Privacy Policy

The website notrelivre.com is operated by LVL IA, a French simplified joint-stock company (SASU) with a share capital of €100, registered with the Caen Trade and Companies Register under number 991 803 594, whose registered office is at 15 rue de Lebisey, 14000 Caen, France. LVL IA is the controller of the personal information described in this policy.

For any question about your information, write to contact@notrelivre.com.

We collect only the information needed to provide the book you order and to communicate with you.

• Identity and contact information: name, email address, shipping address and phone number. Used to create your account, deliver your order, provide customer support and issue invoices.
• Your story: biographical details, memories, anecdotes and photos you share about yourself and the people close to you. Used only to write your personalised book. You choose what to share and confirm it when you submit your brief.
• Payment information: card details are never stored by LVL IA. They are processed directly by our payment provider Stripe, certified PCI-DSS Level 1.
• Browsing information: technical cookies required for the site to work, and audience statistics (Google Analytics, with IP anonymization) only if you accept them.
• Conversations started without an account: when you write to the Story Director from a public page before creating an account, we set a technical cookie nl_anon containing a random identifier and store the conversation on our servers, so you can pick it up later and attach it to your account if you create one. No identifying information is collected at that stage; your IP address is used only as a cryptographic fingerprint to prevent abuse.

We do not sell or share your personal information for cross-context behavioural advertising.

For the Reconciliation collection, before the interview we ask whether the recipient has asked not to be contacted or has blocked you, whether there is an apprehended violence order, intervention order, other court order or police report, whether there has been violence, and how you plan to deliver the book. Purpose: to refuse to write a book that would be used to contact someone against their will, and to cancel that project accordingly. For a cancelled project we keep only the decision, never the answers. Lawful basis: our legitimate interest in preventing misuse of the service and complying with the law.

These answers are never quoted in our emails, never shared with anyone, including the recipient, and are kept while the project exists, then deleted with it.

The interviews, the writing and the corrections of your book are produced with the help of AI models provided by OpenAI through its API. The content you share is sent to these models only to provide the service. Under OpenAI’s API terms, this content is not used to train its models by default.

• Customer data and brief: for the duration of our relationship and up to three years after your last order, for after-sales support.
• Billing records: ten years, as required by French accounting and tax law.
• Photos shared in your brief: permanently deleted within six months of delivery of your book, unless you ask otherwise.
• Analytics cookies: thirteen months maximum.
• Conversations without an account: the nl_anon cookie expires after thirty days, and a conversation never attached to an account is automatically deleted thirty days after it was created.

Your information is shared only with the providers strictly needed to run the service, all bound by contract:

• Supabase (database and authentication): data stored in the European Union.
• Netlify, Inc. (website hosting): United States.
• Stripe (payments): Ireland and United States.
• OpenAI (AI-assisted interviews and writing): United States.
• Resend and Brevo (transactional and service emails).
• Google Analytics (audience measurement, only with your consent): United States.
• Our printing partner, for printed books: your shipping name and address and the book files, for printing and delivery to Australia. The book may be printed outside Australia.

LVL IA is based in France and your information is processed mainly in the European Union and, for some providers, in the United States. The service providers listed above, and the print facility that produces a printed book, may therefore receive your information outside Australia. Transfers out of the European Union are covered by the European Commission’s standard contractual clauses or another appropriate safeguard under the EU GDPR, and every provider is bound by contract to protect your information.

We apply the EU GDPR to all our customers and, where it applies to us, the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can ask us to access, correct, delete or export your personal information, and object to or restrict its use. We do not discriminate against anyone who exercises these rights.

Email contact@notrelivre.com or write to LVL IA, 15 rue de Lebisey, 14000 Caen, France. We reply within one month. You may also delete your project from your private space at any time.

Cookies strictly necessary for the site (session, preferences such as your language, and nl_anon) are set without consent. nl_anon is only set when you send your first message to the Story Director, never on page load; it is HttpOnly, used for no advertising, and expires after thirty days.

Analytics cookies (Google Analytics) are set only after you accept them in the banner shown on your first visit. You can withdraw your consent at any time.

We also run an internal, cookie-free audience count of public pages: the page viewed, where the visit came from (for example a search engine or an email), the country and the type of device. It sets no cookie, uses no identifier, does not keep your IP address or browser details, and cannot recognise you from one page to the next. These statistics are used only by LVL IA to measure traffic on notrelivre.com, are never shared or combined with other data, and are deleted after thirteen months.

We use appropriate technical and organisational measures: encrypted connections (HTTPS/TLS), secure authentication, strict separation of roles, access logging and regular backups.

Notre Livre is intended for adults. We do not knowingly collect information from children under 13.

If you believe your rights have not been respected, contact us first. You may also file a complaint with the Office of the Australian Information Commissioner (OAIC, oaic.gov.au) or with the French data protection authority (CNIL, www.cnil.fr). We may update this policy; the date of the last update appears at the top of this page.