Privacy Policy

Libro Chiquito ("we," "us," or "our") operates the website librochiquito.com and related services. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform to create personalized books.

1. Information We Collect

1.1 Information You Provide

• Account information: Email address, name, and authentication credentials when you create an account or make a purchase.
• Book creation data: Child's name, age, interests, uploaded photographs, illustration preferences, and any additional character information (names, relationships, photos) you provide during the book creation process.
• Payment information: Billing details and shipping address processed securely through Stripe. We do not store credit card numbers on our servers.
• Communications: Information you provide when contacting our support team.

1.2 Information Collected Automatically

• Usage analytics: We use PostHog to track page views, feature usage, session recordings, and interaction patterns to improve our product experience.
• Device information: Browser type, operating system, screen resolution, language preferences, and timezone.
• Location data: Approximate geographic location derived from your timezone and browser settings, used to regionalize content and determine shipping eligibility.
• Cookies: We use cookies for authentication sessions, language preferences, and analytics. See Section 6 for details.

2. How We Use Your Information

• Book creation: To generate personalized stories, illustrations, and printed books based on the details you provide.
• AI processing: Your book creation data (names, ages, interests, and uploaded photos) is sent to third-party artificial intelligence services to generate story text and illustrations. See Section 3 for details.
• Order fulfillment: To process payments, produce printed books through our printing partners, and ship orders to your address.
• Account management: To authenticate your identity, manage your bookshelf, and provide access to purchased books.
• Product improvement: To analyze usage patterns, identify issues, measure feature adoption, and improve the overall user experience through analytics and session recordings.
• Communications: To send transactional emails (order confirmations, shipping updates, login codes) and, with your consent, promotional communications.
• Language regionalization: To adapt content language and dialect based on your detected location (e.g., Mexican Spanish vs. Castilian Spanish).

3. Third-Party AI Processing

To create personalized stories and illustrations, we transmit certain book creation data to third-party artificial intelligence providers. By using our service, you acknowledge and consent to this processing.

3.1 Data Shared with AI Providers

• Child's name, age, and interests
• Character names and relationships
• Uploaded photographs (used as visual references for illustration generation)
• Selected illustration style and story preferences

3.2 AI Service Providers

We may use the following AI providers, among others, to process your data:

• OpenRouter — API gateway for AI model access
• Anthropic (Claude) — Text generation for stories
• OpenAI (GPT) — Text and image generation
• Google (Gemini) — Image generation and visual processing
• Other AI providers — We may add or change providers as technology evolves. The categories of data shared will remain consistent with this policy.

3.3 AI Provider Data Handling

Each AI provider processes data according to their own privacy policies and terms of service. We select providers that commit to not using customer data for training their models. However, we cannot guarantee how third-party providers handle data once transmitted. We encourage you to review the privacy policies of these providers.

4. Third-Party Services

4.1 Payment Processing

Payments are processed by Stripe. Your payment information is transmitted directly to Stripe and is subject to their Privacy Policy. We receive only confirmation of payment, shipping address, and tax identification (where required).

4.2 Printing and Fulfillment

Printed books are produced by third-party printing partners including Gelato, Lulu, and Peecho. We share your shipping name, address, and the book PDF with these partners solely for order fulfillment. Each partner operates under their own privacy policies.

4.3 Analytics

We use PostHog for product analytics, including page views, feature usage tracking, and session recordings. PostHog may collect IP addresses, device information, and interaction data. This data helps us understand how users interact with our platform and improve the experience.

4.4 Email Communications

Transactional emails (login codes, order updates, shipping notifications) are sent through our email service provider. Your email address is shared with this provider solely for delivering these communications.

5. Data Storage and Security

• Book data, user accounts, and order information are stored in encrypted databases.
• Uploaded photos and generated illustrations are stored in cloud storage with access controls.
• Generated PDFs (digital and print-ready) are stored securely and accessible only to the book owner and authorized administrators.
• We use HTTPS/TLS encryption for all data in transit.
• Authentication uses secure tokens (JWT) with session management through Better Auth.
• We retain your data for as long as your account is active or as needed to provide our services.

6. Cookies and Tracking

We use the following categories of cookies and tracking technologies:

• Essential cookies: Authentication session, language preference (PARAGLIDE_LOCALE). These are required for the platform to function.
• Analytics cookies: PostHog tracking for product improvement. These help us understand usage patterns and improve the user experience.
• Functional storage: LocalStorage for wizard draft persistence (book creation progress), session identifiers, and user preferences.

7. Children's Privacy

Our service is designed for parents and guardians to create books for children. We do not knowingly collect personal information directly from children under 13. All data is provided by the parent or guardian who creates the book. If you believe a child has provided us personal information without parental consent, please contact us and we will delete it promptly.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data and associated books.
• Portability: Request your data in a portable format.
• Objection: Object to certain processing activities, including analytics tracking.

To exercise any of these rights, contact us at [email protected].

9. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States, where our AI providers and cloud infrastructure are located. By using our service, you consent to these transfers. We ensure appropriate safeguards are in place for international data transfers.

10. Data Retention

• Account data: Retained while your account is active. Deleted upon request.
• Book data: Retained indefinitely to allow you to access, re-download, and reprint your books.
• Payment records: Retained as required by applicable tax and financial regulations.
• Analytics data: Retained for up to 24 months for product improvement purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending an email. Your continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at:
Email: [email protected]
Company: Libro Chiquito
Location: Guadalajara, Jalisco, Mexico