. The account holder and purchaser is always the parent, guardian, or other adult. By using TinyTalers, you represent that you have parental authority to upload photos of the child depicted.
• Limited use.Children’s photos are used exclusively to generate storybook illustrations. We do not use them for training AI models, advertising, or any other purpose.
• Automatic deletion. Uploaded photos are deleted from our servers within 30 days of upload (see Data Retention below).

4. Third-party services

We share data with the following services only as needed to provide and improve TinyTalers:

• Stripe— payment processing. Stripe’s privacy policy: stripe.com/privacy
• Lulu— book printing and shipping. Lulu’s privacy policy: lulu.com/privacy-policy
• Google (Gemini AI)— image generation from uploaded photos. Google’s privacy policy: policies.google.com/privacy
• Resend— transactional email delivery. Resend’s privacy policy: resend.com/legal/privacy-policy
• Vercel— hosting and analytics. Vercel’s privacy policy: vercel.com/legal/privacy-policy

5. Cookies

We use session-only cookies to maintain your magic-link session and configuration state while you build a book. We do not use persistent tracking cookies or third-party advertising cookies. Vercel Analytics may set a first-party analytics cookie to measure page views.

6. GDPR & CCPA rights

If you live in the European Economic Area, the UK, or California, you have additional rights under GDPR / CCPA: the right to know what data we hold on you, the right to request deletion, correction, or portability, and the right to opt out of the sale of your personal data (we don’t sell any). Email hello@tinytalers.com with the subject “GDPR Request” or “CCPA Request” and we’ll respond within 30 days.

7. Data retention

• Photos: Automatically deleted within 30 days of upload. If you request deletion sooner, we will honor it immediately.
• Order records: Kept for a minimum of 7 years for accounting and tax compliance purposes (name, email, shipping address, order details).
• Generated illustrations: Stored for up to 30 days after book generation to allow reprints and support inquiries, then deleted.
• Analytics data: Aggregated, non-identifying data is retained indefinitely.

8. Your rights

You can request at any time:

• Deletion of your photos, account data, or order information (subject to legal retention requirements).
• Access to a copy of the personal data we hold about you.
• Correction of any inaccurate personal data.

To make a request, email us at hello@tinytalers.com with the subject “Privacy Request”. We respond within 5 business days.

9. Contact

If you have questions about this policy or how we handle your data, reach out: