Talecoco Privacy Notice

Effective date: 2026-06-27 · Version: en-1.0

This Notice explains how Carve Co., Ltd. ("we") collects, uses, shares, and protects personal information when you use Talecoco (digital eBook service) at https://talecoco.com/en.

1. Who we are / controller

Carve Co., Ltd., 2F Unit 178A, 106 Jangdae-ro, Yuseong-gu, Daejeon, Republic of Korea, is the controller of your personal information. Privacy contact: support@talecoco.com. Where a representative is required under applicable data protection law, we will appoint one and provide the details here.

2. What we collect

  • Account data: name, email, and the identifier from your login provider (Google).
  • Uploaded photographs and inputs you provide to generate a storybook, including a child's photograph and details such as the child's name/age you choose to enter.
  • Order & payment data: items purchased, price, currency, country/locale, and payment status. Card details are handled by PayPal; we receive a transaction result, not your full card number.
  • Technical & usage data: device/browser data, IP address, cookies and similar technologies (see §8), and basic analytics.

3. Why we use it (purposes) and our legal bases

PurposeLegal basis
Create your account and provide the eBook (generation, storage, download access)Performance of a contract
Process payments and prevent fraudContract / legitimate interests
Customer supportContract / legitimate interests
Processing a child's photograph and facial features to generate the illustrationConsent (of the parent/guardian); see Sensitive / AI Image Processing Consent
Marketing emailsConsent (opt-in; withdraw anytime)
Security, debugging, and legal complianceLegitimate interests / legal obligation

4. Children's data

The account holder is an adult. We process a child's photograph and related details only to generate the storybook you requested, on the basis of the parent's/legal guardian's consent. We do not use children's photographs to train AI models, to identify or authenticate individuals, or to build profiles.

5. AI processing & sub-processors

To generate illustrations and text we send relevant inputs (which may include the uploaded photograph and prompts) to AI processors: OpenAI, Anthropic, and Google (Gemini). These providers act as our processors under data-processing agreements and process the data only to return a result to us and not to train their models.

6. Sharing

We share personal information with: payment provider (PayPal); the AI processors above; hosting/cloud infrastructure (Google Cloud); and analytics/advertising tools where you have consented (see §8). We may disclose information where required by law. We do not sell your personal information.

7. International data transfers

We operate from the Republic of Korea and use cloud and AI providers located in Korea, the United States, and elsewhere. This means your personal information (including a child's photograph) is transferred internationally. Where required, we rely on appropriate safeguards (such as standard contractual clauses / approved transfer mechanisms and a transfer risk assessment). See the International Data Transfer Notice.

8. Cookies & advertising

We use necessary cookies to run the Service and, with your consent, analytics and advertising cookies/pixels to measure and improve marketing. These are the Meta Pixel and Conversions API (Meta Platforms, Inc.) and the X Pixel (X Corp.).

Through them we share event data about your use of the Service — page views, product views, checkout steps and completed purchases — together with the order value, currency, order number and the identifiers of the books involved, plus the online identifiers those providers set in your browser (such as cookie IDs and ad-click IDs).

For Meta only, and only where you have given marketing consent, we additionally send contact identifiers (such as your email address) that are hashed with SHA-256 before they leave our servers, so that Meta can match the event to an account. We do not send contact identifiers to X.

You can stop this at any time using the “Do Not Sell or Share My Personal Information” link in our site footer. Choosing it stops both the browser pixels and the server-side event forwarding described above. Where required by local law, non-essential cookies are set only after you consent.

9. Retention

We keep uploaded source photographs for 30 days, then delete them. Generated eBooks and account data are kept for as long as your account is active and until you request deletion, subject to legal retention (e.g., tax/transaction records).

10. Your rights

Subject to local law you can request access, correction, deletion, restriction, objection, portability, and withdrawal of consent. To exercise any right, contact support@talecoco.com. You also have the right to complain to your local regulator. Withdrawing consent does not affect processing already carried out.

11. Security

We use technical and organisational measures (encryption in transit, access controls) to protect personal information. No system is perfectly secure; please use a strong password.

12. Changes

We will post updates here with a new effective date.

Your local rights

Your rights and the authority you can complain to depend on where you live. Under your local data protection law you may have the right to access, correct, delete, or port your data, to object to or restrict processing, and to withdraw consent; and you may lodge a complaint with your local data protection authority. To exercise any right, contact support@talecoco.com.

This Privacy Notice is effective as of 2026-06-27.