Privacy
Last updated: 10 October 2026.
Data we receive
We use the name, age, preferences, email and photo provided with guardian permission to generate, deliver and support the book.
How we use the photo
Original photos of the child and other participants are stored privately and accessible to authorized staff for support and revisions. They are kept during production and for seven days after delivery. Deletion is suspended while a revision is open and for seven days after it is completed. Unpaid requests are cleaned up seven days after upload. The illustrated character sheet and illustrations remain in the book.
Sharing and security
We temporarily send the photo to KIE AI, our image-generation provider, to create the character. We do not sell the photo or use it in advertising. The provider’s processing is subject to its own policies. We also use Meta Pixel and Conversions API to measure visits, funnel steps and purchases and improve ads. We send browser and click identifiers, IP and device information, and available purchaser information (normalized, hashed email and billing details). Children’s names, ages, gender, photos and story content are not sent to Meta. Card information, access tokens and checkout secrets are excluded. We also use Google Analytics 4 to measure navigation, funnel steps, campaign attribution and approved purchases. GA4 receives pseudonymous browser and session identifiers, campaign parameters, product, value, currency and transaction identifier. We do not send names, emails, phone numbers, tax identifiers, child photos or child content to GA4. Automatic form collection and Google ad personalization are disabled. We honor the Global Privacy Control signal for this measurement. We use Microsoft Clarity to understand clicks, scrolling and difficulties in the adult purchaser’s journey. Screen content, fields and images are masked; we do not send names, contact details, photos, stories, card details or Pix codes as events. Measurement uses no Clarity cookies, honors Global Privacy Control and is not installed in the admin panel.
Your rights
You may request access to, correction of, or deletion of your data. You may also withdraw consent when processing depends on it.
Navigation and attribution data
When you request a preview, we record your IP address, approximate IP location (when available), browser, device, language, landing page, referring website, UTM parameters and click identifiers. We use these data for support, service diagnostics, abuse prevention and measuring where orders come from. Location is an estimate, does not use GPS and can be inaccurate, especially with a VPN. Location lookup uses a local database without sending your IP to an external geolocation service. These data are associated with the order and accessible to authorised staff.
Reviews and optional photos
After delivery, we may email you once to ask for a review. Our team can read your rating and comment. Your display name, text, rating and optional photo may appear on the website only with your express permission and after moderation. The review photo is separate from the original photo used to create the character. You can edit your review, remove the photo or withdraw permission in the book form; changes remove the review from publication and require another review by our team. A cached copy may remain visible for up to five minutes.
Payments and saved cards
Stripe processes payments. With your authorization at checkout, it saves your card for optional offers for this book. We store your Stripe customer identifier, the date and version of your consent, and retrieve the card brand and last four digits to identify it. We do not store the full card number or security code. To generate a new Pix, we reuse billing details already provided to Stripe, including name, email and CPF/CNPJ. The CPF/CNPJ is not sent to Meta or Telegram.
To exercise your rights, email contact@heroicabooks.com.