Privacy policy

Data controller: Kerya Consulting, société par actions simplifiée (SAS), 47 rue Vivienne, 75002 Paris, France. Contact: kerya.consulting@proton.me.

Data processed and purposes

• Creating the book: the child's first name, age, pronoun and description, the theme and the dedication, entered by the adult creating the book (a parent or a relative), and a photo of the child if their parent or legal guardian chooses to add one, with their express agreement. Legal basis: performance of the pre-contractual steps and of the contract requested by that adult; the parent's consent for the photo.
• Order and delivery: the buyer's email address, name, postal address and phone number. Legal basis: performance of the contract. Card details are processed by Stripe and are never sent to us.
• Protection against abuse: an encrypted, non-reversible fingerprint of the IP address, to limit the number of free previews. Legal basis: legitimate interest.

The photo is optional. It is only used to draw the character and it is deleted from our servers once the cover has been created, or at the latest when unpurchased previews are purged. No data is used for advertising or to train artificial intelligence models. The site sets no tracking cookies.

Recipients and places of processing

• Supabase: database and files, hosted in Paris (European Union).
• Google Cloud (Vertex AI): generation of the text and illustrations, processed in the European Union. The child's first name is sent to write the story, not to draw the illustrations. The photo, if any, is sent to describe and draw the character.
• Stripe: payment.
• Gelato: printing and shipping of the hardcover book (delivery name and address, book file).
• Resend: sending order emails.
• Vercel: website hosting, running in Paris.

Some of these providers are US companies: when a transfer outside the European Union takes place, it is covered by the European Commission's standard contractual clauses or the Data Privacy Framework.

Retention periods

• Unpurchased preview: automatically deleted after 30 days.
• Purchased book (text, illustrations, PDF, address): 12 months, for after-sales service and reprints, then deleted.
• Accounting records: 10 years, as required by law.

Your rights

You can ask to access, correct or erase your data and your child's data, object to its processing or request its portability, by writing to kerya.consulting@proton.me. We reply within one month. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with your local authority.