Privacy Policy

Last updated: December 13, 2025

1. Introduction

Welcome to talesofus.ai ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency in how we handle your personal information. This Privacy Policy explains how we collect, use, store, and share your information when you use our AI-generated story and book creation services. By using our services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Order-Related Information

We collect and store the following information exclusively for order processing and fulfillment:

  • Email address
  • Billing and shipping addresses
  • Payment information (processed securely through our payment provider)
  • Order history and transaction details
  • Story preferences and customization choices for your books
  • Communication related to your orders and customer support inquiries

Automatically Collected Information

When you visit our website, we automatically collect certain technical information:

  • IP address and geolocation data
  • Browser type and version
  • Device information and operating system
  • Pages visited and time spent on our website
  • Referring website addresses

3. How We Use Your Information

We use your information solely for the following purposes:

  • Processing and fulfilling your book orders
  • Generating personalized AI stories based on your specifications
  • Communicating with you regarding your orders, including shipping updates and delivery confirmations
  • Providing customer support and responding to your inquiries
  • Improving our AI story generation algorithms and service quality
  • Complying with legal obligations and preventing fraudulent activities
  • Sending order confirmations and necessary transactional communications

4. Data Storage and Security

We store your personal information on secure cloud-based servers with industry-leading infrastructure providers. Our data storage systems employ comprehensive security measures including encryption at rest and in transit, multi-factor authentication, regular security audits, and strict access controls. Only authorized personnel with a legitimate business need can access your information, and all access is logged and monitored.

5. Third-Party Service Providers

To provide our services, we work with trusted third-party providers. Your information may be shared with these providers solely for the purpose of delivering our services to you:

  • Leonardo.ai: We use Leonardo.ai for AI image generation to create illustrations for your personalized stories. When generating images, we may share story context and preferences, but no personal identifying information is transmitted.
  • Lulu.com: For physical book printing and shipping, we share necessary order information (name, shipping address, and book specifications) with Lulu.com, our print-on-demand partner.
  • Cloud Infrastructure Providers: We use industry-leading cloud service providers for hosting and data storage.
  • Payment Processors: Secure payment processing partners who handle your payment information in compliance with PCI DSS standards.

Important Notice: While we carefully select our third-party partners and require them to maintain appropriate security measures, we cannot control how these third parties handle your data once it is in their possession. Each third-party service provider operates under their own privacy policies and terms of service. We encourage you to review their privacy policies:

  • Leonardo.ai Privacy Policy
  • Lulu.com Privacy Policy

6. Data Security

We implement comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

  • SSL/TLS encryption for all data transmissions
  • Secure authentication and access controls
  • Regular security assessments and updates
  • Limited access to personal information on a need-to-know basis
  • Regular backups and disaster recovery procedures

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your order-related information for as long as necessary to fulfill our legal obligations, resolve disputes, and enforce our agreements. Typically, this includes:

  • Order information: Retained for 7 years for accounting and tax purposes
  • Customer support communications: Retained for 3 years
  • Technical logs: Retained for 90 days

You may request deletion of your personal data at any time, subject to our legal retention requirements.

8. Your Rights and Choices

Under applicable data protection laws, you have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Rectification: Request correction of inaccurate or incomplete information
  • Erasure: Request deletion of your personal information, subject to legal requirements
  • Restriction: Request limitation of processing of your personal information
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to certain types of processing of your personal information

To exercise any of these rights, please contact us at hi@talesofus.ai. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. These technologies help us:

  • Remember your preferences and settings
  • Understand how you interact with our website
  • Improve our services and user experience
  • Provide relevant content and features

You can control cookie preferences through your browser settings. Note that disabling cookies may affect the functionality of certain features on our website.

10. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If we become aware that we have collected personal information from a child under 13, we will take immediate steps to delete such information from our systems. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States and other countries where our service providers operate. These countries may have data protection laws that differ from the laws of your country. By using our services, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

12. Legal Disclosure

We may disclose your personal information if required to do so by law or in good faith belief that such action is necessary to:

  • Comply with legal obligations, court orders, or legal process
  • Protect and defend our rights or property
  • Prevent or investigate possible wrongdoing in connection with our services
  • Protect the personal safety of users or the public
  • Protect against legal liability

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by email or through a prominent notice on our website at least 30 days before the changes take effect. The "Last updated" date at the top of this policy indicates when it was last revised. Your continued use of our services after changes become effective constitutes acceptance of the revised Privacy Policy.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at:

We are committed to addressing your concerns and will respond to all privacy-related inquiries within a reasonable timeframe.