Privacy Policy

The website notrelivre.com is operated by LVL IA, a French simplified joint-stock company (SASU) with a share capital of €100, registered with the Caen Trade and Companies Register under number 991 803 594, whose registered office is at 15 rue de Lebisey, 14000 Caen, France. LVL IA is the controller of the personal information described in this policy.

For any question about your information, write to contact@notrelivre.com.

We collect only the information needed to provide the book you order and to communicate with you.

• Identity and contact information: name, email address, shipping address and phone number. Used to create your account, deliver your order, provide customer support and issue invoices.
• Your story: biographical details, memories, anecdotes and photos you share about yourself and the people close to you. Used only to write your personalised book. You choose what to share and confirm it when you submit your brief.
• Payment information: card details are never stored by LVL IA. They are processed directly by our payment provider Stripe, certified PCI-DSS Level 1.
• Browsing information: technical cookies required for the site to work, and audience statistics (Google Analytics, with IP anonymization) only if you accept them.
• Conversations started without an account: when you write to the Story Director from a public page before creating an account, we set a technical cookie nl_anon containing a random identifier and store the conversation on our servers, so you can pick it up later and attach it to your account if you create one. No identifying information is collected at that stage; your IP address is used only as a cryptographic fingerprint to prevent abuse.

We do not sell or share your personal information for cross-context behavioral advertising.

The interviews, the writing and the corrections of your book are produced with the help of AI models provided by OpenAI through its API. The content you share is sent to these models only to provide the service. Under OpenAI’s API terms, this content is not used to train its models by default.

• Customer data and brief: for the duration of our relationship and up to three years after your last order, for after-sales support.
• Billing records: ten years, as required by French accounting and tax law.
• Photos shared in your brief: permanently deleted within six months of delivery of your book, unless you ask otherwise.
• Analytics cookies: thirteen months maximum.
• Conversations without an account: the nl_anon cookie expires after thirty days, and a conversation never attached to an account is automatically deleted thirty days after it was created.

Your information is shared only with the providers strictly needed to run the service, all bound by contract:

• Supabase (database and authentication): data stored in the European Union.
• Netlify, Inc. (website hosting): United States.
• Stripe (payments): Ireland and United States.
• OpenAI (AI-assisted interviews and writing): United States.
• Resend and Brevo (transactional and service emails).
• Google Analytics (audience measurement, only with your consent): United States.
• Our printing partner, for printed books: your shipping name and address and the book files, for printing and delivery in the UK.

LVL IA is based in France and your information is processed mainly in the European Union, which the UK recognises as providing adequate protection, and, for some providers, in the United States. Transfers are covered by the European Commission’s standard contractual clauses, the UK International Data Transfer Addendum or another appropriate safeguard under the UK GDPR and the EU GDPR.

Under the UK GDPR and the Data Protection Act 2018, you can ask us to access, correct, delete or export your personal information, and object to or restrict its use. We do not discriminate against anyone who exercises these rights.

Email contact@notrelivre.com or write to LVL IA, 15 rue de Lebisey, 14000 Caen, France. We reply within one month. You may also delete your project from your private space at any time.

Cookies strictly necessary for the site (session, preferences such as your language, and nl_anon) are set without consent. nl_anon is only set when you send your first message to the Story Director, never on page load; it is HttpOnly, used for no advertising, and expires after thirty days.

Analytics cookies (Google Analytics) are set only after you accept them in the banner shown on your first visit. You can withdraw your consent at any time.

We use appropriate technical and organisational measures: encrypted connections (HTTPS/TLS), secure authentication, strict separation of roles, access logging and regular backups.

Notre Livre is intended for adults. We do not knowingly collect information from children under 13.

If you believe your rights have not been respected, contact us first. You may also file a complaint with the UK Information Commissioner’s Office (ICO, ico.org.uk) or with the French data protection authority (CNIL, www.cnil.fr). We may update this policy; the date of the last update appears at the top of this page.