Privacy Policy

The website notrelivre.com is operated by LVL IA, a French simplified joint-stock company (SASU) with a share capital of €100, registered with the Caen Trade and Companies Register under number 991 803 594, whose registered office is at 15 rue de Lebisey, 14000 Caen, France. LVL IA is the controller of the personal information described in this policy.

For any question about your information, write to contact@notrelivre.com.

We collect only the information needed to provide the book you order and to communicate with you.

• Identity and contact information: name, email address, shipping address and phone number. Used to create your account, deliver your order, provide customer support and issue invoices.
• Your story: biographical details, memories, anecdotes and photos you share about yourself and the people close to you. Used only to write your personalized book. You choose what to share and confirm it when you submit your brief.
• Payment information: card details are never stored by LVL IA. They are processed directly by our payment provider Stripe, certified PCI-DSS Level 1.
• Browsing information: technical cookies required for the site to work, and audience statistics (Google Analytics, with IP anonymization) only if you accept them.
• Conversations started without an account: when you write to the Story Director from a public page before creating an account, we set a technical cookie nl_anon containing a random identifier and store the conversation on our servers, so you can pick it up later and attach it to your account if you create one. No identifying information is collected at that stage; your IP address is used only as a cryptographic fingerprint to prevent abuse.

We do not sell or share your personal information for cross-context behavioral advertising.

For the Reconciliation collection, before the interview we ask whether the recipient has asked not to be contacted or has blocked you, whether there is a peace bond, protection order, other court order or police report, whether there has been violence, and how you plan to deliver the book. We use these answers only to refuse to write a book that would be used to contact someone against their will, and to cancel that project accordingly. For a cancelled project we keep only the decision, never the answers.

They are never quoted in our emails, never shared with anyone, including the recipient, and are kept while the project exists, then deleted with it.

The interviews, the writing and the corrections of your book are produced with the help of AI models provided by OpenAI through its API. The content you share is sent to these models only to provide the service. Under OpenAI’s API terms, this content is not used to train its models by default.

• Customer data and brief: for the duration of our relationship and up to three years after your last order, for after-sales support.
• Billing records: ten years, as required by French accounting and tax law.
• Photos shared in your brief: permanently deleted within six months of delivery of your book, unless you ask otherwise.
• Analytics cookies: thirteen months maximum.
• Conversations without an account: the nl_anon cookie expires after thirty days, and a conversation never attached to an account is automatically deleted thirty days after it was created.

Your information is shared only with the providers strictly needed to run the service, all bound by contract:

• Supabase (database and authentication): data stored in the European Union.
• Netlify, Inc. (website hosting): United States.
• Stripe (payments): Ireland and United States.
• OpenAI (AI-assisted interviews and writing): United States.
• Resend and Brevo (transactional and service emails).
• Google Analytics (audience measurement, only with your consent): United States.
• Our printing partner, for printed books: your shipping name and address and the book files, for printing and shipping to Canada. The book may be printed outside Canada.

LVL IA is based in France and your information is processed outside Canada (and outside Québec): mainly in the European Union and, for some providers, in the United States. Before each transfer we check that the information will be adequately protected, and every provider is bound by contract to protect it. Where the GDPR applies, transfers are covered by the European Commission’s standard contractual clauses or another appropriate safeguard.

We handle your information in line with the EU GDPR, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Québec, the Act respecting the protection of personal information in the private sector. You can ask us to access, correct, delete or export your personal information, withdraw your consent, and object to or restrict its use. We do not discriminate against anyone who exercises these rights.

The person in charge of the protection of personal information is the President of LVL IA, reachable at contact@notrelivre.com.

Email contact@notrelivre.com or write to LVL IA, 15 rue de Lebisey, 14000 Caen, France. We reply within one month. You may also delete your project from your private space at any time.

Cookies strictly necessary for the site (session, preferences such as your language, and nl_anon) are set without consent. nl_anon is only set when you send your first message to the Story Director, never on page load; it is HttpOnly, used for no advertising, and expires after thirty days.

Analytics cookies (Google Analytics) are set only after you accept them in the banner shown on your first visit. You can withdraw your consent at any time.

We also run an internal, cookie-free audience count of public pages: the page viewed, where the visit came from (for example a search engine or an email), the country and the type of device. It sets no cookie, uses no identifier, does not keep your IP address or browser details, and cannot recognize you from one page to the next. These statistics are used only by LVL IA to measure traffic on notrelivre.com, are never shared or combined with other data, and are deleted after thirteen months.

We use appropriate technical and organizational measures: encrypted connections (HTTPS/TLS), secure authentication, strict separation of roles, access logging and regular backups.

Notre Livre is intended for adults. We do not knowingly collect information from children under 13.

If you believe your rights have not been respected, contact us first. You may also file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca), with the Commission d’accès à l’information du Québec (cai.gouv.qc.ca) if you live in Québec, or with the French data protection authority (CNIL, www.cnil.fr). We may update this policy; the date of the last update appears at the top of this page.