LITTLE WISH TALES — PHOTO TERMS (version v0.4, 2026-10-17)
DRAFT FOR REVIEW. Not yet reviewed by an attorney.

Little Wish Tales is a brand of Tailor Made LLC ("we").

1. Who can agree
You confirm that you are at least 18 and that you are the parent or legal guardian of the child
named here. Only upload a photo of a child you are the parent or guardian of. If you believe a photo
of your child was uploaded without your permission, contact us and we will delete it.

2. What we collect
Your email address. Your child's first name, the pronoun the stories use, and age. One photo of
your child. Your dedication, if you write one. If you buy a book, the payment details Stripe
collects (see section 4).

3. What the photo is for
One thing: drawing your child's storybook character. You see the character, and choose it, before
you pay. Until you buy a book, you see only a small preview of it. A person on our team checks
every page before a book reaches you.

4. Who handles it for us
We share your data only with the companies that help us make your book:
- OpenAI (image model) receives the photo and our drawing instructions, and draws your child's character and the book's pictures. OpenAI may keep a copy for up to 30 days for abuse monitoring, then deletes it. It does not use it to train its models.
- Anthropic (AI model) looks at the character drawing you chose and writes a short description of it (hair, skin, eyes) that guides the book's pictures. It never receives the photo. Anthropic may keep a copy for up to 30 days, then deletes it. It does not use it to train its models.
- Supabase (database and file storage, United States) stores your account, the photo until it is deleted, the character and the books. Supabase deletes a file as soon as we do; its database backups, which can hold your account details, are overwritten within 7 days.
- Stripe (payments) takes your payment and receives your card, email, billing details and IP address. We never see your card. We keep payment records (order id, amount, date) for tax even after a deletion. Stripe keeps its own records under its own terms.
- Cloudflare (site hosting) serves our pages and keeps standard page logs (IP address, browser, pages visited). Its "verify you are human" check on the photo form uses your IP address and browser details. We keep no visitor analytics. Cloudflare keeps its logs under its own terms and uses the check's signals to improve its bot detection.
- Trigger.dev (job scheduling) may run our book-making jobs and receives only job data, such as order and job ids. It never receives the photo. Trigger.dev keeps job logs under its own terms.
- Resend (email) sends our emails to you and receives your email address, your child's first name and the order id. It never receives the photo. Resend keeps a copy of each email for up to 30 days.
We never sell it, and never reuse it for anything else or for advertising.
[TO CONFIRM before launch: our data-processing agreements with these providers.]

5. How long we keep it
- The photo: We delete the photo when you choose your character, never later than 24 hours after. If you never choose one, we delete it 7 days after you upload it.
- The drawings you did not pick: When you choose your character, we delete the other drawings we made for you.
- Your child's character: If you buy a book, we keep the character while your account is active, so your child can star in future books without a new photo. If your account is inactive for 12 months, we email you 30 days before we delete it. If you never buy a book, we delete the character 45 days after you chose it, and we email you a reminder first.
- Your books: Paid books stay in My books if you delete the character. They are deleted when you remove your child, withdraw your consent, or when the character expires after 12 months of inactivity (we warn you first).
- Payment records: Payment records (order id, amount, date) are kept for tax after any deletion.
- You can add a new photo at any time, for example as your child grows, and choose which character a
  book uses.

6. Your choices
You can delete your child's character, or your child's details, character and books, at any time from
your account or by contacting us. You can withdraw this consent at any time: we stop making anything
with the photo or the character and delete them. After a deletion we keep only a record that the
order and this consent existed, without your child's name, age or pictures, and the payment records
above.

7. Emails
We email you when we receive the photo, when the character is ready to choose, when we start your
book and when it is ready, and before we delete your child's character or books on a deadline. These emails use your child's
first name in the message, never in the subject line.

8. Contact
support@littlewishtales.com