Privacy Policy
Last updated: February 10, 2026
Who we are
Raconteo is a platform operated from Spain that helps you create personalized memoir books with AI-guided writing assistance. This Privacy Policy describes how we collect, use, and protect your personal data when you use our service.
Data we collect
We collect the information you provide to us directly, as well as data related to your use of the service.
Account data
- Name and email address
- Password (encrypted)
- Profile preferences
Order and shipping data
- Shipping address
- Payment information (processed securely by our service providers)
- Order history
Your book content
- Texts and narratives you write
- Photos and images you upload
- Conversations with our AI writing assistant
- Customization choices (cover, layout)
Usage data
- Device and browser information
- IP address and general location
- Pages visited and features used
- Error logs
How we use your data
| Purpose | Legal basis |
|---|---|
| Provide the service (account, storage, AI assistance) | Contract |
| Process orders (printing, shipping, payments) | Contract |
| Customer support | Contract |
| Improve the service (usage analysis, bug fixes) | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Marketing communications (only with your consent) | Consent |
| Legal obligations (taxation, accounting) | Legal obligation |
AI content processing
Our service uses artificial intelligence (Google Gemini) to help you write your book. Here is what you need to know:
- Your conversations and content are sent to the AI provider for processing
- The AI provider does NOT use your content to train its models
- Your content is processed temporarily and then deleted by the provider
- You retain all rights to your content — we never claim ownership of it
- AI suggestions are provided as-is — you are responsible for reviewing them
Automated decisions and AI
In accordance with the GDPR, we inform you that AI does not make any automated decisions about you. It does not create profiles and does not use your data beyond writing assistance. You retain full control: AI only offers suggestions that you are free to accept, modify, or reject. No automated decision produces legal effects or significantly affects you.
Sharing your data
We NEVER sell your personal data. We only share it with the service providers necessary for the operation of Raconteo:
- Cloud hosting and database — Secure storage of your account and books (Supabase)
- AI processing services — Writing assistance (Google Gemini), with a data processing agreement
- Payment providers — Secure payment processing (we never see or store your full card number)
- Printing partners — Printing and shipping of your books (PDF content, shipping address)
- Email service — Sending order confirmations and updates (transactional emails only)
- Error tracking and analytics — Bug and performance monitoring (anonymized data)
We may also disclose your information if required by law or to protect our legal rights.
International data transfers
Raconteo is based in Spain (EU). Some of our service providers are located outside the EU, primarily in the United States. We protect your data through Standard Contractual Clauses (SCCs) approved by the European Commission, EU-US Data Privacy Framework certification, Data Processing Agreements (DPAs) with all our subprocessors, and encryption in transit and at rest. Your privacy rights apply regardless of where your data is processed.
Data retention
| Data type | Duration |
|---|---|
| Account and profile | Until you delete your account |
| Book content | Until deletion or closure of your account |
| Order history | 7 years (tax and legal obligations) |
| Payment data | Not stored — managed by the payment provider |
| Error logs | 90 days, then automatically deleted |
| Marketing consent | Until consent is withdrawn, then deleted within 30 days |
If you delete your account, we erase your personal data within 30 days, unless we are legally required to retain it (for example, order records for tax purposes).
Data protection
We implement multiple layers of protection: encryption of data in transit (HTTPS/TLS) and at rest (AES-256), secure authentication with hashed passwords, regular security audits, access restricted to authorized personnel, secure session management, and regular backups. As no system is infallible, we cannot guarantee absolute security, but we continuously improve our protective measures.
Your rights
Under the GDPR and other data protection regulations, you have the following rights:
- Access — Request a copy of your personal data
- Rectification — Correct inaccurate or incomplete information
- Erasure — Request the deletion of your data (with certain legal exceptions)
- Portability — Receive your data in a machine-readable format
- Objection — Object to processing based on legitimate interest
- Restriction — Restrict the use of your data
- Withdraw consent — Withdraw your consent at any time
- Complaint — File a complaint with your data protection authority
To exercise these rights, contact us at bonjour@raconteo.com. We will respond within 30 days.
Child protection
Raconteo is not intended for children under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal information, please contact us immediately at bonjour@raconteo.com.
Cookies and tracking technologies
Cookies are small text files stored on your device when you visit a website. They help remember your preferences, keep you signed in, and understand how the site is used.
Strictly necessary cookies
Essential for the website to function (Supabase authentication, session management). These cookies do not track you across other websites.
Performance and analytics cookies
Help us understand how you use the service (error tracking, performance). You can decline these.
Managing your preferences
You can control cookies through your browser settings. Blocking strictly necessary cookies will prevent you from using your account.
Changes to this policy
We may update this policy to reflect changes in our practices, new legal requirements, or improvements in clarity. In the event of significant changes, we will notify you by email and through a notice on the website. Your continued use of Raconteo after the changes constitutes acceptance of the updated policy.
Contact us
Questions about this policy or how we handle your data? Write to us at bonjour@raconteo.com. We respond to privacy inquiries within 30 days.