GDPR
Last updated: August 24, 2026
1. Controller and contact
Controller: GrowTales project, as stated in the legal notice. Unified contact for GDPR requests: soporte@growtales.app. A DPO appointment, if any, will be listed here.
2. Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where applicable. Write to the address above; we will reply within legal time limits.
3. Purposes (summary)
See the Privacy Policy for full purposes and legal bases. This page provides a complementary GDPR layer.
4. Transfers
Three of the service's providers are established in the United States: Anthropic (story text generation), ElevenLabs (voice synthesis), and Stripe's parent company (payments). Billing itself is handled by Stripe Payments Europe, Ltd., based in Ireland.
Those transfers rely on the standard contractual clauses approved by the European Commission or on the applicable adequacy framework, depending on what each provider has in place at the time. You can request a copy of the safeguards by writing to the contact address.
The database and audio files are hosted on the infrastructure chosen for each deployment; were it outside the European Economic Area, the same safeguards would apply.
5. Supervisory authority
You may lodge a complaint with the Spanish DPA (AEPD) or your local authority.