Privacy policy
Last updated: November 8, 2026
Storylou is an online store operated by Maison Elian, a sole proprietorship registered in Quebec (Montreal, Canada). This policy explains what personal information we collect, why, who we share it with, how long we keep it and what your rights are.
Person in charge of personal information
The owner of Maison Elian is responsible for the protection of personal information. For any question or request: contact@storylou.com.
What we collect
- For your order: name, email, shipping and billing address, phone number, items purchased.
- To personalize the book: the child's first name, age and gender, their photos, the dedication and, if you add them, the name, relationship to the child and photos of other characters (family member, friend, pet). For a made-up story: what you tell us about the story and the values you chose.
- A distinctive feature, if you describe one: for example glasses or a wheelchair. This field is optional; what you write is used only to show the child or character in the illustrations.
- Payment: payment is processed by Shopify and its payment partners. We never see your full card number.
- Browsing: cookies and technical data (device, browser, pages viewed) needed for the store to work, for the cart and for visit statistics and, only if you accept them in the cookie banner, advertising cookies (see "Advertising" below).
Your child's photos
- They are used only to create the book you ordered. They are never published, sold or used in our advertising.
- By uploading them, you confirm that you are the parent, guardian or an authorized person, and you consent to this use. You can withdraw your consent by emailing us; if the book has not been printed yet, the order is then cancelled and refunded.
- The illustrations are created with the help of artificial intelligence services: Google (Gemini) analyzes the photos to pick the sharpest one and describe the child's features, then OpenAI creates the illustrations from the photos. Under OpenAI's API terms, this data is not used to train its models.
- The last page of the book shows the child's photo ("the real hero"), so it is part of the file sent to the printer.
- We delete the photos from our production systems 15 days after shipping. The illustrations and book file are deleted 30 days after shipping (so we can still reprint a damaged book for free). After a cancellation, everything is deleted after 7 days. A copy of the photos remains attached to your order in our Shopify account; on request, we remove it to the extent the platform allows.
Why we use your information
- To make, print and deliver your order, and keep you informed.
- To help you write, if you use the "Improve" or "Suggest" buttons (dedication, story idea, values).
- To answer your questions and handle reprints and refunds.
- To prevent fraud and keep the store secure.
- To meet our legal obligations (accounting, taxes).
- To measure how well our ads on Facebook and Instagram work and show them to people who may be interested, only if you accepted advertising cookies.
- To send you store news, only if you agreed. You can unsubscribe at any time.
Advertising (Meta: Facebook and Instagram)
- If you accept advertising cookies, the Meta pixel and Meta's Conversions API send Meta information about your visit and purchases on storylou.com: pages viewed, add to cart, checkout started, purchase, amount and products ordered.
- To link these actions to our ads, contact details related to the order (for example email, phone, city, province or state, postal code) may also be sent in encrypted (hashed) form.
- We never send Meta your child's photos, their first name or the book's personalization details.
- If you refuse advertising cookies, this information is not sent. You can change your mind at any time in the store's cookie banner, and manage this data in the "Off-Meta activity" settings of your Facebook or Instagram account.
- Meta processes this information under its own privacy policy.
Who we share it with
- Shopify: store hosting, orders and payments.
- OpenAI: creating the illustrations from the photos.
- Google (Gemini): analyzing the photos (picking the best photo, describing features) and writing help: dedication, story idea, values and the book's text.
- Google Cloud: hosting the server that makes the books.
- Cloudflare: storage of photos, illustrations and book files. These files are never public: each access link is private and expires.
- Supabase: our order database (personalization choices and production tracking).
- Gelato and its partner workshops: printing and shipping. They receive the book file to print (illustrations, text and the child's photo on the last page) and the shipping address.
- Meta Platforms (Facebook and Instagram): measuring and delivering our ads, only if you accept advertising cookies (see "Advertising" above).
- Microsoft (Microsoft 365): our email, when you write to us.
- Carriers: delivering the package.
These providers use your information only to provide these services to us, except Meta, which may also use it under its own terms for its advertising services. Most are located outside Quebec and Canada (including in the United States and Europe), so your information may be processed there, with contractual safeguards. We do not sell your personal information.
How long we keep it
- Photos: 15 days after shipping; illustrations and book file: 30 days after shipping (see above).
- Order information: as long as tax and accounting laws require (generally 6 years).
Your rights
You can ask to access your information, correct it, delete it, receive a copy of it, or withdraw your consent. Email contact@storylou.com; we reply within 30 days. If you are not satisfied with our answer, you can contact the Commission d'accès à l'information du Québec.
Security
We limit access to information to the people and services that need it and use encrypted connections. Since no measure is perfect, we will notify you, as the law requires, of any confidentiality incident that presents a serious risk.
Shopify
The store is hosted by Shopify. To learn how Shopify handles personal information: Shopify's privacy policy.
Changes
We may update this policy; the date at the top of the page shows the latest version.