Privacy Policy

    Last updated: February 10, 2026

    Who we are

    Raconteo is a platform operated from Spain that helps you create personalized memoir books with AI-guided writing assistance. This Privacy Policy describes how we collect, use, and protect your personal data when you use our service.

    Data we collect

    We collect the information you provide to us directly, as well as data related to your use of the service.

    Account data

    • Name and email address
    • Password (encrypted)
    • Profile preferences

    Order and shipping data

    • Shipping address
    • Payment information (processed securely by our service providers)
    • Order history

    Your book content

    • Texts and narratives you write
    • Photos and images you upload
    • Conversations with our AI writing assistant
    • Customization choices (cover, layout)

    Usage data

    • Device and browser information
    • IP address and general location
    • Pages visited and features used
    • Error logs

    How we use your data

    PurposeLegal basis
    Provide the service (account, storage, AI assistance)Contract
    Process orders (printing, shipping, payments)Contract
    Customer supportContract
    Improve the service (usage analysis, bug fixes)Legitimate interest
    Security and fraud preventionLegitimate interest
    Marketing communications (only with your consent)Consent
    Legal obligations (taxation, accounting)Legal obligation

    AI content processing

    Our service uses artificial intelligence (Google Gemini) to help you write your book. Here is what you need to know:

    • Your conversations and content are sent to the AI provider for processing
    • The AI provider does NOT use your content to train its models
    • Your content is processed temporarily and then deleted by the provider
    • You retain all rights to your content — we never claim ownership of it
    • AI suggestions are provided as-is — you are responsible for reviewing them

    Automated decisions and AI

    In accordance with the GDPR, we inform you that AI does not make any automated decisions about you. It does not create profiles and does not use your data beyond writing assistance. You retain full control: AI only offers suggestions that you are free to accept, modify, or reject. No automated decision produces legal effects or significantly affects you.

    Sharing your data

    We NEVER sell your personal data. We only share it with the service providers necessary for the operation of Raconteo:

    • Cloud hosting and database — Secure storage of your account and books (Supabase)
    • AI processing services — Writing assistance (Google Gemini), with a data processing agreement
    • Payment providers — Secure payment processing (we never see or store your full card number)
    • Printing partners — Printing and shipping of your books (PDF content, shipping address)
    • Email service — Sending order confirmations and updates (transactional emails only)
    • Error tracking and analytics — Bug and performance monitoring (anonymized data)

    We may also disclose your information if required by law or to protect our legal rights.

    International data transfers

    Raconteo is based in Spain (EU). Some of our service providers are located outside the EU, primarily in the United States. We protect your data through Standard Contractual Clauses (SCCs) approved by the European Commission, EU-US Data Privacy Framework certification, Data Processing Agreements (DPAs) with all our subprocessors, and encryption in transit and at rest. Your privacy rights apply regardless of where your data is processed.

    Data retention

    Data typeDuration
    Account and profileUntil you delete your account
    Book contentUntil deletion or closure of your account
    Order history7 years (tax and legal obligations)
    Payment dataNot stored — managed by the payment provider
    Error logs90 days, then automatically deleted
    Marketing consentUntil consent is withdrawn, then deleted within 30 days

    If you delete your account, we erase your personal data within 30 days, unless we are legally required to retain it (for example, order records for tax purposes).

    Data protection

    We implement multiple layers of protection: encryption of data in transit (HTTPS/TLS) and at rest (AES-256), secure authentication with hashed passwords, regular security audits, access restricted to authorized personnel, secure session management, and regular backups. As no system is infallible, we cannot guarantee absolute security, but we continuously improve our protective measures.

    Your rights

    Under the GDPR and other data protection regulations, you have the following rights:

    • Access — Request a copy of your personal data
    • Rectification — Correct inaccurate or incomplete information
    • Erasure — Request the deletion of your data (with certain legal exceptions)
    • Portability — Receive your data in a machine-readable format
    • Objection — Object to processing based on legitimate interest
    • Restriction — Restrict the use of your data
    • Withdraw consent — Withdraw your consent at any time
    • Complaint — File a complaint with your data protection authority

    To exercise these rights, contact us at bonjour@raconteo.com. We will respond within 30 days.

    Child protection

    Raconteo is not intended for children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us immediately at bonjour@raconteo.com.

    Cookies and tracking technologies

    Cookies are small text files stored on your device when you visit a website. They help remember your preferences, keep you signed in, and understand how the site is used.

    Strictly necessary cookies

    Essential for the website to function (Supabase authentication, session management). These cookies do not track you across other websites.

    Performance and analytics cookies

    Help us understand how you use the service (error tracking, performance). You can decline these.

    Managing your preferences

    You can control cookies through your browser settings. Blocking strictly necessary cookies will prevent you from using your account.

    Changes to this policy

    We may update this policy to reflect changes in our practices, new legal requirements, or improvements in clarity. In the event of significant changes, we will notify you by email and through a notice on the website. Your continued use of Raconteo after the changes constitutes acceptance of the updated policy.

    Contact us

    Questions about this policy or how we handle your data? Write to us at bonjour@raconteo.com. We respond to privacy inquiries within 30 days.