Privacy Policy

2.1 Information You Provide Directly

• Account Data: Name, email address, and password.
• Order Data: Shipping address, billing address, and phone number.
• Book Content (User Inputs): The specific answers, names, character descriptions, and storylines you provide to generate the book.
• Uploaded Media: Photos or images you upload for the book cover or illustrations.

2.2 Information Collected Automatically

• Usage Data: IP address, browser type, device type, and interaction logs (e.g., how long you spend on the book creation tool).
• Cookies: We use cookies to remember your session and preferences. You can control cookies through your browser settings.

2.3 Data About Children

Our Service is intended for users aged 18 years and over. We do not knowingly collect personal information directly from children under 16 years of age.

If you provide personal information about a child (e.g., their name, age, photo, or personal details for use in a book character or story), you represent and warrant that:

• You are the parent or legal guardian of that child, or
• You have obtained express consent from the parent/legal guardian to provide such information.

You consent to the processing of the child's data solely for the purpose of fulfilling your order and generating your custom book. We will not use a child's data for any purpose beyond the specific product you have ordered.

4.1 Transmission to AI Providers

To generate your book, the text inputs and images you provide are transmitted via secure API to third-party Artificial Intelligence providers (such as OpenAI, Anthropic, or similar).

• Location: These providers are primarily located in the United States. By using our service, you expressly consent to this cross-border transfer of data.
• Purpose: Your inputs are used solely to generate your custom book output.
• Automated Processing: Our AI generation process is fully automated. By using the Service, you explicitly consent to this automated processing to create your product. We do not perform manual human review of AI outputs before delivery unless specifically requested by you at the time of order.

4.2 AI Model Training

We utilise enterprise-grade API agreements that do not allow our AI providers to use your data to train their publicly available models or foundational models. Your story inputs and photos are used solely to generate your book and are discarded from the AI provider's active processing memory shortly thereafter. We strictly configure our API integrations to "opt-out" of data retention for model training purposes where available. Your story inputs are not used to train the general-public models of our AI providers.

4.3 Your Choice: Opt-Out of Service Improvement

If you do not wish your User Content to be used to improve our Service or related AI capabilities, you must notify us in writing at the time of order (email: support@yourownnovel.com). By default, we may use aggregated and de-identified usage patterns to improve the Service, but your raw User Content will not be used without this specific opt-out notice.

6.1 Australian Privacy Principle 8.1

We take reasonable steps to ensure overseas recipients (such as our AI providers in the United States and international printers in the UK/USA) do not breach the Australian Privacy Principles. However, you acknowledge that in some cases, these third parties may be subject to foreign laws (e.g., the US CLOUD Act or subpoenas from US authorities) that differ from Australian law. We cannot guarantee that overseas entities will have the same level of privacy protection as Australia.

6.2 GDPR (European Union & United Kingdom Users)

If you are located in the EU or UK:

• Legal Basis for Processing: We process your data based on:
  • Contractual Necessity: To fulfil your order for the custom book.
  • Legitimate Interests: To prevent fraud and ensure the security of our Service.
  • Your Consent: For optional communications (e.g., marketing, service improvements).
• Transfer Mechanism: Transfers to Australia and the USA are protected by Standard Contractual Clauses (SCCs) or adequacy decisions where applicable. You acknowledge that transfers to the USA may expose your data to US law enforcement access under the CLOUD Act, which may not provide the same level of protection as the GDPR.
• Your Rights Under GDPR: You have the right to:
  • Access your personal data
  • Rectify inaccurate data
  • Request erasure ("right to be forgotten"), subject to our legal retention obligations
  • Request restriction of processing
  • Obtain a copy of your data in a portable format
  • Object to processing
  • Not be subject to automated decision-making that produces legal or similarly significant effects

To exercise GDPR rights, contact us at support@yourownnovel.com.

6.3 United States Residents (CCPA & State Privacy Laws)

If you are a resident of California or another US state with specific privacy laws (including the California Consumer Privacy Act (CCPA), Colorado CPA, Virginia CDPA, or similar):

• Your Rights:
  • Right to Know: You may request what personal information we collect, use, or share.
  • Right to Delete: You may request deletion of your personal information, subject to exceptions for legal compliance and service delivery.
  • Right to Opt-Out: We confirm that we do not "sell" your personal data to data brokers or third parties for monetary consideration.
  • Right to Limit: You may request that we limit the use of your "sensitive personal information" to purposes necessary to fulfil your order.
  • Right to Non-Discrimination: We will not discriminate against you for exercising these rights.
• How to Submit Requests: Contact us at support@yourownnovel.com with the subject line "California Privacy Request" or "State Privacy Request." Include your name and order details. We will respond within 45 days.

7.1 Data Retention

• Generated Book Files: We retain your generated book files and order details for up to 18 months to allow for re-orders, customer service inquiries, and dispute resolution.
• Account Data: If you delete your account, we retain minimal data (name, email, transaction history) for 7 years to comply with Australian tax and consumer law obligations.
• Marketing Data: If you opt into marketing communications, we retain your contact information until you unsubscribe.
• Early Deletion: You may request earlier deletion of your data by contacting support, subject to legal retention requirements.

7.2 Security

• Encryption in Transit: We use SSL/TLS encryption for all data transmitted between your browser and our servers.
• Encryption at Rest: Sensitive data (payment information, uploaded photos) is encrypted when stored on our servers.
• No Guarantee: However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we implement industry-standard protections.
• Breach Notification: In the event of a data breach, we will notify you and relevant authorities within the timeframe required by law.

10.1 Internal Complaint Process

If you have a privacy complaint:

• Contact us first at support@yourownnovel.com with full details of your complaint.
• We will acknowledge receipt within 5 business days.
• We will investigate and provide a response within 10 business days.

10.2 External Complaints (Australia)

If we cannot resolve your issue satisfactorily, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

• Website: https://www.oaic.gov.au
• Email: enquiries@oaic.gov.au
• Phone: 1300 363 992

10.3 External Complaints (European Union)

If you are an EU resident and believe we have violated your GDPR rights, you may lodge a complaint with your local Data Protection Authority (DPA). A list of EU DPAs is available at https://edpb.europa.eu/about-edpb/board/members_en.

10.4 External Complaints (California/US)

If you are a California resident and wish to report a privacy violation, you may contact the California Attorney General's Office:

• Website: https://oag.ca.gov/privacy/ccpa
• Email: privacy@doj.ca.gov