What we collect
Account and project information. Account identifiers, the names you enter, occasion, tone, source choice, consent records, project status, and—only when you choose the optional Story Map—the three place labels you enter.
Content you choose. For Page One, this can include one screenshot or a text-only Mac .oft export, the exact exchange you confirm, and one optional photo. A Page One .oft file is rejected before upload if it contains photos. For a relationship book, this can include selected screenshots, chat exports, message text, and up to 12 photos you explicitly approve. We do not scan a Photos library automatically or select photos for you.
Parent-created Santa books. A grown-up may enter chosen child names, an optional pet name, a Christmas year, and edited letters or personal notes. These details are not sent for AI personalization: the story uses curated text and pre-created illustrations. The book desk stores a draft in this browser tab; when you explicitly prepare the final review while signed in, we save the edition, page layout and private PDF to your account. Children do not create accounts or chat with an AI through this product.
Memories and optional illustrations. Your Memories book draft and prepared photographs are stored in this browser, with downloadable backups. Opening the illustration desk does not send your writing. If you choose “Create from this memory,” you approve sending only that memory’s title, story, reflection and approximate date through Vercel AI Gateway to OpenAI’s image service. Alternatively, you can approve a separately written scene and omissions without sending the memory or chat archive. We store the approved generation input privately, with a consent record, generated image versions and bounded cost/status records. Generating an image never rewrites the original words or automatically uploads other memories or photographs.
Order and delivery information. Stripe supplies order identifiers, amount, payment status, and the checkout email. We do not store full card numbers. For a hardcover, Stripe also collects the shipping name, address, and phone number.
Basic technical information. Our hosting, security, and performance providers may process IP address, browser/device details, visited pages, referrer, request timing, and error data needed to operate and protect the service.
How we use information
We use information to authenticate you, create the preview and finished Page One or book, render only the photos you approve, render a purchased Story Map, take payment, provide private downloads or web-book delivery, send the delivery message, fulfill an optional hardcover when available, prevent fraud or duplicate fulfillment, provide support, and maintain security.
Your selected content is processed by service providers acting for us: Vercel for hosting, private storage, workflows, and AI routing; Neon for account and database services; Stripe for payment; Resend for transactional email when enabled; and Lulu for hardcover printing when enabled. Each provider may retain operational records under its own terms.
We do not sell personal information. We do not currently share personal information for cross-context behavioral advertising. If that changes, this notice and the collection surface must change before the advertising technology is enabled.
Deletion is part of the product
Temporary sources. A Page One screenshot or Mac .oft export is removed once you confirm the exact exchange. Its confirmed exchange, optional photo, and temporary preview source are deleted after successful paid-artifact publication. Relationship-book message and photo sources are deleted after successful paid full-book generation. If no purchase finishes, temporary sources are deleted by their 24-hour upload deadline. A payment or generation already in progress may hold a source only until that protected handoff finishes. Transient deletion failures are retried and recorded rather than silently treated as complete.
Finished keepsakes. A purchased Page One PNG and PDF, or the private web book, PDF, approved photo copies, and purchased Story Map inside a book, remain available to the owner until deletion is requested. Story Map place labels are removed from the working project after generation, or when the last temporary source is deleted or expires; purchased labels then remain only in the private finished book. A book share token is stored only as a one-way hash, expires after 30 days, and can be revoked sooner.
Santa editions. Tab drafts can restore for up to 24 hours after the last saved edit; this is not a permanent backup. Privately prepared Santa editions, whether purchased or not, remain in Your Santa books until you remove them or request deletion. Removal deletes their words, saved page layout and private PDF. Content-free payment references, integrity hashes and accounting records may remain. Download a purchased copy before removing it if you want to keep it.
Illustration drafts. Approved scenes or single-memory generation inputs are removed from our working storage after seven days; online draft artwork expires after thirty days. You can delete a book’s online illustration drafts from the illustration desk. Kept images in device drafts, downloaded backups and completed books are separate copies; deleting online drafts does not erase those copies. You can delete the Memories device draft separately. Image-service providers may retain operational records under their own terms.
Email and shipping. Our app retrieves the checkout email from Stripe when delivery is sent and stores only a one-way recipient hash plus delivery status. For hardcover support, local shipping contact data is deleted 30 days after reported delivery and has a 90-day fallback deletion deadline. Stripe, Resend, and Lulu apply their own retention policies to records they control.
Operational records. Consent, order, cost, security, and deletion-ledger records may be kept as reasonably necessary for accounting, fraud prevention, legal obligations, dispute resolution, and proof that a requested deletion occurred.
Your choices and requests
You choose every source file and approved photo. Before opening checkout, an owner can delete active source files immediately. While checkout or payment confirmation is in progress, deletion becomes available after that protected handoff closes or is reconciled. Owners can download a purchased Page One or book and, for books, create or revoke a private share link and let it expire automatically.
You may request access, correction, or deletion of account and finished-keepsake information. Depending on where you live, you may also have rights to know, restrict, object, appeal, or receive a portable copy. We verify requests to protect the private story from unauthorized access and will not discriminate for exercising a privacy right.
Send privacy requests to privacy@ourfirsttext.com. Do not send message exports, photos, passwords, or payment details by email.
Security, age, and changes
We use private storage, authenticated owner routes, signed payment and provider callbacks, expiring tokens, and limited retention. No internet service can promise absolute security; report suspicious access promptly without forwarding private content.
The service is intended for adults and is not directed to children under 18. Do not include a child’s information unless you are authorized to do so and it is necessary for the book.
We will update the effective date when this notice changes materially. This notice describes current product behavior; it is not a substitute for legal advice about your individual rights.