Effective date: 2026-06-27 · Version: en-1.0
This Notice explains how Carve Co., Ltd. ("we") collects, uses, shares, and protects personal information when you use Talecoco (digital eBook service) at https://talecoco.com/en.
1. Who we are / controller
Carve Co., Ltd., 2F Unit 178A, 106 Jangdae-ro, Yuseong-gu, Daejeon, Republic of Korea, is the controller of your personal information. Privacy contact: support@talecoco.com. Where a representative is required under applicable data protection law, we will appoint one and provide the details here.
2. What we collect
- Account data: name, email, and the identifier from your login provider (Google).
- Uploaded photographs and inputs you provide to generate a storybook, including a child's photograph and details such as the child's name/age you choose to enter.
- Order & payment data: items purchased, price, currency, country/locale, and payment status. Card details are handled by PayPal; we receive a transaction result, not your full card number.
- Technical & usage data: device/browser data, IP address, cookies and similar technologies (see §8), and basic analytics.
3. Why we use it (purposes) and our legal bases
| Purpose | Legal basis |
|---|---|
| Create your account and provide the eBook (generation, storage, download access) | Performance of a contract |
| Process payments and prevent fraud | Contract / legitimate interests |
| Customer support | Contract / legitimate interests |
| Processing a child's photograph and facial features to generate the illustration | Consent (of the parent/guardian); see Sensitive / AI Image Processing Consent |
| Marketing emails | Consent (opt-in; withdraw anytime) |
| Security, debugging, and legal compliance | Legitimate interests / legal obligation |
4. Children's data
The account holder is an adult. We process a child's photograph and related details only to generate the storybook you requested, on the basis of the parent's/legal guardian's consent. We do not use children's photographs to train AI models, to identify or authenticate individuals, or to build profiles.
5. AI processing & sub-processors
To generate illustrations and text we send relevant inputs (which may include the uploaded photograph and prompts) to AI processors: OpenAI, Anthropic, and Google (Gemini). These providers act as our processors under data-processing agreements and process the data only to return a result to us and not to train their models.
6. Sharing
We share personal information with: payment provider (PayPal); the AI processors above; hosting/cloud infrastructure (Google Cloud); and analytics/advertising tools where you have consented (see §8). We may disclose information where required by law. We do not sell your personal information.
7. International data transfers
We operate from the Republic of Korea and use cloud and AI providers located in Korea, the United States, and elsewhere. This means your personal information (including a child's photograph) is transferred internationally. Where required, we rely on appropriate safeguards (such as standard contractual clauses / approved transfer mechanisms and a transfer risk assessment). See the International Data Transfer Notice.
8. Cookies & advertising
We use necessary cookies to run the Service and, with your consent, analytics and advertising cookies/pixels to measure and improve marketing. These are the Meta Pixel and Conversions API (Meta Platforms, Inc.) and the X Pixel (X Corp.).
Through them we share event data about your use of the Service — page views, product views, checkout steps and completed purchases — together with the order value, currency, order number and the identifiers of the books involved, plus the online identifiers those providers set in your browser (such as cookie IDs and ad-click IDs).
For Meta only, and only where you have given marketing consent, we additionally send contact identifiers (such as your email address) that are hashed with SHA-256 before they leave our servers, so that Meta can match the event to an account. We do not send contact identifiers to X.
You can stop this at any time using the “Do Not Sell or Share My Personal Information” link in our site footer. Choosing it stops both the browser pixels and the server-side event forwarding described above. Where required by local law, non-essential cookies are set only after you consent.
9. Retention
We keep uploaded source photographs for 30 days, then delete them. Generated eBooks and account data are kept for as long as your account is active and until you request deletion, subject to legal retention (e.g., tax/transaction records).
10. Your rights
Subject to local law you can request access, correction, deletion, restriction, objection, portability, and withdrawal of consent. To exercise any right, contact support@talecoco.com. You also have the right to complain to your local regulator. Withdrawing consent does not affect processing already carried out.
11. Security
We use technical and organisational measures (encryption in transit, access controls) to protect personal information. No system is perfectly secure; please use a strong password.
12. Changes
We will post updates here with a new effective date.
Your local rights
Your rights and the authority you can complain to depend on where you live. Under your local data protection law you may have the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent; and you may lodge a complaint with your local data protection authority. To exercise any right, contact support@talecoco.com.
This Privacy Notice is effective as of 2026-06-27.