Your family's story belongs to your family.
We make personalized children's storybooks with family-provided names and photos. This notice explains what information is involved, why it is used, and how adults can delete their books or accounts.
Preview status: Digital checkout and physical ordering are not yet available to customers. Our commercial operator's final mailing address, verified privacy mailbox, vendor backup-deletion periods and final data-processing terms must be confirmed before accepting real payments.
Who this is for
Salon Stories is designed for parents, grandparents and other authorized adults age 18 or older. Children do not need accounts and should not create accounts or upload their own photographs. Adults may include children only when they have appropriate legal authority and permission. If you believe a child has submitted information directly without authorization, ask for deletion through the account or our support contact once activated.
What we collect
| Category | Examples | Why we use it |
|---|---|---|
| Account details | Email address, account identifier, authentication records | Sign-in, account access, security and communication |
| Optional newsletter | Email address, express marketing consent, confirmation and unsubscribe status, and newsletter delivery records | Only when you explicitly subscribe. A confirmed opt-in is required before marketing emails. |
| Site analytics and funnel | Pseudonymous browser session ID, page/event names, source campaign tags, optional verified account identifier | Understand signup, book creation, checkout intent and service usability without collecting children's names, family photos or story content into analytics. |
| Welcome hardcover offer | Account ID, personal promotion code, and email delivery and redemption statuses | Send the first-hardcover discount you request by creating a verified account, prevent repeat use, and audit redemptions. This welcome message is a transactional account communication, not subscription consent. |
| Family profile | First names, age, relationship, interests and character notes entered by the adult | Personalize the story text and illustration prompts |
| Uploaded references | Photos explicitly selected by the adult | Provide character references for requested illustrations |
| Creative content | Story text, dedication, illustration prompts, completed pages and artwork | Create, save, edit and export books |
| Transactions | Digital package selection and payment status, if checkout is activated | Account entitlements, receipts, payments, fraud and refunds |
| Print fulfillment | Recipient name, delivery address and carrier details when printing launches | Quote, print and ship physical books |
| Technical data | Necessary device/session information, security events, request and error logs | Operate the service, investigate failures and prevent misuse |
Please do not upload identification documents, financial or medical records, or photos of people whose permission you do not have. Avoid including addresses, full birthdates or sensitive private details in story prompts.
Newsletter and analytics
Account creation does not automatically enroll you in our promotional newsletter. A separate unchecked consent box is required. If you opt in, we send a confirmation message and only send marketing emails after you confirm. Each promotional email includes a working unsubscribe link. Transactional signup verification and requested first-hardcover welcome offers are distinct from newsletter subscription.
Google Analytics 4 (measurement ID G-7R7PSGECZR) runs only after you allow optional analytics in the website preference banner. You can change your choice using Analytics choices. We also collect privacy-minimized first-party operational event records to evaluate page visits, sample exploration, signup flow, and purchasing intent. Our events do not include names, family photos, story text, or email addresses in Google's data layer. The internal owner dashboard may associate events with a verified account for support and conversion analysis. Declining optional Google analytics does not prevent essential account services. We do not send any visitor event data to Google Tag Manager before optional consent is granted.
How photos and AI illustrations work
Your family reference photos are uploaded to a private, access-controlled Supabase storage area. When you request an illustration, the service retrieves selected references and relevant story descriptions and sends them to the configured external AI image provider to produce your picture. That transfer is necessary for the requested feature. The results are stored in your private book area. Sample books on the marketing site feature fictional example characters and do not use your family photos.
AI may not produce an exact likeness and may introduce visual errors. You can review the output and choose whether to share or print it. We do not publish your references or personalized books in the public gallery by default. We do not use family photos for targeted advertising or sell them to data brokers. Vendor processing terms, including any independent retention policies, are subject to contractual confirmation before commercial launch.
Who handles the information
- Supabase, for authentication, private database records and private image storage.
- AI image generation provider, for reference photos and prompts submitted only when an adult requests a generated illustration.
- Vercel, for website hosting and essential server/technical logs.
- Stripe, for payment processing once enabled; checkout is not available to customers yet.
- Lulu and shipping carriers, for printable files and shipment details only after a separate physical order has been approved and launched.
- Apple, for StoreKit in-app payments if the iPhone app is released.
These providers may process information in the United States or other locations where they operate. This is not an exhaustive certified subprocessor register; the final contractual processor details must be verified before paid launch.
How long we retain information
| Data | Current service behavior |
|---|---|
| Account and family profiles | Remain while your account is active. Account deletion removes the active account and associated records. |
| Reference photos and generated art | Remain while the book/account is active so you can return and edit it. Full account deletion requests removal from active storage. Individual-book deletion is being updated to clean up associated artwork as well. |
| Payment and print order records | No live print orders are accepted today. Once activated, any legally required transaction, tax, fraud or fulfillment records may be retained after account deletion, with an explicit schedule published before launch. |
| Provider backups and operational logs | Provider backups, caches and security records may survive active-record deletion for a limited period. Exact provider schedules have not yet been independently verified and will be documented before launch. |
Important: We do not currently promise automatic deletion of active accounts after a fixed period. You can request deletion without waiting for an inactivity deadline. We do not claim to delete copies held by third-party providers instantaneously.
Your choices and rights
Adults can review and change names, story descriptions and dedication text before completing a book. Signed-in adults can delete their account in My books → Delete account; this initiates deletion of active book data and uploaded photos. You may also delete individual books from the editor. Where applicable law provides additional rights to access, correct, port, object to or appeal data-processing decisions, we will handle those requests once our dedicated privacy contact channel is operational.
Security and family consent
We use authenticated accounts, access-control rules and private storage with temporary signed URLs. No network service can guarantee absolute security. Adults must confirm that they have permission to upload photos of every child and adult featured in the book. If a family photo is shared without permission, do not continue generation and request deletion.
Cookies and analytics
We use essential sign-in/session technologies and technical logs. Any optional marketing analytics, tracking technologies or advertising integrations must be accurately disclosed and, where required, consented to before being enabled. We do not embed a family member's identity or book identifier in the public QR code printed on a book.
Changes and contact
We may update this notice as the service evolves and will post the effective date of revisions. For commercial launch, Salon Stories must activate and verify a dedicated privacy-support mailbox and identify the final legal operating entity and postal address. Until those details are confirmed, this is a transparent preview disclosure, not a certified final compliance notice.
Sign in, open My books, and choose Delete account. If you cannot access your account, the dedicated support channel must be activated before the public paid launch.