Privacy policy
Version of 25 October 2026. This is a translation; the French version prevails.
Who is responsible for your data?
Youssef Seghrouchni, sole trader (EI), trading as Fablunéo, 17 rue des Cygnes, 74940 Annecy, France, RCS Annecy 898 638 580. For any question or to exercise your rights: contact@fabluneo.com.
Photos of your loved ones
The photos you add are often of children. We handle them with particular care:
- A single purpose: drawing the portrait of each character and creating the illustrations of your creations. We do not publish them, sell them, never show them as examples without your written consent, and do not use them to train artificial intelligence models.
- Your consent first: before the first photo, you confirm that you are the person photographed, their parent or legal guardian, or that you have their consent. This consent is recorded with its date. A character can also be created without a photo, from the appearance described in the story.
- Hidden information removed: on upload, photo metadata (GPS location, date, camera model) is deleted.
- Artificial intelligence processing: to produce portraits and illustrations, photos and character descriptions are sent to Google (Gemini API) and OpenAI, under their business offerings, which exclude using this content to train their models.
- Restricted access: photos are stored in a private space, accessible only to you and, for customer service, to the site administrator.
- Delete at any time: from the Studio you can delete a photo, a character or a creation; deletion is immediate and permanent.
- Automatic deletion: photos are deleted 30 days after the book is ordered, since the book is produced from the illustrations. A creation never ordered and inactive for 12 months is deleted with its photos, after a notice email sent 30 days beforehand.
What data, why, and on what basis?
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Creating and managing your account | Last name, first name, email address, encrypted password | Performance of the contract | Until the account is deleted |
| Designing your creations | Photos; first names, role, age, gender and distinctive features of the characters; texts, dedication, illustrations | Performance of the contract; your consent for photos | Photos: 30 days after ordering, or until you delete them; creation not ordered: 12 months of inactivity; ordered creation: as long as the account exists |
| Processing your orders, deliveries and complaints | Identity, delivery and billing addresses, order content, IP address at the time of ordering, correspondence | Performance of the contract | Duration of the relationship, then archived for the limitation period (5 years) |
| Payment | Payment data, processed directly by Stripe | Performance of the contract | According to Stripe's obligations; Fablunéo does not store card numbers |
| Invoicing and accounting | Invoices, orders | Legal obligation | 10 years |
| Managing your tokens and gift cards | Token balance and history, card codes, recipient's name and email, message | Performance of the contract | As long as the account exists; accounting history 10 years |
| Checking entered texts | Texts intended for illustrations | Legitimate interest: preventing unlawful content | For the duration of the check |
| Website security | IP address and number of login attempts | Legitimate interest: protecting accounts against abuse | 10 minutes |
Texts you enter for an illustration are checked automatically before generation; a refused text is simply not illustrated, with no other consequence for you.
We do not use your data for advertising or profiling. We do not send you newsletters without your consent.
Who receives your data?
Only the providers needed for each task receive the corresponding data. They act on Fablunéo's instructions under a data processing agreement.
| Provider | Task | Data | Location |
|---|---|---|---|
| OVH SAS | Hosting the website and files | All website data | France |
| Google (Gemini API) | Portraits and illustrations | Photos, character descriptions and first names, scene texts | United States |
| OpenAI | Writing and checking texts; illustrations when this engine is used | Texts, character descriptions and first names; reference images for an illustration | United States |
| Stripe | Payment | Payment data, email address, billing address | Ireland, United States |
| Prodigi | Printing and shipping | Book print file, delivery name and address | United Kingdom and partner print sites |
| Google (email) | Sending the website's emails | Email address, email content | European Union, United States |
Transfers outside the European Union. Transfers to the United States are covered by the European Commission's standard contractual clauses and, for certified companies, by the EU–US Data Privacy Framework. The United Kingdom benefits from a European Commission adequacy decision.
How long?
Retention periods are shown in the table above. When you delete your account, creations not ordered are deleted with their photos; ordered creations are kept without their photos, to fulfil the order and the statutory guarantees, and invoices are kept for 10 years.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw your consent at any time (by deleting your photos), without affecting processing already carried out. You may also give instructions about what happens to your data after your death.
To exercise them:
- from "My account → My details": receive a copy of your data or request deletion of your account (a confirmation is sent to you by email);
- from the Studio: delete a photo, a character or a creation;
- by email to contact@fabluneo.com.
We reply within one month. If you believe your rights are not respected, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France).
Children
The website is for adults only. Data about children (photos, first names, age) is provided only by their parents, legal guardians or with their consent, and is used only to create their book.
Security
The website is served over HTTPS. Photos and print files are stored in a private space and served only to their owner; the printer accesses them only through signed, time-limited links. Passwords are encrypted. Administrative access is limited to the site manager.
Cookies
The website only uses cookies required for it to work: see the cookies policy.
Changes
This policy may change. The version in force is always the one published on this page, with its date.