# Trust Center — Infinite Library & Bindery

> Your manuscripts, transcripts and books are never used to train AI. Where your data lives, who processes it, how long we keep it, your GDPR rights, our security controls, the sub-processor register, and an online DPA.

Last updated 2026-09-10. Canonical: https://www.infinitelibrary.ai/trust · JSON: https://bindery.infinitelibrary.ai/trust/subprocessors.json · DPA: https://bindery.infinitelibrary.ai/trust/dpa.md · Questionnaire: https://bindery.infinitelibrary.ai/trust/questionnaire.md · Contact: hello@infinitelibrary.ai

## The three promises

- **Never used to train AI (Core: contractual).** Not by us — we train no models — and not by Anthropic, OpenAI, Google Gemini API, by contract. ElevenLabs (audiobook narration, the optional clone of your own voice, and album music.) trains by default unless the account opts out — that opt-out is being confirmed; Black Forest Labs (the author photo studio) trains by default unless the account opts out — that opt-out is being confirmed; the table below shows the live status.
- **GDPR, in place.** Export everything or delete the account yourself from the account dialog (https://bindery.infinitelibrary.ai/?account=privacy). Infinite Library SAS is a French company; the GDPR applies to everyone we serve. Companies accept the DPA online.
- **Security you can read.** TLS everywhere, encryption at rest, a signing key per purpose, an append-only audit log, and tests that pin privacy settings. SOC 2 Type II: controls in place; the audit period has not started.

## What happens to your manuscript

1. It lands in your book's workspace (Railway, California) and is snapshotted to Google Cloud Storage within seconds of every change.
2. Only you and the collaborators you invite can open it; the operator opens a book only for support you asked for or an incident, and every such action is logged.
3. When you ask for writing, illustration or narration, the relevant part goes to that vendor for that job, under no-training terms, with retention measured in days.
4. Delete a book and it is gone at once, backup included; delete the account and everything follows 14 days later.

## AI vendors

| Vendor | Does | Receives | Trains on it? | Keeps it | Our controls | Source |
| --- | --- | --- | --- | --- | --- | --- |
| Anthropic | The writing and typesetting agent (Claude) — drafting, editing, translation, cover copy, the support concierge, the storybook director. | manuscript, transcripts, notes, prompts | Never — contractual default | Inputs and outputs deleted within 30 days (longer only for confirmed policy violations or where the law requires). | The agent's Claude Code subprocess runs with CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1: no telemetry, error reports or feedback surveys leave the container — only the model call does. Our own copy of each agent session is swept every 6 hours; only the current session per book is kept (transcriptRetention.ts). | https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training |
| OpenAI | Cover art generation, a fallback illustrator, and speech-to-text for voice memos and recordings you upload. | cover and illustration briefs, uploaded recordings | Never — contractual default | Abuse-monitoring logs up to 30 days; audio transcription requests are not retained. | Every Responses API call is sent with store: false, so OpenAI keeps no retrievable copy beyond its 30-day abuse log (imageGen.ts). Recordings are transcribed and discarded; the text lands in your book, the audio stays in your workspace only. | https://developers.openai.com/api/docs/guides/your-data |
| Google Gemini API | Picture-book illustrations (the storybook engine) and watching YouTube videos you paste as source material. | picture-book briefs and reference images, pasted video links | Never — paid tier | Logged for a limited period solely to detect abuse (paid tier). | Stateless calls by default: server-side interaction storage is off unless BINDERY_ILLUSTRATOR_STORE=1 (illustrator.ts). A video is fetched by Google from its public URL — none of your files travel with it. | https://ai.google.dev/gemini-api/terms |
| ElevenLabs | Audiobook narration, the optional clone of your own voice, and album music. | narrated chapter text, voice samples, lyrics | Opt-out pending | Request history is kept by default; zero-retention mode (enable_logging=false) is an enterprise-plan feature. | Your cloned voiceprint is deleted at the vendor the moment you delete the voice or your account (voice.ts). Zero-retention requests are armed with ELEVENLABS_ZERO_RETENTION=1 once the account is on an enterprise plan (voice.ts). | https://elevenlabs.io/privacy-policy |
| Black Forest Labs | The author photo studio — professional portraits generated from a selfie you choose to upload. | a selfie and the portrait brief (only if you use the author photo studio) | Opt-out pending | No fixed period published — “as long as is reasonably necessary”. | Entirely opt-in: nothing reaches this vendor unless you open the author photo studio and upload a photo. Generated portraits are stored on our side only; the vendor's download link expires within minutes. | https://bfl.ai/legal/privacy-policy |

## Your rights

| Right | GDPR | How |
| --- | --- | --- |
| Access and portability | Art. 15 & 20 | Download everything — your books, chat history, orders and profile — as one zip, any time, from the account dialog. |
| Erasure | Art. 17 | Delete your account from the same dialog. The confirmation comes from your own inbox, and a 14-day undo window follows before the purge. |
| Rectification | Art. 16 | Your profile, author bio and every word of every book are yours to edit in place. |
| Restriction and objection | Art. 18 & 21 | Email hello@infinitelibrary.ai; we answer usually within 1–2 business days. |
| Withdraw consent | Art. 7(3) | Cookie settings reopen from the account dialog; analytics stays off in Europe until you say yes. |
| Sign a Data Processing Addendum | Art. 28 | Companies accept our DPA online; the signer is notified of sub-processor changes in advance. |

## Where data lives

- The studio and the live book workspaces (manuscripts, sources, uploads, audio masters, chat history): California, United States (us-west2) (Railway)
- Durable workspace snapshots and author portraits: Iowa, United States (us-central1) (Google Cloud Storage)
- Accounts, plans and credits, notifications, support conversations, the audit log: United States multi-region (nam5) (Cloud Firestore)
- The website (www.infinitelibrary.ai): United States, served from a global edge (Vercel)

## Retention

| Data | Kept | Then | Enforced by |
| --- | --- | --- | --- |
| Your books — manuscript, sources, uploads, covers, audio masters, chat history | For as long as your account exists | A book you delete is removed at once and its backup tombstoned; everything else is erased 14 days after you confirm account deletion (the undo window) | accountDeletion.ts · snapshot.ts |
| Account profile — email, name, plan, credits, orders | For as long as your account exists | 14 days after confirmed deletion, replaced by a PII-free tombstone (amounts tax law requires stay, anonymised) | identity.ts · accountDeletion.ts |
| The writing agent's session memory (its working transcript per book) | Only the current session of each book | Superseded sessions swept every 6 hours; a session past 256 MB is rotated | transcriptRetention.ts |
| Usage telemetry — pseudonymous product events | 190 days | Raw events deleted; only aggregate counters remain | telemetry.ts |
| Audit log — operator actions, data exports, DPA signatures | 400 days | Deleted | auditLog.ts |
| Sign-in codes and magic links | 10 minutes | Expire | emailAuth.ts |
| Account-deletion confirmation links | 7 days | Expire | accountDeletion.ts |
| Support conversations with the concierge | For as long as your account exists | Deleted with the account | supportLog.ts · accountDeletion.ts |
| Your cookie-consent choice | 365 days after a yes, 182 days after a no | You are asked again | client/consent.ts |

## Security controls

### Encryption

- TLS 1.2 or newer on every connection, with HSTS for one year including subdomains.
- Encryption at rest for accounts, backups and portraits — Google-managed AES-256 on Cloud Firestore and Cloud Storage.
- Card numbers never touch our servers: Stripe holds them (PCI DSS Level 1); we keep only a customer reference.

### Access control

- A book is opened only by its owner and the collaborators the owner invites; every collaborator link is a signed, revocable token.
- Operator actions go through a token-authenticated admin API — short-lived HMAC tokens scoped to one action — and every call is written to an append-only audit log.
- Secrets live only in the hosting provider's variable store, never in the repository; each token class (print assets, listen links, unsubscribe, sessions, admin) has its own signing key.
- Production side effects — email, print jobs, purges — are refused on any machine that is not the production container, so a developer laptop with mirrored configuration cannot act on customers.

### Application security

- Origin checks on every state-changing request (CSRF) and rate limits on checkout, sign-in, publishing and import routes.
- Sign-up abuse rails: disposable-domain refusal, velocity caps, and device keys that never store a raw IP address.
- Account deletion needs a link clicked from the account's own inbox; a stolen session or a social-engineered support chat cannot erase a library.
- Uploaded files are served under a no-script content-security policy; public pages are server-rendered with no third-party script beyond consent-gated analytics.
- Dependencies are audited on every release; the last full security review (31 August 2026) found no critical or high-severity dependency issues.

### Resilience

- Every change to a book is snapshotted to Google Cloud Storage within seconds; a fresh server re-hydrates from those snapshots on boot.
- Health-checked deploys with automatic restarts; a disk-pressure watch reclaims space before a build can corrupt.
- Vendor spend ceilings and circuit breakers keep a runaway job from becoming an outage or a bill.

### People and process

- A founder-led team: production access is limited to the operator, and the operator's actions are logged.
- Every change ships through the same typecheck-and-test gate; privacy-critical settings (vendor data-retention flags, the sub-processor register) are pinned by tests that fail when code and policy diverge.
- Incident response: affected customers — and, where required, supervisory authorities — are notified within 72 hours of confirming a personal-data breach.

## Compliance

- **GDPR — In place.** EU controller, self-serve rights, online DPA. Infinite Library SAS is a French company, so the GDPR applies to everything we do — not only to European customers. Access, portability and erasure are self-serve in the account dialog; a Data Processing Addendum with Standard Contractual Clauses can be accepted online in a minute.
- **CCPA / CPRA — In place.** No sale, no sharing for advertising, GPC honoured. We do not sell or share personal information for cross-context advertising. The same export and deletion doors serve California requests, and the Global Privacy Control signal is treated as an opt-out.
- **International transfers — In place.** SCCs and the EU-US Data Privacy Framework. Processing happens in the United States. Transfers rest on the Standard Contractual Clauses (2021/914) incorporated in our DPA and, where a vendor is certified, the EU-US Data Privacy Framework. Each sub-processor's location is stated in the register below.
- **SOC 2 Type II — In progress.** Controls in place and evidenced; the audit period has not started. The controls on this page map to the Trust Services Criteria in a control map we share on request. A formal Type II report needs an observation period with an independent auditor; until it exists we answer security questionnaires by email, with the evidence linked here.
- **ISO/IEC 27001 — Not pursued.** Not certified. We are not ISO 27001 certified and are not currently seeking certification; the SOC 2 track above is our compliance program.

## Sub-processors

| Vendor | Entity | Purpose | Receives | Location | Privacy | DPA | AI training |
| --- | --- | --- | --- | --- | --- | --- | --- |
| Anthropic | Anthropic, PBC — San Francisco, United States | The writing and typesetting agent (Claude) — drafting, editing, translation, cover copy, the support concierge, the storybook director. | Your prompts, manuscript, transcripts, notes and uploads, and the book as it is written; the account id as an opaque reference. | United States | https://www.anthropic.com/legal/privacy | https://www.anthropic.com/legal/data-processing-addendum | Never — contractual default |
| OpenAI | OpenAI, L.L.C. — San Francisco, United States | Cover art generation, a fallback illustrator, and speech-to-text for voice memos and recordings you upload. | Cover briefs, illustration prompts and reference images, and the audio you ask to transcribe. | United States | https://openai.com/policies/privacy-policy | https://openai.com/policies/data-processing-addendum | Never — contractual default |
| Google Gemini API | Google LLC — Mountain View, United States | Picture-book illustrations (the storybook engine) and watching YouTube videos you paste as source material. | Illustration briefs (which may name the child a picture book is for), reference images, and the public video links you paste. | United States | https://policies.google.com/privacy | https://cloud.google.com/terms/data-processing-addendum | Never — paid tier |
| ElevenLabs | ElevenLabs, Inc. — New York, United States | Audiobook narration, the optional clone of your own voice, and album music. | The text of chapters you narrate, the voice sample you record for a clone, and song lyrics. | United States | https://elevenlabs.io/privacy-policy | https://elevenlabs.io/dpa | Opt-out pending |
| Black Forest Labs | Black Forest Labs, Inc. — Freiburg, Germany / United States | The author photo studio — professional portraits generated from a selfie you choose to upload. | The selfie you upload and the portrait brief. | United States / European Union (regional endpoints) | https://bfl.ai/legal/privacy-policy |  | Opt-out pending |
| Railway | Railway Corp. — San Francisco, United States | Hosts the Bindery studio and the volume that holds book workspaces (manuscripts, sources, uploads, audio masters, chat history). | Everything the studio processes, at rest on its volume and in transit through its edge. | United States (us-west2, California) | https://railway.com/legal/privacy | https://railway.com/legal/dpa | n/a |
| Google Cloud / Firebase | Google LLC — Mountain View, United States (Google Ireland Ltd. for EU customers) | Accounts and sign-in (Firebase Auth), the shared account database (Cloud Firestore), durable workspace snapshots and author portraits (Cloud Storage), and the fallback email transport. | Account profile, plan and credit records, notifications, support conversations, the audit log, book snapshots. | United States (Firestore nam5 multi-region; Cloud Storage us-central1, Iowa) | https://policies.google.com/privacy | https://cloud.google.com/terms/data-processing-addendum | n/a |
| Stripe | Stripe, Inc. — San Francisco, United States (Stripe Payments Europe Ltd. for EU customers) | Payments, memberships, refunds, invoices, and author payouts (Stripe Connect). Card numbers never touch our servers. | Email, name, billing country, purchase history, payout details for authors who sell. | United States / European Union | https://stripe.com/privacy | https://stripe.com/legal/dpa | n/a |
| Twilio SendGrid | Twilio Inc. — San Francisco, United States | Delivers transactional and lifecycle email (sign-in codes, order updates, release notes). | Email address, name, the content of the messages we send you. | United States | https://www.twilio.com/en-us/legal/privacy | https://www.twilio.com/en-us/legal/data-protection-addendum | n/a |
| Lulu Press | Lulu Press, Inc. — Morrisville, North Carolina, United States | Prints and ships bound copies through its global print network. | Recipient name, shipping address and phone, the print-ready files of the book you order. | United States, with printing near the destination | https://www.lulu.com/privacy-policy |  | n/a |
| Google Analytics 4 & Google Ads | Google LLC — Mountain View, United States | Product analytics and advertising measurement — asked first in Europe, the UK and Switzerland (Consent Mode v2); cookieless pings until you say yes. | Pseudonymous identifiers and page events; conversions are reported server-side without card or content details. | United States | https://policies.google.com/privacy |  | n/a |
| ipwho.is / ipapi.co | IP geolocation services (United States / European Union) | Country lookup for pricing currency and regional rules — the IP address only, nothing else. | IP address. | United States / European Union | https://ipapi.co/privacy/ |  | n/a |
| Apple App Store | Apple Inc. — Cupertino, United States | In-app purchases in the Infinite Library iOS app. | Transaction identifiers (no name or email). | United States | https://www.apple.com/legal/privacy/ |  | n/a |
| Vercel | Vercel Inc. — San Francisco, United States | Hosts the Infinite Library website (www.infinitelibrary.ai), including its guides, reader and the proxied landing. | Request logs; the website's own data as described in the Privacy Policy. | United States / global edge | https://vercel.com/legal/privacy-policy | https://vercel.com/legal/dpa | n/a |

Services that receive no personal data: Unsplash (search terms only); youtube-transcript.io (public video ids only); IndexNow (our own public urls); Frankfurter (nothing — a public rates table).

DPA signatories are notified at least 30 days before a new sub-processor receives their content.

## Responsible disclosure

Email hello@infinitelibrary.ai (subject “Security report”); machine-readable contact at https://bindery.infinitelibrary.ai/.well-known/security.txt. Good-faith research is welcome; no paid bounty.

## Changes

- 2026-09-10: Trust Center published: sub-processor register, AI training posture per vendor, retention schedule, online DPA, data export, audit log, security.txt.