Privacy Policy

1. Introduction

Little Story Keepers™ ("we," "us," or "our"), a brand of The Trieu Crew LLC, is committed to protecting the privacy of our customers and the children whose images may appear in our products. This Privacy Policy explains how we collect, use, disclose, retain, and protect your information when you visit littlestorykeepers.com, create an account, upload content, place an order, or otherwise use our website and related services (collectively, the "Service"). The Service is currently intended for and available only to customers located in the United States.

This Privacy Policy applies to our website, account features, order process, customer-support communications, email communications, and related services that link to or reference this Policy. It does not apply to websites, services, applications, or practices controlled by third parties, even if those services are linked from our website or used to support the Service.

Please read this Privacy Policy carefully. By accessing or using the Service, creating an account, uploading content, or placing an order, you agree to the collection, use, disclosure, retention, and protection of information as described in this Policy. If you are not located in the United States, do not use the Service or place an order. If you do not agree with this Privacy Policy, do not use the Service. Our Service is designed for adults, parents, and adult gift-givers; children do not create accounts or place orders.

This Policy treats original photographs and images you upload to us ("Uploaded Photos") differently from AI-generated illustrations created from those photos ("AI Illustrations"). Uploaded Photos are handled on the deletion schedule below; AI Illustrations and completed book files may remain in your account library while your account is active so you can access your book library and request reprints.

Privacy at a Glance

Here are the most important points in plain English:

• We use Uploaded Photos and story details to create and fulfill personalized storybooks.
• We do not sell personal information or Uploaded Photos.
• We do not use Uploaded Photos, AI Illustrations, book previews, completed book files, Customer Content, first name, related non-sensitive order details, testimonials, names, likenesses, or finished outputs for marketing, advertising, social media, or other promotional purposes unless you provide explicit opt-in consent through an optional marketing-consent checkbox or other consent mechanism made available in the Service. This consent is optional and is not required to create an account, place an order, receive the Service, or purchase a book. You may withdraw consent for future marketing use by contacting us at support@littlestorykeepers.com, subject to the limitations described in this Policy.
• Uploaded Photos are retained for 12 months after your last account activity, with the retention period resetting each time you log in. We will notify you 30 days before deleting Uploaded Photos due to inactivity, subject to limited legal, security, fraud-prevention, payment, or operational requirements.
• AI Illustrations, generated story text, order previews, and final book files may be retained indefinitely to support future reprints, customer keepsakes, and continued access to your book library, unless you request deletion and no legal or operational exception applies.
• You may contact us with privacy questions or requests at privacy@littlestorykeepers.com, and you may contact customer support about orders at support@littlestorykeepers.com.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when using our Service, including:

• Account information: name, email address, and password when you create an account.
• Order information: shipping address, billing information processed securely through our payment processor, Stripe, and order details.
• Story context information: children's names, ages, story themes, and occasion details you provide to personalize your book's narrative.
• Customer Content: Uploaded Photos, images, text, and other content you provide to create your personalized storybook. We treat Uploaded Photos, images depicting children or family members, and related story context information as sensitive customer content.
• Communications: messages you send us through our contact form, email, or customer support channels.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information, including:

• Device information: browser type, operating system, device type, and screen resolution.
• Usage data: pages visited, time spent on pages, links clicked, and navigation patterns.
• Location-related information: IP address and approximate location derived from your IP address.
• Cookies and similar technologies: as described in Section 8 of this Policy.

2.3 Information from Third Parties

We may receive information from third-party services you connect to our platform, including payment processors and shipping carriers, only for the purpose of fulfilling your order.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and authenticate your identity.
• To process orders, accept payments, arrange fulfillment and delivery of personalized storybooks through our print-on-demand partners, provide customer support, and support eligible reprints, refunds, or quality-issue resolutions.
• To generate AI-assisted illustrations and narrative text based on Uploaded Photos, Customer Content, and story context information you provide.
• To communicate with you about order status, shipping updates, and customer support inquiries.
• To send marketing communications, including promotional offers and product updates, where you have consented or where permitted by applicable law. You may opt out at any time.
• To send required transactional messages, such as order confirmations, preview notices, shipping updates, receipts, security notices, and customer-support responses. These messages are not optional marketing communications.
• To improve our Service, analyze usage patterns, and develop new features.
• To comply with legal obligations, enforce our Terms of Service, and detect or prevent fraud, unauthorized access, and other harmful activity.

4. Customer-Uploaded Photographs — Special Notice

We understand that Uploaded Photos are deeply personal and may depict children and other family members. We handle Uploaded Photos with care and apply the following specific protections:

• Limited Use. Uploaded Photos are used to generate AI-illustrated artwork for your personalized storybook and fulfill your order. We do not use Uploaded Photos for unrelated purposes.
• No Marketing Use Without Opt-In Consent. We do not use Uploaded Photos, AI Illustrations, book previews, completed book files, Customer Content, first name, related non-sensitive order details, testimonials, names, likenesses, or finished outputs for marketing, advertising, social media, portfolio, promotional, or similar purposes unless you provide explicit opt-in consent. We may request that consent through an optional checkbox at account creation, checkout, upload, order approval, or another appropriate point in the Service. Marketing consent is voluntary and is not required to create an account, place an order, receive the Service, or purchase a book. If you provide marketing consent, the consent applies only to the materials and uses described at the time consent is requested or otherwise approved by you. You may withdraw consent for future marketing use by contacting us at support@littlestorykeepers.com. Withdrawal will apply prospectively and will not require us to remove materials already printed, distributed, published, displayed, or otherwise used before we received and processed your withdrawal request, except where required by applicable law. If you choose to share your finished book publicly and tag us, we may reshare that public post, but we will not independently use your source photos, illustrations, previews, book pages, first name, related non-sensitive order details, or finished outputs to create our own marketing materials without your explicit opt-in consent.
• Retention and Deletion. Uploaded Photos are retained for 12 months following your last account activity, with the retention period resetting each time you log in. We will notify you 30 days before deleting Uploaded Photos due to inactivity. You may request deletion at any time as described in Sections 7, 9, and 15, subject to limited legal, security, fraud-prevention, payment, customer-support, or operational requirements.
• Retention Period. For Uploaded Photos, the 12-month retention period is measured from your last account activity and resets upon each login, unless a customer-support, reprint, payment, fraud, security, legal, or other operational issue remains open.
• AI Model Training and Vendor Retention. We use Anthropic for story text generation through its API and fal.ai for AI illustration generation through its API. We do not use Uploaded Photos, prompts, AI Illustrations, generated story text, order previews, or completed book files to train, improve, or fine-tune AI models. Based on our current vendor terms and documentation, Anthropic does not use API customer inputs or outputs to train its models, and fal.ai processes customer photos to provide the requested illustration-generation service and does not train models on raw customer data. fal.ai may use anonymized or aggregated usage data for service improvement where permitted by its terms. We require AI vendors that process Customer Content on our behalf to use that content only as needed to provide the requested service, comply with law, maintain security, or meet other limited contractual obligations.
• Facial Recognition and Biometric Identification. We do not use uploaded photographs to identify a person, create biometric identifiers or face templates, or perform facial-recognition matching. If our practices change, we will update this Policy and provide any notice or consent required by applicable law before engaging in such activity.
• No Sale of Photographs. We do not sell, rent, license, or otherwise transfer Uploaded Photos to third parties for purposes unrelated to creating, fulfilling, supporting, or legally protecting your order.
• Children's Privacy. We recognize that many customers upload photographs depicting minors. We take additional precautions with content involving children, including access controls, encryption at rest and in transit where appropriate, and employee training on appropriate data handling. We do not knowingly collect personal information directly from children under the age of 13. Our Service is directed at parents and adults, not at children.

5. How We Share Your Information

We do not sell your personal information or Customer Content. We share your information only in the following limited circumstances:

Service Providers. We share information with trusted third-party vendors who assist us in operating the Service, including:

• Print-on-demand fulfillment partners, including Lulu Direct: receive shipping information and completed book files to print and ship your order to eligible U.S. shipping addresses.
• Payment processor, Stripe: handles payment transactions. We do not store your full credit card information on our servers.
• Email and marketing platform, Klaviyo: supports order confirmations and marketing communications.
• Print fulfillment provider, Lulu: processes completed book files and shipping information for print fulfillment and delivery. Lulu is used for print-only processing and is not intended to retain customer content beyond fulfillment except as required for operational, legal, or support purposes.
• AI technology providers, including Anthropic and fal.ai: help create story text and AI-generated illustrations. Anthropic processes story prompts and related text through its API for narrative generation. fal.ai processes Uploaded Photos and prompts through its API for illustration generation. Based on our current vendor terms and documentation, neither vendor uses customer photos, prompts, generated illustrations, generated text, order previews, or completed book files for model training. fal.ai may use anonymized or aggregated usage data for service improvement where permitted by its terms.
• Cloud hosting and platform providers, including Base44: host and support the Service. Base44 has published GDPR-oriented data-processing terms, does not sell personal data, and stores data in the United States by default according to its current vendor posture.

We require service providers that process personal information or sensitive Customer Content on our behalf to use that information only for the services they provide to us, maintain appropriate confidentiality and security measures, and follow retention and deletion requirements that are reasonably consistent with this Privacy Policy and our instructions.

We periodically review our service-provider, AI-processing, retention, deletion, and security practices and update this Policy when our practices or legal obligations materially change.

Legal Requirements. We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect the rights, property, or safety of Little Story Keepers™, our customers, or others.

Prohibited or Illegal Content. If we become aware of Customer Content that may be illegal, exploitative, abusive, or otherwise prohibited, including content involving the exploitation or abuse of minors, we may preserve and disclose relevant information to law enforcement, regulatory authorities, the National Center for Missing and Exploited Children, service providers, or other appropriate parties as required or permitted by law, and may suspend or terminate accounts or orders associated with that content.

Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will notify you of any such change and your choices regarding your information.

With Your Consent. We may share your information for any other purpose with your explicit consent.

6. Data Security

We implement commercially reasonable security measures designed to protect your personal information and photographs, including:

• Encryption of data in transit using Transport Layer Security (TLS).
• Encryption of sensitive data at rest where appropriate.
• Access controls limiting employee access to customer data on a need-to-know basis.
• Security assessments and monitoring.
• Secure payment processing through Stripe, which is PCI DSS compliant.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and the Service is provided subject to the disclaimers and limitations in our Terms of Service, but we are committed to protecting your information using commercially reasonable means.

If we determine that a security incident requires notification under applicable law, we will provide notice to affected individuals and, where required, regulators or other authorities in accordance with applicable legal requirements. We maintain internal procedures designed to assess security incidents, identify the types of information involved, determine applicable notice obligations, and support timely containment and response.

7. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account information: retained while your account remains active and for a reasonable period afterward to resolve disputes and enforce agreements.
• Order information: retained for seven years for tax and accounting purposes.
• Uploaded Photos: retained for 12 months after your last account activity, with the retention period resetting each time you log in. We will notify you 30 days before deleting Uploaded Photos due to inactivity, unless more time is reasonably needed for customer support, reprints, legal compliance, fraud prevention, security, payment issues, or operational requirements.
• Abandoned drafts: Uploaded Photos and related draft content associated with a draft book that is not submitted as an order may be deleted after 60 days of account inactivity, unless a shorter or longer period is reasonably necessary for security, fraud prevention, troubleshooting, legal compliance, or customer support.
• Story context information: generally retained with the related order and account information so we can create, support, and maintain your book library, unless deletion is requested and no legal or operational exception applies.
• AI Illustrations, generated story text, order previews, and completed book files: retained indefinitely as an intentional product feature to support future reprints, customer keepsakes, and continued access to your book library, unless you request deletion and no legal or operational exception applies.
• Backups, logs, and vendor systems: residual copies may remain temporarily before being securely overwritten or deleted through ordinary data-management processes, subject to applicable legal, security, fraud-prevention, payment, and operational requirements.
• Marketing preferences and opt-out records: retained as needed to honor your preferences.

You may request deletion of your account, Uploaded Photos, AI Illustrations, generated story text, order previews, completed book files, and other personal information at any time by contacting us at support@littlestorykeepers.com or the privacy contact listed in Section 15. We will review and respond to deletion requests as required by applicable law. If your book is already being previewed, made, shipped, or actively supported, deletion may affect whether we can finish the order. Because each Book is custom-made based on the content and design you approve, once an order is submitted for printing, it generally cannot be cancelled or modified. Where deletion would affect an active order, we will explain your options and, where legally and operationally permitted, offer to cancel the order and delete the relevant information before production begins or finish the order and delete eligible information promptly after delivery. Please note that deletion requests may not apply to information we are required or permitted to retain by law or reasonably need to retain for security, fraud prevention, payment processing, dispute resolution, accounting, tax, legal compliance, or protection of our legal rights.

Suggested deletion-request language: To request deletion, please email support@littlestorykeepers.com with the subject line "Data Deletion Request" and include the email address associated with your account, your order number if applicable, and a brief description of the information you want deleted. For your protection, we may ask for information reasonably necessary to verify your identity and authority to make the request before acting on it.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, remember preferences, understand site usage, and support the features described below. Cookies are small text files stored on your device that help us recognize you and remember certain settings or activity.

We use the following types of cookies:

• Essential cookies: necessary for the basic functioning of our website, including maintaining your session and shopping cart.
• Analytics cookies: help us understand how visitors interact with our website, including through Google Analytics 4.
• Marketing cookies: We do not currently use marketing cookies or Meta Pixel for paid social advertising. If we later use marketing cookies, including Meta Pixel or similar advertising tools, we will update this Policy accordingly and provide any notice or choice required by applicable law.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Service. Some browsers offer "Do Not Track" or similar signals, but there is not yet a uniform industry standard for how websites should respond to those signals. If applicable privacy law gives you the right to opt out of targeted advertising, sale, sharing, or similar tracking-based processing, we will honor those rights as required by law and through any tools or settings we make available.

9. Your Rights and Choices

Depending on your state of residence, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request correction of inaccurate or incomplete information.
• Deletion: request deletion of your personal information, subject to certain legal exceptions.
• Opt-out of marketing: unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us directly.
• Data portability: request your personal information in a portable format.

Washington State residents may have additional privacy rights under applicable Washington law, including My Health, My Data ("MHMD") depending on the nature of the information involved and our data practices. These rights include the Right to Confirm, Right to Access, Right to Delete, and Right to Withdraw Consent.

California residents may have additional privacy rights under California law, depending on whether the law applies to us and to the information at issue. These rights may include rights to know, delete, correct, or opt out of certain uses of personal information, subject to verification and legal exceptions. We do not sell personal information.

All Other States: Rights vary by state and may be subject to verification and legal exceptions, including but not limited to the Right to Know, Right to Delete, Right to Correct, Right to Opt-Out, Right to Portability, and Right to Non-Discrimination.

We do not sell personal information. If your state law gives you a right to make a privacy request, opt out of certain processing, or appeal a privacy-request decision, we will honor that right as required by applicable law.

Marketing Consent and Withdrawal. If you provide optional consent for marketing use of Uploaded Photos, AI Illustrations, book previews, completed book files, Customer Content, first name, related non-sensitive order details, testimonials, names, likenesses, or finished outputs, you may withdraw that consent for future marketing use at any time by contacting us at support@littlestorykeepers.com. Withdrawal of consent will not affect transactional communications, order-related communications, or uses already completed before we received and processed your withdrawal request, except where required by applicable law.

To exercise any of these rights, please contact us at privacy@littlestorykeepers.com or support@littlestorykeepers.com. For deletion requests, please use the subject line "Data Deletion Request" and include the email address associated with your account, your order number if applicable, and a brief description of the information you want deleted. We may ask you to provide information reasonably necessary to verify your identity and authority to make the request. We may deny, limit, or decline a request where permitted or required by applicable law, including where we cannot verify the request, must retain information for legal or operational reasons, or need the information to complete a transaction, prevent fraud or security incidents, comply with law, or protect our legal rights.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy — COPPA Notice

Our Service is not directed at children under the age of 13, and we do not knowingly collect personal information directly from children under 13. Our Service is designed for use by parents and adult gift-givers. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at privacy@littlestorykeepers.com, and we will delete such information promptly.

While our Service processes photographs that may depict children, this information is provided by adult customers, parents, or guardians and is subject to the protections described in Section 4 of this Policy.

12. Terms of Service

Your use of the Service is also governed by our Terms of Service, which are incorporated into this Privacy Policy by reference where applicable. The Terms of Service describe important rules regarding account use, Customer Content, AI-generated content, order finality, shipping, returns, refunds, reprints, disclaimers, limitations of liability, indemnification, governing law, and dispute resolution.

The Terms of Service also prohibit unlawful, exploitative, abusive, or otherwise prohibited Customer Content and may describe additional actions we may take if such content is submitted, including refusal, suspension, cancellation, preservation, reporting, or disclosure where required or permitted by law.

Suggested Terms Opt-In Language for Marketing Use. If we implement a marketing-consent option in the future, the Terms of Service may include substantially the following language: "Optional Marketing Consent. By checking the optional marketing-consent box at account creation, checkout, or another point in the Service, you authorize Little Story Keepers™ and The Trieu Crew LLC to use, reproduce, display, publish, and share the specific Uploaded Photos, AI Illustrations, book previews, completed book files, Customer Content, testimonials, names, likenesses, and finished outputs you submit or approve for marketing, advertising, social media, portfolio, promotional, and related business purposes. This consent is optional and is not required to create an account, place an order, receive the Service, or purchase a book. You may decline the consent box and still use the Service. If you later wish to withdraw consent for future marketing use, you may contact us at support@littlestorykeepers.com. Withdrawal will apply prospectively and will not require us to remove materials already printed, distributed, published, or otherwise used before we received and processed your withdrawal request, except where required by applicable law."

13. International Data Transfers

Our Service is operated in the United States and is currently intended for and available only to customers located in the United States. If you access our Service from outside the United States, do not use the Service or place an order; if you nevertheless provide information from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on our website, updating the Last Updated date, and, where appropriate, providing notice through the Service or by other reasonable means. For significant changes affecting how we handle your photographs or children's information, we will provide more prominent notice, including email notification where possible, and will obtain consent where required by applicable law. Changes will apply prospectively unless otherwise stated. Your continued use of the Service after the updated Policy becomes effective constitutes your acceptance of the updated Policy, except where applicable law requires a different method of notice or consent.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

We will respond to privacy inquiries and verified privacy requests within the time required by applicable law. In practice, most responses go out within 5 business days.

16. A Final Note from Our Family

We know the photos you upload may be some of the most meaningful images in your family's life. Our goal is to use them only to create, fulfill, support, and preserve the book experience you asked us to make; protect them while they are in our care; and honor the retention, deletion, and reprint commitments described in this Policy. If anything in this Policy is unclear, please write to us. We will explain it plainly and improve it when we can.