Privacy Policy

Last updated: 28 October 2026

This explains what we collect when you use tailorway.ai, why, who helps us handle it, how long we keep it, and your rights. Photos of children get special care: they are used only to make your book.

1. Who is responsible

Tailorway OÜ (registry code 17252547, Viru väljak 2, Kesklinna linnaosa, 10111 Tallinn, Harju maakond, Estonia) is responsible for your personal data on tailorway.ai. Questions about your data: contact@tailorway.ai.

2. What we collect

• Your account: your email address and how you sign in (Google, Apple, or your email address and a code). If you sign in with Google or Apple, they tell us your email address. If you add them in Settings: your first name, last name and phone number, and your preferred currency.
• Your book: what you put in the order form: the reader's age, the name, gender, description, role, clothes and personality of each person in the story, the photos you upload (up to 4 per character, often of children), what should happen in the story, the mood, the title and any extras (such as who the book is for, the occasion or an author name). Also the character drawings and the finished book we make from them.
• Your order: the delivery country, the name, delivery and billing address, email address and phone number given at checkout, the payment status and amount, the card brand and its last four digits (Stripe tells us these; we never see or store your full card number), and the parcel's tracking details.
• The help chat: your messages and its answers. If you send a conversation to our team, the email address you give for the reply.
• Technical data: your IP address and browser details, which our servers use to run the site and to limit abuse, and the country your connection comes from (as our content delivery network reports it), which we use only to suggest a currency and a delivery country. We don't use your precise location.

3. Why we use it, and on what legal basis

• To make and deliver your book, run your account and answer your questions (performing our contract with you, or the steps you ask for before it: GDPR Article 6(1)(b)). This includes drawing your characters from your photos and descriptions, checking that a photo can be used, checking for characters that belong to someone else, writing and painting the book, printing and shipping it, emailing you when it is ready, and the help chat.
• To keep the service safe and fair (our legitimate interest, Article 6(1)(f)): limits on uploads and requests, preventing abuse and fraud, and fixing problems.
• To keep the records the law requires (legal obligation, Article 6(1)(c)): order and payment records for accounting and tax.

We don't send marketing emails, and we don't sell your data.

4. Photos of children

A child's photo should be uploaded by their parent or guardian, or with their permission, for that child's book. Photos stay private in your account. We use them only to make your book and to answer your own questions about it in our help chat. We never use them for marketing, and we don't use them to train AI models. Our service providers (section 5) receive them, and pictures made from them, where a step of making your book needs them, and process them to provide their service to us.

You can delete your photos at any time by deleting your account (section 9).

5. Who helps us, and what they receive

These service providers handle data for us, to provide their service to us:

• Our hosting provider: runs the site and stores your account, photos, books and orders, on servers in the EU (Paris) and, for some records about your book's characters and your book project, in the United States. It also runs our sign-in, sends our emails and delivers the website.
• Google and Apple, only if you choose to sign in with them.
• Stripe: takes your payment and the billing and delivery details you enter on its checkout page.
• Our print partner in the Netherlands, and the printers and carriers it works with for your country: the print files of your book, and the name, delivery address, email address and phone number for the parcel.
• AI service providers that write, illustrate and check your book, check your photos, check names, descriptions, photos and story text for characters that belong to someone else, suggest titles, and answer in the help chat.
• An image-editing service for small fixes to a page (and, through it, the makers of the image models it uses), and a service that enlarges the finished pages for printing.
• Our mailbox provider: holds the emails you send us and the conversations you send to our team from the help chat.

Each of them receives only what its step needs: for the AI, image-editing and enlarging services, that can include the photos you uploaded and pictures made from them. On request, we tell you which providers received your data: write to us at contact@tailorway.ai.

6. Data outside the EU

Some of these providers process data outside the European Economic Area, mainly in the United States (one AI service provider may process it in any country where it has facilities). Our hosting, payment and AI service providers, the image-editing service and the enlarging service do so under contractual safeguards for personal data (such as the EU Standard Contractual Clauses). We have no contract of our own with the makers of the image models that the image-editing service uses. Our mailbox provider handles your emails under its terms of service. To deliver a book outside the EU, your name and address go to the carriers that deliver there.

Ask us at contact@tailorway.ai for details of the safeguards.

7. How long we keep it

• A book started without signing in, with its photos: deleted 30 days after your last visit, if you never sign in.
• Your account, photos, characters and books: until you delete your account.
• The help chat: without signing in, the conversation stays with your browser, and each message is deleted 30 days after it was written. Signed in, it is deleted with your account. A conversation you send to our team arrives as an email and stays in our mailbox; it is not deleted with your account.
• Orders and payments: order and payment records are kept for 7 years, as Estonian accounting law requires. Stripe and our print partner also keep their own records of your payment and parcel under their own rules.
• The service that enlarges pages for printing deletes the enlarged pages within 10 minutes and is told not to keep them in its request history.
• Technical logs on our servers are kept in a fixed amount of space and overwritten as new entries arrive.

8. Cookies and browser storage

We use only what the site needs to work and to remember your choices: no advertising or analytics cookies, and no tracking across other websites. Our fonts come from our own site.

• tw_locale (1 year): the language you chose.
• tw_currency (1 year): the currency you chose, when you are not signed in.
• tw_help (30 days): keeps your help chat conversation in this browser.
• tw_guest_session and tw_guest_csrf (30 days): keep a book you started without signing in, and protect it.
• Browser storage (not cookies): your sign-in while you are signed in, your language and currency, and your place in the order form.

Stripe's checkout page sets its own cookies, under Stripe's privacy policy.

9. Deleting your account

Open Settings, then Login & security, then Delete my account. It permanently deletes the books, characters and photos stored in your account, and your account's help chat conversation; your sign-in is deleted too, unless you also use it for another of our apps. It can't be done while a book is being made. If your account has an order, write to us at contact@tailorway.ai to delete it; we keep only the order records the law requires (section 7).

10. Your rights

You can ask us for a copy of your data (including which of our service providers received it), to correct it, to delete it, to receive it in a portable format, to restrict how we use it, and you can object to uses based on our legitimate interest. Write to us at contact@tailorway.ai; we answer within one month.

You can also complain to a data protection authority: in Estonia, the Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate, www.aki.ee), or the authority where you live or work.

11. Changes

When we change this policy, we update it here with a new date.

Contact

contact@tailorway.ai. Phone: +41 22 539 16 40 (voice messages; for the fastest answer use our help chat). Our terms: Terms of Sale. Our details: Company details.