Storique

The ToS explicitly states that uploaded images and trained models are 'not used for any other purpose beyond generating illustrations for the user's books' and 'Your data is never shared with third parties, fed into publicly available AI systems, or added to external databases.' The Privacy Policy confirms AI Service Providers (Anthropic, OpenAI, xAI) process data 'to enable your use of our AI Products' but within the service delivery scope outlined in legal bases. No training on user data for model improvement is stated.

“[ToS] 'User-uploaded images and trained models are not used for any other purpose beyond generating illustrations for the user's books. Your data is never shared with third parties, fed into publicly available AI systems, or added to external databases.'”

The ToS explicitly grants users full ownership and rights: 'Users retain full ownership of their generated books, including text and illustrations' and 'We grant you full rights to use the final book for any lawful purpose.' The license is limited to service delivery; Storique claims no rights to outputs. This is enterprise-friendly.

“[ToS] 'Users retain full ownership of their generated books, including text and illustrations. We grant you full rights to use the final book for any lawful purpose.'”

The Privacy Policy lists broad categories of third parties ('AI Platforms, Cloud Computing Services, Data Analytics Services, Sales & Marketing Tools') but states contracts are in place requiring they 'cannot do anything with your personal information unless we have instructed them to do it.' However, the specific list of sub-processors is not published, and 'AI Platforms' is vague. The ToS specifies sharing with print and shipping partners under DPA-like terms, but the full scope of 'Data Analytics Services' and 'Sales & Marketing Tools' sharing is unclear.

“[Privacy] 'We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us...The categories of third parties we may share personal information with are as follows: Affiliate Marketing Programs, AI Platforms, Cloud Computing Services, Data Analytics Services, Order Fulfillment Service Providers, Payment Processors, Product Engineering & Design Tools, Sales & Marketing Tools, Website Hosting Service Providers'”

The Privacy Policy clearly states: 'We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice' and 'No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.' The ToS confirms: 'Upon deletion, all associated data—including your uploads, custom AI models, and personal information—will be permanently removed.' Deletion is immediate and explicit.

“[Privacy] 'No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.' [ToS] 'Upon deletion, all associated data—including your uploads, custom AI models, and personal information—will be permanently removed.'”

The ToS unambiguously states: 'Users retain full ownership of their generated books, including text and illustrations' and 'Each custom AI model is generated exclusively for the corresponding user and cannot be accessed or used by anyone else, including us.' Storique explicitly disclaims any rights to user-generated outputs.

“[ToS] 'Users retain full ownership of their generated books, including text and illustrations. Each custom AI model is generated exclusively for the corresponding user and cannot be accessed or used by anyone else, including us.'”

The Privacy Policy states 'We have implemented appropriate and reasonable technical and organizational security measures' and references GDPR compliance ('If you are located in the EU or UK...The General Data Protection Regulation (GDPR) and UK GDPR require us...'), but no specific certifications (SOC 2, ISO 27001, HIPAA) are mentioned. No trust page, security documentation, or formal compliance certifications are referenced. The company is Swiss-based and mentions GDPR compliance but provides no formal proof.

“[Privacy] 'We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process.' No certifications explicitly stated.”