Privacy policy

Privacy Policy

Last updated: 11 May 2026

This Privacy Policy explains how Storybrush ("we", "us", "our") collects, uses, holds and discloses personal information when you visit our website or order a personalised book from us. We comply with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth).

What we collect

When you place an order, sign up for our newsletter, or use our customiser, we collect:

  • Contact details — name, email, postal address, and phone (only when needed for delivery)
  • Payment information — handled by Shopify Payments. We never store full credit card details on our own servers.
  • Photos and characters — images you upload, and the names, ages, pronouns and other character details you enter into our customiser
  • Customer service correspondence — emails or messages you send us
  • Browsing data — pages you visit, device information, cookies (see Cookies below)

How we use your photos

This is the part most parents care about. When you upload a photo to Storybrush:

  1. We send the photo to our AI image generation service (OpenAI, processed via secure servers in the United States) to create a watercolour version of your character.
  2. We use the original photo and the generated character only to produce your book.
  3. Your original uploaded photos are deleted from our systems within 30 days of your book shipping.
  4. We do not use your photos for advertising, train AI models on them, or share them with anyone other than the printers and AI provider strictly necessary to fulfil your order.
  5. We do not retain a copy of any face after your book is delivered.

Who we share with

We share personal information only with the providers we need to run Storybrush:

  • Shopify — our e-commerce platform (orders, payments, customer accounts)
  • OpenAI — AI image generation (photos and prompts only; no identifying details beyond the photo itself)
  • Cloudflare — image storage and request routing
  • Gelato — our print fulfilment partner (delivery details and print files only)
  • Australia Post / Star Track — delivery
  • Shopify Email or Klaviyo — newsletter delivery (only if you've signed up)

We do not sell your information to anyone.

International transfers

Some of our service providers (OpenAI, Cloudflare, Gelato) process data outside Australia. We take reasonable steps to ensure they handle your information consistently with the Australian Privacy Principles.

Your rights

Under the Privacy Act 1988, you have the right to:

  • Access the personal information we hold about you
  • Correct any information that's inaccurate
  • Request that we delete your information (subject to legal retention obligations such as tax records)
  • Withdraw consent for marketing emails — you can unsubscribe via the link in any email
  • Make a privacy complaint

To exercise any of these rights, email info@storybrush.com.au. We respond to requests within 30 days. If you're unhappy with our response, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

Cookies

We use cookies to keep your shopping cart working, remember your preferences, and understand how the site is being used. You can manage non-essential cookies via the cookie banner shown when you first visit.

Data security

All payment processing is handled by Shopify Payments under PCI DSS Level 1 standards. Photos and personal information are encrypted in transit (HTTPS) and at rest. Access to customer data is limited to staff who need it to fulfil your order.

Children's privacy

Storybrush is intended for adults purchasing books for or about children. We do not knowingly collect personal information directly from anyone under 18. If you believe a minor has provided personal information to us, please contact us and we'll delete it.

Contact

For privacy questions or requests:

Storybrush
info@storybrush.com.au

Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent version. Material changes will be communicated via email if you've signed up for our newsletter or have an account with us.