Privacy Policy

Who we are

TalePanda, 42 Maksim Karadanev, Varna 9010, Bulgaria, is the data controller for the personal data described below. You can reach us at any time via our contact page or by email at support@talepanda.com.

What data we collect

• Account data: your name and email address, if you create an account.
• Order data: what you ordered and when. Card payments are processed entirely by Stripe — we never see or store your card details.
• Story details: the information you enter in the creation wizard, such as your child's first name, age, appearance details, favorites, and the dedication text.
• Child photo (optional): if you choose the photo option, the photo you upload.
• Generated content: the story text and illustrations created for your book.
• Technical data: your IP address, used only for security and to prevent misuse (such as rate limiting of free generations), and basic usage analytics events that never contain your or your child's personal details.

Photos of children — our special commitment

• Only upload a photo of a child you are the parent or legal guardian of, and only with the right to do so.
• Photos are stored in private storage — they are not publicly accessible and can only be opened with short-lived, secure links.
• A photo is used for one purpose only: creating the illustrations of your book. It is never used for advertising, never shared beyond the AI illustration service that creates your book, and never used to train other products.
• You can ask us to delete your photo at any time via the contact page. We treat these requests as a priority: we remove the photo from your book and stop using it for any further generation promptly upon your request.

Why we process your data

We process your data to perform our contract with you (creating and delivering your book and processing your order), based on your consent (photo uploads), or based on our legitimate interest in keeping the service secure and improving it (technical data and anonymous analytics).

Who we share data with

We share data only with the service providers we need to run TalePanda: Stripe (payments), our AI text and illustration providers (the story details — and photo, if you provided one — needed to generate your book), and our hosting platform. Some providers may process data outside the European Economic Area; in those cases we rely on appropriate safeguards such as standard contractual clauses.

How long we keep data

• Order records are kept for the period required by tax law.
• Your book, story and illustrations are kept until you ask us to delete them.
• Uploaded photos are kept until you ask us to delete them via the contact page. There is currently no automatic deletion after a fixed period.
• Analytics events are kept in aggregate form only.

Your rights

Under the GDPR you have the right to access, correct, delete or restrict the processing of your personal data, the right to data portability, and the right to object to processing. You can exercise these rights at any time via our contact page. You also have the right to lodge a complaint with your national data protection authority.

Children's privacy

TalePanda is designed to be used by parents and guardians on behalf of their children. We do not knowingly collect personal data directly from children, and all story details come from the parent or guardian completing the wizard.

Changes and contact

We may update this policy from time to time; the date at the top always shows the current version. Questions? Write to us via the contact page. See also our Cookie Policy.