1. Overview
Sweet Story Studio ("we," "us," or "our") respects your privacy. This Privacy Policy
explains what information we collect, how we use it, and the choices you have. It
applies to all users of our website and services at sweetstorystudio.com.
By using the Service, you consent to the practices described in this policy. If you do
not agree, please do not use the Service.
2. Information We Collect
Account information: When you create an account, we collect your
name, email address, and password (stored as a cryptographic hash — we never store
passwords in plain text).
Story inputs: Character names, pronouns, age bands, themes, lessons,
story language preferences, dedication text, and any appearance descriptions you
provide.
Photos: Images you upload for character reference. These may include
photos of children for whom you are the parent or legal guardian.
Payment information: Billing details are processed and stored by our
payment provider, Stripe. We do not store credit card numbers on our servers.
Usage data: Page views, feature usage, generation requests, error
logs, IP addresses, browser type, and device information collected automatically for
service operation and improvement.
3. How We Use Your Data
We use collected information to:
- Authenticate your account and manage your session
- Generate personalized storybooks based on your inputs
- Process payments and manage your subscription
- Provide customer support and respond to inquiries
- Monitor service reliability, prevent abuse, and fix bugs
- Send transactional emails (password resets, billing receipts)
We do not use your data for advertising, and we do not sell your personal information
to third parties.
4. Photos & Children's Data
Sweet Story Studio is designed for adults (parents, guardians, educators) to create
content for children. We do not knowingly collect personal information directly from
children under 13 (or the applicable age in your jurisdiction).
Photos uploaded for character reference are processed by our illustration engine to
generate storybook images. By uploading a photo of a child, you confirm that you are
the child's parent or legal guardian and consent to the photo being used for storybook
generation.
Photos are stored securely and are only used for the purpose of generating your
storybooks. They are not shared with other users, used for training, or displayed
publicly. You may delete your photos at any time through your account or by contacting
support.
5. Third-Party Services
We share limited data with the following categories of service providers:
-
Authentication & database: Supabase (account data, session
management)
-
Payment processing: Stripe (billing, subscription management)
-
Illustration engine: OpenAI (story text and image prompts — photos
are sent for image generation only)
- Hosting: Vercel (application hosting, edge delivery)
-
Print fulfillment: Lulu (if you order printed books — shipping
address and book files only)
Each provider operates under its own privacy policy and data processing agreements. We
only share the minimum data necessary for each provider to perform its function.
6. Cookies & Tracking
We use essential cookies to maintain your login session and remember your preferences.
These cookies are necessary for the Service to function and cannot be disabled.
We do not use third-party advertising cookies or tracking pixels. We do not
participate in cross-site tracking networks. Basic usage analytics may be collected
for service improvement, but we do not build advertising profiles from your activity.
7. Data Security
We take reasonable measures to protect your data, including encrypted connections
(HTTPS/TLS), hashed passwords, secure cloud infrastructure, and access controls that
limit who can view user data.
No system is perfectly secure. While we strive to protect your information, we cannot
guarantee absolute security. If we discover a data breach that affects your personal
information, we will notify you and any applicable regulators as required by law.
8. Data Retention & Deletion
We retain your account data and generated storybooks for as long as your account is
active. Uploaded photos are retained for the purpose of ongoing storybook generation
and may be deleted by you at any time.
If you delete your account, we will remove your personal data, uploaded photos, and
generated content within 30 days, except where retention is required by law (such as
billing records for tax purposes, which may be retained for up to 7 years).
To request account deletion, contact
sweetstorystudio@gmail.com.
9. Your Rights
Depending on your location, you may have the right to:
-
Access: Request a copy of the personal data we hold about you
- Correction: Ask us to correct inaccurate data
- Deletion: Request that we delete your personal data
-
Portability: Receive your data in a structured, machine-readable
format
- Objection: Object to certain types of processing
To exercise any of these rights, contact
sweetstorystudio@gmail.com. We will
respond within 30 days.
10. GDPR & CCPA
For EU/EEA users (GDPR): We process your data based on contractual
necessity (providing the Service), legitimate interest (security and improvement), and
your consent (photo uploads). You may withdraw consent at any time by deleting your
content or account.
For California users (CCPA): We do not sell personal information. You
have the right to know what data we collect, request deletion, and opt out of any sale
of personal information (though we do not sell data). California residents may contact
us to exercise these rights.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we
will notify you by email or by posting a notice on the Service at least 14 days before
the changes take effect. The "Effective date" at the top of this page indicates when
the policy was last updated.
12. Contact
For privacy-related questions or requests, contact us at
sweetstorystudio@gmail.com.
For general support, contact
sweetstorystudio@gmail.com.