Privacy Policy

Data controller and contact

The personal data controller is Ukrainian sole proprietor (FOP) . The address, email, and phone for data requests are available without registration on the “Contact and Seller Details” page. This policy applies to My Bedtime Tales, user accounts, support, and automated processing of materials.

Data and purposes of processing

Accounts and orders use your name, email, protected password or Google sign-in information, preferences, order history, advance payment balance, payment identifiers, and accepted agreement versions. This is necessary to enter into and fulfill orders, provide content access and support, and maintain legally required transaction records.

For personalized materials, we process the character information you enter, text, photographs, images, generated results, and your edits. Do not upload other people’s data without an appropriate basis; a legal representative acts on behalf of a child for children’s data and photographs. Do not include home addresses, identity documents, payment details, or other unnecessary sensitive information in creative requests.

For technical security and troubleshooting, we may retain IP addresses, browser information, timestamps, and technical logs. Quality control also retains actual AI requests and responses, prompt versions used, links to results, selected edits, and audits. These snapshots may contain personal data from your materials; they are accessible to authorized administrators, not the public catalog.

AI providers and automated analysis

Selected texts, images, captions, and before-and-after pairs are sent to an AI provider to create ordered materials and perform selected quality checks. These checks distinguish error corrections from preference-based changes and may improve general generation instructions. They do not automatically publish your story or train a proprietary website model on your account.

The OpenAI API is used for AI requests; depending on the selected narration system, Microsoft Azure and Google Cloud may be used for narration. Each provider receives the data needed for the relevant operation. Storage and processing may take place outside Ukraine under the respective services’ terms and in accordance with applicable transfer rules. This policy does not promise that all data will always physically remain in Ukraine.

Editing an original story does not automatically erase its saved audit snapshot. Contact support to review, correct, delete, or object to the use of data in an additional audit. We distinguish processing needed to fulfill an order from optional analytics and consider requests under applicable law.

Other recipients

The service uses hosting, Cloudflare for protection and file storage, email delivery services, and the active payment provider. The provider’s payment page processes card details; the website receives the transaction status, amount, currency, and identifiers, not the CVV.

The payment provider active at checkout and the version of the terms are saved in the transaction history. For orders created before a provider switch, status updates and refunds may continue to be handled through the previous provider.

Data is not sold as a contact database. Sharing data to fulfill an order, comply with legal obligations, protect rights, or fulfill your specific request is not a sale of a contact database. Optional Telegram notifications use account-linking data only when you have configured that channel.

Retention and deletion

Account data and private materials are used while needed to operate your account and fulfill orders. A deletion request involves verification of the requester’s authority and a separate review of logs and AI snapshots; some financial records, agreements, dispute records, and backups may be retained for a legally required or justified period.

We do not promise immediate physical deletion of every copy with one click. Deletion at an AI provider or from a rotating backup archive may require a separate procedure. We inform the requester about the scope, limitations, and results of the request. Public catalog books that contain none of your personal data are not deleted with your account.

Cookies and analytics

Technical cookies or browser storage are needed for sign-in, security, maintaining state, and saving preferences. Blocking these mechanisms may prevent account features from working. Their use does not constitute consent to marketing messages.

When configured, Umami Cloud is used for public-page statistics without analytics cookies; Google Analytics is not connected to the website. Public page views and the referring domain are recorded. Analytics messages do not include story text, account or payment data, URL parameters after “?”, or fragments after “#”. Account pages, administrative pages, and sign-in forms are not tracked. Advertising profiles, session recordings, and linking statistics to your account are not used.

When analytics is configured for this website, minimized tracking is enabled by default. You can turn it off with “Exclude my visits” in the “Visitor analytics without analytics cookies” section on this page. We honor a previous opt-out, Do Not Track, Global Privacy Control, and Umami’s separate opt-out. Your choice is stored only in this browser; clearing browser storage may reset it. Opting out does not affect sign-in, purchases, or reading and does not erase data already sent.

Umami Cloud is an external service. During a network connection, the provider technically receives your IP address and browser connection information; according to Umami’s documentation, data is anonymized and analytics cookies are not set. The absence of cookies does not mean that no data is processed. For limited statistics, we rely on a legitimate interest in operating and improving the website where applicable law permits; you may object using the button described above or by contacting support.

Your rights

Under applicable law, you may obtain information about processing and access your data, request correction, deletion, or restriction, object to processing, and withdraw consent where consent is the basis for processing. Withdrawal does not make prior lawful processing unlawful or cancel necessary legal recordkeeping.

You may contact the Ukrainian Parliament Commissioner for Human Rights, another competent authority, or a court. Do not send a passport copy with your first request: start by using your account email or account support; we request additional information only when necessary to verify access rights.

Payment provider: WayForPay

Card payments are processed through WayForPay at secure.wayforpay.com. The payment page shows the verification methods available for your card. Refunds are handled through the provider of the original payment; submit your request to the seller.

Test mode is currently enabled. Do not use real payment cards.