Privacy Policy

This Privacy Policy explains how Tale Tandem ("TT", "we", "us", "our"), operated in Switzerland, collects, uses, stores, and shares personal data when you use TT.

1) Contact

Tale Tandem
Switzerland
Email: info@pangaroo.ch

2) What data we collect

Depending on how you use TT, we may collect the following categories of personal data:

a) Account and identity data

• email address,
• password hash and authentication records,
• email verification status,
• password reset records,
• account settings,
• selected AI tier,
• optional daily credit limit settings.

b) Story and content data

• prompts, messages, decisions, story turns, and transcripts,
• campaign data,
• library entries, descriptions, histories, and related notes,
• uploaded or generated images,
• AI-generated outputs,
• campaign summaries, memory fields, and related internal story-state data.

c) Billing and wallet data

• wallet balance and ledger entries,
• top-up amounts,
• purchase and payment status,
• Stripe customer and payment identifiers and related transaction metadata.

We do not store full payment card numbers.

d) Technical and usage data

• IP address and approximate request metadata,
• timestamps,
• browser or device-related technical information,
• route and API usage logs,
• authentication events,
• rate-limit and abuse-prevention events,
• error and diagnostic logs.

e) Cookie and local storage data

TT uses cookies and similar technologies necessary to operate login flows and core site behavior. TT may also store cookie preference choices and similar browser-side settings. At the time of this policy, TT's cookie preferences page exists at /cookies.

3) How we use personal data

• to create and manage accounts,
• to authenticate users,
• to provide AI storytelling and image features,
• to save and retrieve campaigns and story history,
• to operate prepaid credits and billing,
• to process payments through Stripe,
• to send verification emails, password reset emails, and service emails,
• to secure the service and prevent abuse,
• to troubleshoot bugs and maintain reliability,
• to enforce our Terms and policies,
• to comply with legal obligations,
• to improve product operations and user experience.

4) Legal bases

Where applicable under privacy law, we process personal data on the following bases:

• performance of a contract,
• legitimate interests,
• consent where required,
• legal obligation.

5) AI processing and third-party providers

TT uses third-party providers to operate the service. Current key providers include:

• OpenAI - AI text, embeddings, and image generation,
• Stripe - payment processing,
• Supabase - database and storage,
• Render - API hosting,
• Vercel - web hosting,
• Resend - transactional email delivery.

When you use AI features, content you submit may be sent to OpenAI for processing. This can include prompts, story context, campaign content, and related instructions needed to generate outputs.

OpenAI processes data according to its own terms and policies. OpenAI may use content according to those terms and policies, including for safety, abuse monitoring, policy enforcement, service improvement, and, where permitted under OpenAI's own terms or policies, model improvement or training-related purposes.

Because TT depends on OpenAI services, use of TT's AI features also requires compliance with OpenAI's applicable terms and usage policies:

• https://openai.com/policies/row-terms-of-use/
• https://openai.com/policies/usage-policies/

6) How we share personal data

We may share personal data:

• with service providers that help us operate TT,
• with payment providers to process transactions,
• with hosting, database, storage, and email providers,
• with AI providers to generate outputs,
• with legal authorities where required by law,
• in connection with fraud prevention, abuse prevention, security incidents, or legal claims,
• in connection with a business transfer, merger, acquisition, restructuring, or sale of assets.

We do not sell your personal data for cash in the ordinary meaning of "sell".

7) International data transfers

TT and its providers may process data in countries outside your own country, including outside Switzerland or the EEA. Where required, we take reasonable steps to use providers and safeguards intended to support lawful cross-border data handling.

8) Data retention

We keep personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the service, maintain account history, operate billing, resolve disputes, enforce agreements, and comply with legal obligations.

In practice, this may mean account and authentication data are retained while your account remains active and for a reasonable period afterward, story and campaign data may be retained while needed to provide service continuity and account access, payment and ledger records may be retained for accounting, tax, fraud prevention, and legal compliance, and logs and security records may be retained for operational and abuse-prevention purposes.

9) Security

We use reasonable technical and organizational measures intended to protect personal data. However, no service is completely secure, and we cannot guarantee absolute security. You are also responsible for protecting your password and account access.

10) Children

TT is not intended for children under 13. If we learn that we have collected personal data from a child under 13 without appropriate authorization where required, we may delete that data and disable the related account.

11) Your rights

Depending on where you live, you may have rights such as access, correction, deletion, restriction, objection, withdrawal of consent where processing is based on consent, and complaint to a relevant supervisory authority. These rights are not absolute and may be limited by law, technical feasibility, security requirements, and our need to retain certain records.

To exercise a privacy request, contact info@pangaroo.ch.

12) Cookies and similar technologies

TT uses cookies or similar technologies for core site functionality and user session handling. TT may also use local storage for items such as cookie preferences and interface state.

At the time of this policy, necessary functionality may rely on cookies or similar storage, non-essential cookie categories are described on the /cookies page, and TT states that analytics and marketing trackers are off by default unless enabled in the future and subject to consent where required.

13) Third-party links and services

TT may contain links to third-party websites or depend on third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy.

14) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may post the updated version on the site and revise the effective date. Your continued use of TT after changes take effect means you acknowledge the revised Privacy Policy.

15) Contact

Tale Tandem
Switzerland
Email: info@pangaroo.ch