Trust Center — Infinite Library & Bindery

Never used to train AI · Core: contractual

Your manuscript trains nothing

Not by us — we train no models — and not by Anthropic, OpenAI, Google Gemini API, by contract. ElevenLabs (audiobook narration, the optional clone of your own voice, and album music.) trains by default unless the account opts out — that opt-out is being confirmed; Black Forest Labs (the author photo studio) trains by default unless the account opts out — that opt-out is being confirmed; the table below shows the live status.

Vendor by vendor, with sources →

GDPR · in place

Your data, on your terms

Export every book and record as one zip, or delete the account — yourself, from the account dialog, no ticket. Infinite Library SAS is a French company: the GDPR applies to everyone we serve. Companies accept our DPA online.

Your rights and the doors →

SOC 2 Type II · controls in place, audit next

Security you can read

TLS everywhere, encryption at rest, a separate signing key per purpose, an append-only audit log of operator actions, and a deploy gate that pins privacy settings with tests. Everything below is dated and cites the code that enforces it.

The controls →

What happens to your manuscript

It lands in your book's workspace — a private folder on our server in California — and is snapshotted to Google Cloud Storage within seconds of every change, so a lost server loses nothing.
Only you can open it, plus the collaborators you invite by link. Our operator opens a book only for support you asked for or an incident, through an admin API whose every action is logged.
When you ask for writing, illustration or narration, the relevant part goes to that vendor, for that job, and comes back — under terms that exclude training, with retention measured in days. The table below names each one.
Delete a book and it is gone at once, backup included. Delete the account and everything follows 14 days later — the window in which one click undoes it.

The AI vendors, one by one

Infinite Library trains no models. Each vendor below is engaged on terms that keep your content out of theirs; the “Trains on it?” column quotes the vendor's own page so you can check rather than trust.

Anthropic

United StatesTrains on it? Never — contractual default

Does

The writing and typesetting agent (Claude) — drafting, editing, translation, cover copy, the support concierge, the storybook director.

Receives

manuscript, transcripts, notes, prompts

Their terms

“By default, we will not use your inputs or outputs from our commercial products (e.g. Claude for Work, Anthropic API, Claude Gov, etc.) to train our models.” Source ↗

Keeps it

Inputs and outputs deleted within 30 days (longer only for confirmed policy violations or where the law requires).Zero retention: available

What we do on top

The agent's Claude Code subprocess runs with CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1: no telemetry, error reports or feedback surveys leave the container — only the model call does.
Our own copy of each agent session is swept every 6 hours; only the current session per book is kept (transcriptRetention.ts).

OpenAI

United StatesTrains on it? Never — contractual default

Does

Cover art generation, a fallback illustrator, and speech-to-text for voice memos and recordings you upload.

Receives

cover and illustration briefs, uploaded recordings

Their terms

“Data sent to the OpenAI API is not used to train or improve OpenAI models (unless you explicitly opt in to share data with us).” Source ↗

Keeps it

Abuse-monitoring logs up to 30 days; audio transcription requests are not retained.Zero retention: available

What we do on top

Every Responses API call is sent with store: false, so OpenAI keeps no retrievable copy beyond its 30-day abuse log (imageGen.ts).
Recordings are transcribed and discarded; the text lands in your book, the audio stays in your workspace only.

Google Gemini API

United StatesTrains on it? Never — paid tier

Does

Picture-book illustrations (the storybook engine) and watching YouTube videos you paste as source material.

Receives

picture-book briefs and reference images, pasted video links

Their terms

Paid Services: “Google doesn't use your prompts or responses to improve our products, and will process your prompts and responses in accordance with the Data Processing Addendum.” Bindery runs on the paid tier. Source ↗

Keeps it

Logged for a limited period solely to detect abuse (paid tier).Zero retention: not offered

What we do on top

Stateless calls by default: server-side interaction storage is off unless BINDERY_ILLUSTRATOR_STORE=1 (illustrator.ts).
A video is fetched by Google from its public URL — none of your files travel with it.

ElevenLabs

United StatesTrains on it? Opt-out pending

Does

Audiobook narration, the optional clone of your own voice, and album music.

Receives

narrated chapter text, voice samples, lyrics

Their terms

ElevenLabs may use submitted content to train its models unless the workspace opts out (“You may opt out of our use of your Personal Data for training at any time by navigating to the ‘Data use’ menu”); enterprise contracts exclude it. Source ↗

Keeps it

Request history is kept by default; zero-retention mode (enable_logging=false) is an enterprise-plan feature.Zero retention: enterprise only

What we do on top

Your cloned voiceprint is deleted at the vendor the moment you delete the voice or your account (voice.ts).
Zero-retention requests are armed with ELEVENLABS_ZERO_RETENTION=1 once the account is on an enterprise plan (voice.ts).

Black Forest Labs

United States / European Union (regional endpoints)Trains on it? Opt-out pending

Does

The author photo studio — professional portraits generated from a selfie you choose to upload.

Receives

a selfie and the portrait brief (only if you use the author photo studio)

Their terms

Black Forest Labs may use prompts and uploaded images to improve its models unless the customer opts out (privacy@blackforestlabs.ai, “Training Opt Out”); enterprise contracts exclude it. Source ↗

Keeps it

No fixed period published — “as long as is reasonably necessary”.Zero retention: not offered

What we do on top

Entirely opt-in: nothing reaches this vendor unless you open the author photo studio and upload a photo.
Generated portraits are stored on our side only; the vendor's download link expires within minutes.

Nothing reaches a vendor until you use the feature it powers. The register is machine-readable at /trust/subprocessors.json.

Opt-out pending. Two optional features — audiobook narration and the author photo studio — use vendors whose default terms allow training unless the account opts out. We are confirming those opt-outs; this page flips to “opt-out set” the moment they are. Until then, simply not using those two features keeps your content away from them entirely.

Your rights, and the door for each

Infinite Library SAS is the controller of your account data and your processor for the content you create (see the DPA). Most rights are self-serve; the rest are one email away.

Your right	GDPR	How it works here	Door
Access and portability	Art. 15 & 20	Download everything — your books, chat history, orders and profile — as one zip, any time, from the account dialog.	Download everything →
Erasure	Art. 17	Delete your account from the same dialog. The confirmation comes from your own inbox, and a 14-day undo window follows before the purge.	Delete account →
Rectification	Art. 16	Your profile, author bio and every word of every book are yours to edit in place.	Email us →
Restriction and objection	Art. 18 & 21	Email hello@infinitelibrary.ai; we answer usually within 1–2 business days.	Email us →
Withdraw consent	Art. 7(3)	Cookie settings reopen from the account dialog; analytics stays off in Europe until you say yes.	Cookie settings →
Sign a Data Processing Addendum	Art. 28	Companies accept our DPA online; the signer is notified of sub-processor changes in advance.	Read the DPA →

Privacy questions: hello@infinitelibrary.ai. Full policy: Privacy Policy.

Where your data lives

Processing happens in the United States, at managed providers, in regions we can name. Transfers from Europe rest on the Standard Contractual Clauses in our DPA and, where the vendor is certified, the EU-US Data Privacy Framework.

What	Where	Provider
The studio and the live book workspaces (manuscripts, sources, uploads, audio masters, chat history)	California, United States (us-west2)	Railway
Durable workspace snapshots and author portraits	Iowa, United States (us-central1)	Google Cloud Storage
Accounts, plans and credits, notifications, support conversations, the audit log	United States multi-region (nam5)	Cloud Firestore
The website (www.infinitelibrary.ai)	United States, served from a global edge	Vercel

How long we keep things

Retention is enforced by code, not by a calendar reminder; the last column names the module, for reviewers who read source.

Data	Kept	Then	Enforced by
Your books — manuscript, sources, uploads, covers, audio masters, chat history	For as long as your account exists	A book you delete is removed at once and its backup tombstoned; everything else is erased 14 days after you confirm account deletion (the undo window)	`accountDeletion.ts · snapshot.ts`
Account profile — email, name, plan, credits, orders	For as long as your account exists	14 days after confirmed deletion, replaced by a PII-free tombstone (amounts tax law requires stay, anonymised)	`identity.ts · accountDeletion.ts`
The writing agent's session memory (its working transcript per book)	Only the current session of each book	Superseded sessions swept every 6 hours; a session past 256 MB is rotated	`transcriptRetention.ts`
Usage telemetry — pseudonymous product events	190 days	Raw events deleted; only aggregate counters remain	`telemetry.ts`
Audit log — operator actions, data exports, DPA signatures	400 days	Deleted	`auditLog.ts`
Sign-in codes and magic links	10 minutes	Expire	`emailAuth.ts`
Account-deletion confirmation links	7 days	Expire	`accountDeletion.ts`
Support conversations with the concierge	For as long as your account exists	Deleted with the account	`supportLog.ts · accountDeletion.ts`
Your cookie-consent choice	365 days after a yes, 182 days after a no	You are asked again	`client/consent.ts`

Security controls

The measures we maintain — also Annex II of the DPA. Where a control is a line of code, it is covered by the test suite that gates every deploy.

Encryption

TLS 1.2 or newer on every connection, with HSTS for one year including subdomains.
Encryption at rest for accounts, backups and portraits — Google-managed AES-256 on Cloud Firestore and Cloud Storage.
Card numbers never touch our servers: Stripe holds them (PCI DSS Level 1); we keep only a customer reference.

Access control

A book is opened only by its owner and the collaborators the owner invites; every collaborator link is a signed, revocable token.
Operator actions go through a token-authenticated admin API — short-lived HMAC tokens scoped to one action — and every call is written to an append-only audit log.
Secrets live only in the hosting provider's variable store, never in the repository; each token class (print assets, listen links, unsubscribe, sessions, admin) has its own signing key.
Production side effects — email, print jobs, purges — are refused on any machine that is not the production container, so a developer laptop with mirrored configuration cannot act on customers.

Application security

Origin checks on every state-changing request (CSRF) and rate limits on checkout, sign-in, publishing and import routes.
Sign-up abuse rails: disposable-domain refusal, velocity caps, and device keys that never store a raw IP address.
Account deletion needs a link clicked from the account's own inbox; a stolen session or a social-engineered support chat cannot erase a library.
Uploaded files are served under a no-script content-security policy; public pages are server-rendered with no third-party script beyond consent-gated analytics.
Dependencies are audited on every release; the last full security review (31 August 2026) found no critical or high-severity dependency issues.

Resilience

Every change to a book is snapshotted to Google Cloud Storage within seconds; a fresh server re-hydrates from those snapshots on boot.
Health-checked deploys with automatic restarts; a disk-pressure watch reclaims space before a build can corrupt.
Vendor spend ceilings and circuit breakers keep a runaway job from becoming an outage or a bill.

People and process

A founder-led team: production access is limited to the operator, and the operator's actions are logged.
Every change ships through the same typecheck-and-test gate; privacy-critical settings (vendor data-retention flags, the sub-processor register) are pinned by tests that fail when code and policy diverge.
Incident response: affected customers — and, where required, supervisory authorities — are notified within 72 hours of confirming a personal-data breach.

Compliance status

Stated plainly, including what we have not done. A badge here means what it says.

GDPR
In place

EU controller, self-serve rights, online DPA

Infinite Library SAS is a French company, so the GDPR applies to everything we do — not only to European customers. Access, portability and erasure are self-serve in the account dialog; a Data Processing Addendum with Standard Contractual Clauses can be accepted online in a minute.

CCPA / CPRA
In place

No sale, no sharing for advertising, GPC honoured

We do not sell or share personal information for cross-context advertising. The same export and deletion doors serve California requests, and the Global Privacy Control signal is treated as an opt-out.

International transfers
In place

SCCs and the EU-US Data Privacy Framework

Processing happens in the United States. Transfers rest on the Standard Contractual Clauses (2021/914) incorporated in our DPA and, where a vendor is certified, the EU-US Data Privacy Framework. Each sub-processor's location is stated in the register below.

SOC 2 Type II
In progress

Controls in place and evidenced; the audit period has not started

The controls on this page map to the Trust Services Criteria in a control map we share on request. A formal Type II report needs an observation period with an independent auditor; until it exists we answer security questionnaires by email, with the evidence linked here.

ISO/IEC 27001
Not pursued

Not certified

We are not ISO 27001 certified and are not currently seeking certification; the SOC 2 track above is our compliance program.

Procurement: send your questionnaire to hello@infinitelibrary.ai, or start from our standing answers.

Sub-processors

Every third party that processes personal data on our behalf, what it does, what it receives and where. This register is Annex III of the DPA; companies that accepted the DPA are emailed at least 30 days before a new vendor is added, with a right to object.

Vendor	Purpose	Receives	Location	Terms
AnthropicAnthropic, PBC — San Francisco, United States	The writing and typesetting agent (Claude) — drafting, editing, translation, cover copy, the support concierge, the storybook director.	Your prompts, manuscript, transcripts, notes and uploads, and the book as it is written; the account id as an opaque reference.	United States	Privacy ↗ · DPA ↗AI · Never — contractual default · since 2026-06-01
OpenAIOpenAI, L.L.C. — San Francisco, United States	Cover art generation, a fallback illustrator, and speech-to-text for voice memos and recordings you upload.	Cover briefs, illustration prompts and reference images, and the audio you ask to transcribe.	United States	Privacy ↗ · DPA ↗AI · Never — contractual default · since 2026-06-01
Google Gemini APIGoogle LLC — Mountain View, United States	Picture-book illustrations (the storybook engine) and watching YouTube videos you paste as source material.	Illustration briefs (which may name the child a picture book is for), reference images, and the public video links you paste.	United States	Privacy ↗ · DPA ↗AI · Never — paid tier · since 2026-09-02
ElevenLabsElevenLabs, Inc. — New York, United States	Audiobook narration, the optional clone of your own voice, and album music.	The text of chapters you narrate, the voice sample you record for a clone, and song lyrics.	United States	Privacy ↗ · DPA ↗AI · Opt-out pending · since 2026-06-01
Black Forest LabsBlack Forest Labs, Inc. — Freiburg, Germany / United States	The author photo studio — professional portraits generated from a selfie you choose to upload.	The selfie you upload and the portrait brief.	United States / European Union (regional endpoints)	Privacy ↗AI · Opt-out pending · since 2026-08-22
RailwayRailway Corp. — San Francisco, United States	Hosts the Bindery studio and the volume that holds book workspaces (manuscripts, sources, uploads, audio masters, chat history).	Everything the studio processes, at rest on its volume and in transit through its edge.	United States (us-west2, California)	Privacy ↗ · DPA ↗hosting · since 2026-06-01
Google Cloud / FirebaseGoogle LLC — Mountain View, United States (Google Ireland Ltd. for EU customers)	Accounts and sign-in (Firebase Auth), the shared account database (Cloud Firestore), durable workspace snapshots and author portraits (Cloud Storage), and the fallback email transport.	Account profile, plan and credit records, notifications, support conversations, the audit log, book snapshots.	United States (Firestore nam5 multi-region; Cloud Storage us-central1, Iowa)	Privacy ↗ · DPA ↗data · since 2026-06-01
StripeStripe, Inc. — San Francisco, United States (Stripe Payments Europe Ltd. for EU customers)	Payments, memberships, refunds, invoices, and author payouts (Stripe Connect). Card numbers never touch our servers.	Email, name, billing country, purchase history, payout details for authors who sell.	United States / European Union	Privacy ↗ · DPA ↗payments · since 2026-06-01
Twilio SendGridTwilio Inc. — San Francisco, United States	Delivers transactional and lifecycle email (sign-in codes, order updates, release notes).	Email address, name, the content of the messages we send you.	United States	Privacy ↗ · DPA ↗email · since 2026-06-01
Lulu PressLulu Press, Inc. — Morrisville, North Carolina, United States	Prints and ships bound copies through its global print network.	Recipient name, shipping address and phone, the print-ready files of the book you order.	United States, with printing near the destination	Privacy ↗print · since 2026-06-01
Google Analytics 4 & Google AdsGoogle LLC — Mountain View, United States	Product analytics and advertising measurement — asked first in Europe, the UK and Switzerland (Consent Mode v2); cookieless pings until you say yes.	Pseudonymous identifiers and page events; conversions are reported server-side without card or content details.	United States	Privacy ↗analytics · since 2026-06-01
ipwho.is / ipapi.coIP geolocation services (United States / European Union)	Country lookup for pricing currency and regional rules — the IP address only, nothing else.	IP address.	United States / European Union	Privacy ↗geo · since 2026-06-01
Apple App StoreApple Inc. — Cupertino, United States	In-app purchases in the Infinite Library iOS app.	Transaction identifiers (no name or email).	United States	Privacy ↗app · since 2026-08-20
VercelVercel Inc. — San Francisco, United States	Hosts the Infinite Library website (www.infinitelibrary.ai), including its guides, reader and the proxied landing.	Request logs; the website's own data as described in the Privacy Policy.	United States / global edge	Privacy ↗ · DPA ↗hosting · since 2026-06-01

Services that receive no personal data

Unsplash — Stock photo search for covers and pages. Receives: Search terms only.
youtube-transcript.io — Captions for public YouTube videos you paste. Receives: Public video ids only.
IndexNow — Tells search engines a published storefront changed. Receives: Our own public URLs.
Frankfurter — Daily exchange rates, so prices show in your currency. Receives: Nothing — a public rates table.

Want the change notices without a DPA? Email hello@infinitelibrary.ai with the subject “Sub-processor updates”.

Responsible disclosure

Found a vulnerability? Email hello@infinitelibrary.ai with the steps to reproduce; the machine-readable contact is /.well-known/security.txt. We acknowledge reports within two business days, keep you informed while we fix, and credit you here if you wish. Good-faith research that avoids privacy violations, data destruction and service disruption will not be met with legal action. There is no paid bounty programme.

Changes to this page

10 September 2026Trust Center published: sub-processor register, AI training posture per vendor, retention schedule, online DPA, data export, audit log, security.txt.