1. General Information and Mandatory Disclosures
The responsible party for data processing on this website (the "Controller") is MyTales. Contact details for the legal representative of MyTales can be found in our Imprint. We take the protection of your personal data very seriously and process your data in accordance with the General Data Protection Regulation (GDPR).
2. Legal Basis for Processing
We process your data based on the following legal foundations:
- Art. 6 (1) (b) GDPR: Performance of a contract (ordering and creating your custom audiobook).
- Art. 6 (1) (a) GDPR: Your explicit consent (e.g., for analytics and advertising via our cookie banner).
- Art. 6 (1) (f) GDPR: Legitimate interest (website security and technical stability).
3. Custom Audiobook Creation (The "Chain of Data")
To create your personalized audiobook, we process the inputs you provide (Name, Theme, and Additional Information).
- Processing Steps: Your inputs are sent to OpenAI to generate the story text and then to ElevenLabs to generate the audio file.
- Full Disclosure: By using our service, you agree that any personal information you include in your prompts will be processed by these third-party AI providers.
- Moderation: We reserve the right to use automated moderation to ensure prompts do not violate legal or ethical standards.
4. External Service Providers & Data Transfer
We have signed Data Processing Addendums (DPA) with all following providers to ensure GDPR compliance:
- Vercel Inc. (Hosting): Infrastructure and database management.
- Stripe Payments Europe, Ltd. (Payments): All transactions are handled by Stripe; we do not store credit card data.
- OpenAI LLC & ElevenLabs Inc. (AI processing): Used for story and voice generation.
- PostHog Inc. (Product Analytics): To analyze user interactions and improve our platform.
- Google Ireland Ltd. (Marketing & Analytics): Tracking page views and ad conversions (only with consent).
5. International Data Transfers (USA)
Our primary infrastructure and AI providers are based in the United States. Your data will be transferred to and stored on servers in the USA. We rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.
6. Retention and Deletion
- Account-Based Storage: Your personal data and generated audio files are stored for as long as your account remains active.
- Deletion: You may request the deletion of specific audiobooks or your entire account at any time. Upon a valid request or account closure, we will delete your data, subject to mandatory legal retention periods (e.g., 6–10 years for financial records required by German tax law).
7. Your Rights
You have the right to access, correct, or delete your data, as well as the right to data portability and to withdraw consent. To exercise these rights, please contact us via the email provided in the Imprint.