Effective October 18, 2026.
Our adult-operated service
Fablepop provides personalized books to parents and adult gift givers. Personalization, uploads and purchases are for people 18 or older. We do not knowingly invite children or teens to submit information directly. If you believe a minor used the service, contact support@fablepopbooks.com so we can investigate, stop processing and arrange deletion where appropriate.
Information and purposes
We process a story name, selected character features or an optional photo, chosen illustration style, generated character art and book pages, adult permission confirmations and their policy version. We use these to create previews and orders and provide support. Shopify processes checkout, contact, delivery and payment information. We do not receive your full payment-card number.
For security and reliability, infrastructure providers process connection information such as IP addresses and request logs. Our preview limits use a keyed hash of a network address and session identifiers. We record generation costs and technical job status to prevent abuse and control spending. Optional journey analytics run only when Shopify's privacy settings indicate analytics permission; those events exclude the uploaded photo, story name, shipping address and email.
Photos and AI
Your browser resizes and re-encodes the selected photo before sending it for validation and illustration. Fablepop does not intentionally persist the original upload or compressed input photo in its database, storage or durable job queue. The compressed image is processed in request and worker memory and sent through OpenRouter to the selected AI providers. These providers may retain inputs and outputs under their own policies; our local deletion does not guarantee their immediate deletion. You can choose character features instead of uploading a photo.
Current services include OpenRouter and the model providers selected for the job (which may include OpenAI, Meta, Google or ByteDance), Supabase for database and private files, Railway for processing, Shopify for commerce, Prodigi for printing and shipping, Resend for transactional notifications, and Cloudflare Turnstile for bot detection. They receive the information needed for their role. Processing may occur in the United States or other countries. Provider policies include OpenRouter, Shopify and Cloudflare.
Sharing and marketing
We do not sell your uploaded photos or use personalized child images in public galleries or marketing without separate permission. The processing permission required to make a book is not marketing permission. We may disclose information when required by law, to protect rights and security, or to carry out your order with service providers. We cannot promise that a provider never retains or uses data beyond our own systems unless its applicable terms establish that restriction.
Retention and deletion
Unpurchased preview artwork and personalization are scheduled for removal after seven days. An active checkout or order can require longer retention. Use “Delete my previews” in the store footer to request removal of eligible previews associated with the current browser session; access is blocked promptly and scheduled cleanup removes the files. Previously issued signed links can remain valid until they expire. If your session is unavailable, or your request concerns an ordered book, email support; we verify ownership before acting.
Purchased book files are retained for fulfillment, troubleshooting and reasonable reprint support. You can request deletion after fulfillment; legal, fraud-prevention, tax, dispute, and required transaction records may be retained separately. We do not promise erasure of a physical book, a completed print job, another recipient's copy, or provider backups that remain subject to their own retention cycles.
Security admission records are retained up to 30 days; minimal non-content records may remain to enforce preview limits, reconcile costs, preserve consent evidence for orders and prevent abuse. We periodically review retention and delete information no longer needed.
Your choices and requests
Contact support to request access, correction, deletion or to withdraw future processing permission. Include an order number or session context, but do not send identity documents or another child's photo by email unless we arrange a necessary secure verification method. Depending on your location, additional privacy rights may apply. Essential session and security functions are required to operate previews; optional analytics choices are managed through the store's privacy controls.
Security
Generated personal files use private storage and time-limited links, with access checks and server-side generation controls. No system can guarantee absolute security. Report suspected exposure promptly to support.