Privacy Policy

We collect the following types of information when you use the Service:

• Personalization details:the child's first name and, if you choose to provide them, a wording style, dedication message, gift signature ("from" line), birthday, favorite things, and a photograph. You provide these to create the book; they appear in the printed product.
• Account information: your email address if you sign in or provide it for order updates. We use passwordless email links, so we never collect or store a password.
• Order and shipping information: your name, shipping address, phone number (used by carriers and our print partner for delivery), and order history.
• Payment information: payments on mallowby.com are collected and processed directly by Stripe. We do not store your full card number, CVV, or other sensitive payment details. We may receive limited information from Stripe, such as the last four digits of your card and your billing email.
• Marketplace order information: if you buy through Amazon or Etsy, we receive the order and personalization details and the shipping information those platforms provide to sellers for fulfillment.
• Usage data: basic technical information such as IP address, browser type, pages visited, and actions taken, collected through server logs and used for security and to operate the Service.

We use the information we collect to:

1. Create your personalized book, show you its preview, and print it;
2. Process payments and fulfill, ship, and track your orders;
3. Send transactional emails (order confirmations, shipping notifications, sign-in links);
4. Respond to your inquiries and provide customer support;
5. Send a small number of helpful follow-up emails about a book you started or received; every such email includes a one-click unsubscribe link, and opting out never affects order updates;
6. Screen personalization text so that inappropriate content is not printed in a children's book;
7. Detect, prevent, and address technical issues, fraud, abuse of paid features, and security concerns; and
8. Comply with legal obligations, such as tax and accounting requirements.

We do not sell your personal information, and we do not use it for third-party advertising.

The Service is designed for and directed to adults. We do not knowingly collect information directly from children, and children are not permitted to use the Service.

The information about a child that appears in a book (first name and, optionally, a birthday, photograph, and favorite things) is provided to us by you, the purchasing adult. By providing it, you confirm you are the child's parent or legal guardian or have their permission. We use this information only to create, preview, print, and support your book order, as described in this Policy. We do not use children's information for marketing, we do not sell it, and we do not build profiles of children.

A parent or legal guardian may ask us to delete a child's information at any time by emailing hello@mallowby.com (see Section 8).

We share information only with the service providers needed to run the Service and produce your book:

• Printing and shipping (currently Lulu Press and its carrier partners): receives the finished book file (which contains the personalization, including any photograph) and your shipping name, address, and phone number.
• Payment processing (Stripe): processes your payment on mallowby.com.
• Hosting, storage, and database (Vercel and Neon): host the Service and store account, order, and personalization data, including uploaded photographs and generated book files.
• Email delivery (Resend): sends transactional emails to you.
• AI processing(currently DeepSeek for text and Replicate for artwork): if you use the optional "favorite things" feature, the child's first name and the favorite things you enter are processed by these providers to write and illustrate those pages. Photographs you upload are not sent to AI providers.
• Marketplaces (Amazon, Etsy): if you purchased there, order status and tracking are reported back through the marketplace.

We may also disclose information if required by law, to enforce our Terms of Service, to protect the rights, safety, or property of Mallowby or others, or in connection with a merger, acquisition, or sale of assets (in which case this Policy will continue to apply to previously collected information).

Book previews live at unlisted web addresses so you can share them with family and friends. The links are not published or listed anywhere by us, but anyone you share a link with can view that preview, including the personalization it contains. Share preview links only with people you trust to see them.

We use only essential cookies: a session cookie to keep you signed in and security cookies that protect forms. We do not use advertising cookies or third-party tracking pixels on mallowby.com.

To understand how the Service is used, we run two privacy-respecting analytics tools, both configured without cookies: Matomo (on a Matomo Cloud instance we control), which records pages visited and product actions such as starting a book or reaching checkout, and Vercel Analytics, which reports aggregate page performance and visits. Neither is used to build advertising profiles, and analytics data is not joined with the personalization details in your books.

Book drafts and previews are kept so you can return to them, share them, and reorder. Order records are kept as required for tax, accounting, and legal purposes. Uploaded photographs and generated book files are kept so we can provide reprints and support; you may request their deletion at any time (Section 8). Server logs are retained for a limited period for security purposes.

Subject to applicable law (including, where applicable, the GDPR and the California Consumer Privacy Act), you may:

1. Request access to the personal information we hold about you;
2. Request correction of inaccurate information;
3. Request deletion of your information, including a child's information and uploaded photographs (we may need to retain limited order records where the law requires);
4. Object to or ask us to restrict certain processing; and
5. Request a copy of your information in a portable format.

To exercise any of these rights, email hello@mallowby.com from the address associated with your order or account. We will respond within the timeframe required by applicable law. We do not discriminate against you for exercising your rights.

We use commercially reasonable administrative, technical, and organizational safeguards to protect your information, including encryption in transit, passwordless authentication, and access controls. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is operated from the United States, and information is processed and stored in the United States. If you use the Service from another jurisdiction, you consent to the transfer and processing of your information in the United States.

We may update this Privacy Policy from time to time. Updated versions become effective upon posting, and the effective date above will change. Material changes will be highlighted on the Service or communicated by email where appropriate.

Mallowby
Email: hello@mallowby.com