Your privacy matters. This policy explains what personal information we collect when you use TwinkleYourTale.com, why we collect it, how we use it, and what rights you have over your data.

We've written this policy in plain language because privacy shouldn't require a law degree to understand. If you have questions, please get in touch.

Who We Are

TwinkleYourTale.com is operated by TBC, [ADD: company registration number], registered at [ADD: registered address].

We are the data controller for the personal information we collect through this website and our AI-powered storytelling platform.

What Information We Collect

We collect personal information when you create an account, purchase story credits, generate stories, and use our platform. Here's what that includes:

Account and Contact Information

When you sign up for an account, we collect your name (where requested) and email address. We use this to create your account, send you important service updates, and respond to your questions.

We also store your account credentials and a unique account identifier so we can recognise you when you log in.

If you contact our support team, we keep a record of your correspondence so we can help you properly.

Payment and Transaction Information

When you purchase story credits or token packages, we collect information about the transaction, including the package you bought, the date and amount, and payment status.

We work with third-party payment processors to handle payments securely. We do not store your full card details ourselves.

Story and Creative Content

When you create stories on our platform, we collect and store the information you provide to generate them. This includes your story prompts, instructions, character names, traits, preferences, and any other creative inputs you submit.

We also store the stories and AI-generated images that the platform creates for you, along with your saved content, preferences, and content history.

Technical and Usage Information

Like most websites, we automatically collect some technical information when you visit. This may include your IP address, browser type, device information, and operating system.

We collect information about how you use the platform, including which features you interact with, login and session information, and how you navigate the site. This helps us understand how the platform is performing and where we can make improvements.

We also use cookies and similar technologies. More detail on that below.

How We Use Your Information

We use the personal information we collect for the following purposes:

• To provide the service: Creating your account, processing your purchases, generating your stories and images, saving your content, and delivering the features you've asked for.
• To communicate with you: Sending essential account notices, transaction confirmations, password resets and responses to support enquiries.
• To improve the platform: Understanding how people use TwinkleYourTale.com, identifying technical issues, testing new features, and making the service better.
• To protect the platform and enforce our terms: Preventing fraud, spam, abuse, and unauthorised access. Investigating security incidents and protecting the rights of our users and our business.
• To comply with legal obligations: Responding to lawful requests from authorities, complying with applicable data protection and consumer protection laws, and maintaining records for tax and accounting purposes.

We process your personal information because it's necessary to deliver the service you've signed up for, because we have a legitimate business interest in running and improving the platform, or because the law requires it. Where we rely on consent, you can withdraw it at any time.

Who We Share Your Information With

We do not sell your personal information to anyone. We do share certain information with trusted third-party service providers who help us run the platform. They only access what they need to perform their specific function, and they're required to protect your data.

Here's who we work with

• Payment processors: To process your purchases, verify transactions, and handle refunds or payment disputes.
• AI service providers: To generate the stories, images, and other creative outputs you request through the platform. Your prompts and creative inputs are sent to these providers so they can produce the content you've asked for.
• Hosting and infrastructure providers: To operate the website, store your account information, and deliver your stories and digital content.
• Analytics and performance providers: To measure website usage, understand how features are being used, and identify technical issues.
• Customer support and communications providers: To manage support enquiries and send essential account or transaction emails, where applicable.

We may also disclose your information if required by law, to enforce our terms and conditions, to protect our rights or the safety of others, or in connection with a business sale, merger, or acquisition.

Cookies and Similar Technologies

We use cookies and similar technologies to make the platform work properly and to understand how it's being used.

• Essential cookies: are required for core website functionality. They enable account sessions, security features, and checkout processes. You cannot disable these and still use the platform.
• Preference cookies: remember your settings and preferences so you don't have to re-enter them every time you visit.
• Analytics cookies: help us measure website traffic, understand which features are most popular, and identify performance issues.

How Long We Keep Your Information

We only keep your personal information for as long as we need it.

We retain your account information and story content for as long as your account remains active, so you can log in and access your saved stories whenever you want.

If you close your account or request deletion, we will delete your personal information unless we need to keep certain records for legal, accounting, security, or dispute-resolution purposes.

Technical logs and analytics data are typically retained for a shorter period and are anonymised or deleted when no longer needed.

Your Rights Over Your Data

You have legal rights over the personal information we hold about you. These include:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete information.
• Right to erasure: You can request that we delete your personal data where the legal conditions for erasure are met.
• Right to restrict processing: In certain circumstances, you can ask us to limit how we use your data.
• Right to object: You can object to certain types of processing, including direct marketing.
• Right to data portability: Where applicable, you can request your data in a commonly used, machine-readable format.
• Right to withdraw consent: If we're processing your data based on consent, you can withdraw that consent at any time. This won't affect the lawfulness of processing before you withdrew consent.
• Right to opt out of marketing: You can unsubscribe from promotional emails at any time by clicking the unsubscribe link in any marketing message we send you.
• Right to complain: If you're not satisfied with how we've handled your data, you have the right to raise a concern with the relevant data protection supervisory authority.

To exercise any of these rights, please contact us using the details below. We'll need to verify your identity before responding to your request.

Please note that these rights are subject to applicable legal conditions and exceptions. In some cases, we may not be able to fully comply with a request where we have a lawful reason to continue processing your data.

Children's Privacy

If our platform is used by children they must be supervised at all times by someone 18 or above, we take extra care to protect their privacy. We do not knowingly collect more personal information from children than is necessary to provide the service.

Parents and guardians have the right to review, request deletion of, or refuse further collection of their child's personal information. If you believe we have collected personal information from a child without appropriate consent, please contact us immediately so we can investigate and take action.

Data Security

We use appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure. This includes secure servers, encryption, access controls, and regular security reviews.

However, no method of transmission or storage is completely secure. While we take data security seriously, we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or the functionality of the platform.

When we make changes, we will update the "Last updated" date at the top of this page. If the changes are significant, we may notify you by email or through a notice on the website.

We encourage you to review this policy periodically so you stay informed about how we protect your data.

Contact Us About Your Data

If you have questions about this privacy policy, want to exercise your data rights, or need to contact us about how we handle your personal information, please get in touch at support@twinkleyourtale.com.