Privacy Policy

1. General Information

Data Controller: BabyEcho
Contact: info@babyecho.ai
Last Updated: June 2025

2. What Data We Collect

  • Uploaded Images: Photos you upload for book/video personalization (e.g. child, parent, pet photos)
  • Order Metadata: Child name, age, selected theme (optional), and identifiers required to fulfill your purchase
  • Technical Data: IP address, browser type, device information
  • Payment Data: Processed by Stripe (we do not store credit card data)
  • Cookies & Local Storage: For website functionality, disclaimer acceptance, and storing your cookie preferences. If you opt in, we also use analytics cookies (Google Analytics) to measure website usage.

3. Purpose of Data Processing

  • Generating personalized stories and (where applicable) AI illustrations via OpenAI to fulfill your book/video order
  • Payment processing via Stripe
  • Website functionality and security
  • Maintaining disclaimer acceptance
  • Analytics (optional): If you consent, we use Google Analytics to understand how our website is used and to improve it
  • Marketing (optional): If you consent, we may enable marketing tags (e.g. Google Ads) for advertising measurement

4. Legal Basis (GDPR Article 6)

  • Contract (Art. 6(1)(b)): To deliver your purchased book/video
  • Consent (Art. 6(1)(a)): For analytics/marketing cookies (only if you opt in)
  • Legitimate interests (Art. 6(1)(f)): Security, fraud prevention, and service reliability

5. Data Sharing with Third Parties

  • OpenAI: Uploaded images and text prompts are processed to generate stories and (where applicable) illustrations
  • Stripe: Payment data for transaction processing
  • Google Analytics (optional): If you consent to analytics cookies, usage data may be processed by Google for analytics purposes
  • Google Ads / marketing (optional): If you consent to marketing cookies, advertising measurement may be processed by Google
  • We do not sell or share your data with other parties

6. Data Retention

  • Uploaded Images & Generated Files: Stored temporarily to fulfill your order, then deleted automatically (typically within 24 hours)
  • Technical Logs: 30 days
  • Payment Data: Conform Stripe policy and tax requirements

7. Your Rights under GDPR

  • Right of Access: Request what data we have about you
  • Right to Rectification: Correction of inaccurate data
  • Right to Erasure: Deletion of your data
  • Right to Restriction: Limiting processing
  • Right to Data Portability: Your data in machine readable format
  • Right to Object: Object to processing
  • Right to Withdraw Consent: You can withdraw consent at any time

8. Security

We use modern security measures to protect your data, including HTTPS encryption and secure data transfer to our partners.

9. International Transfer

Data may be transferred to OpenAI (US) and Stripe for servicing. These partners have adequate security measures.

10. Complaints

You can lodge a complaint with the Dutch Data Protection Authority if you are unhappy with our data processing.

11. Contact

For questions about privacy: info@babyecho.ai

Back to Home