Privacy Policy
Toe-Curling Tales
toecurlingtales.com
Last updated: September 2026
This Privacy Policy explains what information Toe-Curling Tales collects, why we collect it, who we share it with, and what control you have over it. It applies to toecurlingtales.com (the “Website”) and to our services: In-Process Developmental Editing, Developmental Edit, and Audiobook Narration (the “Services”).
If you send us a manuscript, you are handing over something you made. We take that seriously, and this document explains exactly what happens to it.
By using our Website or Services, you agree to the practices described here.
1. Definitions
Company (“we,” “us,” “our”) refers to Toe-Curling Tales, currently operated as Toe-Curling Tales LLC, a California limited liability company, including its owner, contractors, and authorized representatives.
Client (“you”) refers to anyone this Policy covers (Section 2). Client refers to any individual or entity that engages us for Services.
Deliverables refers to the work we produce for you under a Service Agreement: the written feedback that precedes each In-Process session and the Session Notes that follow it; editorial letters, annotated manuscripts, revision roadmaps, and Call Notes; and narration prep documentation and finished audio.
Personal Information refers to information that identifies you, or that could reasonably be used to identify you, either on its own or combined with other information.
Cookies are small text files stored on your browser or device. Our Cookie Policy covers these in detail.
2. What This Policy Covers
This Policy governs information collected from:
Website visitors — anyone browsing or interacting with the Website
Clients — individuals or entities under agreement with us for Services
Contractors and partners — people engaged in project work with us
It is written to comply with the California Consumer Privacy Act (CCPA) and applicable U.S. privacy law, and it reflects core principles of the EU General Data Protection Regulation (GDPR) for international visitors.
3. Information We Collect
Contact and identifying information: Your name, email address, and any details you provide through our contact form or in correspondence with us.
Payment information: When you pay an invoice, our payment processor collects your card or bank details directly through its own secure systems. We do not see or store full payment card numbers. We retain invoice records—amount, date, and the name and billing contact tied to the transaction—for tax and accounting purposes.
Manuscript and project materials:
Preview materials: the pages you send for a sample edit or ahead of a first In-Process conversation, and the passage you send for a custom audition. They get the same confidentiality as project materials, and if the inquiry does not become a project, they are deleted with it (Section 10).
For editing Services: manuscripts, outlines, worldbuilding documents, character sketches, plot summaries, synopses, and anything else you send for review.
For Audiobook Narration: manuscripts, pronunciation guides, character guides, and technical specifications.
Audio files: Recordings produced in the course of Audiobook Narration projects. We do not record editing sessions or consultation calls. See Section 6.
Website activity: Information collected automatically when you visit the Website, including IP address, browser type, device type, pages visited, and time spent on pages. This comes through cookies and similar technologies, and our Cookie Policy explains it in full.
We collect what we need to deliver the Services and run the business. Nothing beyond that.
4. How We Use Your Information
To deliver the Services: Reading and analyzing your manuscript; running sessions, and writing the feedback that precedes each one and the Session Notes that follow it; writing editorial letters, annotated manuscripts, and revision roadmaps; recording and producing audio; managing project files; and tracking project status.
To communicate with you: Answering inquiries, sending project updates, confirming approvals, scheduling sessions, and delivering files.
To handle billing: Issuing invoices, processing payments, and keeping financial records.
To meet legal obligations: Tax and regulatory requirements, and responding to lawful requests.
To improve the Website and the Services: Understanding how visitors use the site and acting on client feedback.
To send the newsletter. If you subscribe to Candlelight Notes, we use your email address to deliver it through Substack. You can unsubscribe from any issue.
5. Your Manuscript
Your manuscript is the most sensitive thing you will send us, and it gets specific treatment.
We keep manuscript content confidential, and we do not name the books or authors we have worked with unless you agree to it: a testimonial, a credit, or the portfolio use of finished audio set out in your narration Service Agreement.
We share project materials only with production partners working on your project, each bound by a confidentiality agreement.
We use your materials solely to perform the work you engaged us for.
We never quote, reference, or excerpt work in marketing, on social media, in our newsletter, or anywhere else without your explicit written permission.
We store project files securely and delete them on the schedule in Section 10.
Fuller confidentiality terms are in our Terms of Service and in your Service Agreement.
6. Artificial Intelligence
Your manuscript never goes into an AI tool, at any stage, without your written permission. The same is true of your Personal Information and of every Deliverable. This covers all AI systems: large language model chatbots, AI editing and manuscript-analysis tools, AI transcription and summarization, and AI features embedded in general software.
Every Deliverable—the written feedback before each session, the Session Notes after it, editorial letters, annotated manuscripts, revision roadmaps, Call Notes, and narration prep documentation—is written without AI assistance at any stage, including working notes and drafts.
Sessions and calls are not recorded, and AI meeting-summary features are disabled on our Zoom account. Session Notes and Call Notes are written by hand.
Narration is performed by a human voice. No synthetic or cloned audio is used in any Deliverable.
Detailed AI commitments are in our Terms of Service and applicable Service Agreements.
7. Cookies and Tracking Technologies
The Website uses cookies for essential functions, analytics, and remembering your preferences. Our Cookie Policy explains which cookies we use, who sets them, how long they last, and how to control them.
8. Who We Share Information With
We share Personal Information only where it is necessary to run the business, deliver the Services, or comply with the law. We do not sell your Personal Information, and we do not share it for advertising purposes.
Google (Workspace, Analytics, and reCAPTCHA). We use Google Workspace for business email, so correspondence with us and any manuscript or project files sent by email are stored on Google’s servers. We use Google Analytics to understand Website traffic and Google reCAPTCHA to protect our forms from automated abuse. See Google’s Privacy Policy.
Microsoft (OneDrive and Office): We use Microsoft OneDrive to store project files and deliver finished audio through secure, password-protected links, and Microsoft Office to prepare manuscripts, annotations, and written deliverables. See the Microsoft Privacy Statement.
Zoom: We use Zoom for In-Process Developmental Editing sessions, Developmental Edit Plus, and consultation calls. Zoom processes participant names, email addresses, and live meeting audio and video to provide the service. We do not record these sessions. See Zoom’s Privacy Statement.
Squarespace: The Website is built and hosted on Squarespace, which processes server logs, technical and device information, form submissions, and its own analytics and cookie data to run and secure the site. See Squarespace’s Privacy Policy.
Goodreads: Our Meet Ashley page embeds a Goodreads widget displaying Ashley's reading list. This embedded content loads Goodreads’ scripts, which may collect browsing information about your visit to that page, whether or not you interact with it. Goodreads is an Amazon company. See Goodreads’ Privacy Policy.
Substack: We use Substack to publish and distribute Candlelight Notes. If you subscribe, your email address is shared with Substack for delivery. Our Website also embeds a Substack subscribe form in the footer of every page, which loads Substack's scripts and may set cookies even if you do not subscribe. See Substack’s Privacy Policy.
Payment processor: We use a secure third-party payment processor to issue invoices and handle transactions. It collects your payment details directly and maintains its own privacy and security practices.
Production partners: Independent contractors who assist with audiobook production, including our independent proofer, receive access to the project materials they need. Each is bound by a confidentiality agreement.
ACX: If your project runs through ACX, communications and project materials exchanged on that platform are governed by ACX’s own terms and privacy practices in addition to this Policy.
Legal and regulatory authorities, where required by law, subpoena, court order, or other legal process.
A successor entity, in the event of a merger, acquisition, sale, or other business transition, subject to the terms of this Policy.
Third-party links: The Website may link to external sites we do not control. Information you provide to those sites is governed by their privacy policies, not this one.
9. Who Has Access to Your Information
Toe-Curling Tales is a one-person business. Ashley Duongtran is the only person with routine access to your Personal Information, your manuscript, and your project files.
Independent contractors receive access only to what their role requires, only for the duration of the work, and only under a confidentiality agreement. For Audiobook Narration, that means production partners such as the independent proofer who compares the finished audio against your manuscript.
No one else has access.
10. How Long We Keep Your Information
| Category | Retention period |
|---|---|
| Inquiries that do not become projects | 1 year from last contact |
| Client contact and project records | 1 year after your last active project |
| Manuscripts and project files | 1 year after project completion |
| Session Notes | Until you ask us to delete them (Section 11), because series work may return to them years later. |
| Finished audiobook deliverables | 1 year after delivery, per your Service Agreement |
| Invoices and payment records | 7 years, per financial and tax requirements |
| Legal and compliance records | As long as needed to meet legal obligations or resolve disputes |
After the applicable period, data is securely deleted. You can request earlier deletion at any time under Section 11, and we will honor it except where we are legally required to retain a record.
For audiobook clients: OneDrive download links expire 30 days after delivery, and we keep backups for one year. Re-delivery within that year carries a $25 administrative fee. After one year, files are deleted and re-delivery is no longer possible.
11. Your Privacy Rights
We extend the following rights to everyone we work with regardless of where you live:
Know: Request the specific pieces and categories of Personal Information we hold about you, why we collected it, and who we have shared it with.
Access: Request a copy of your Personal Information.
Correct: Ask us to fix information that is inaccurate or incomplete.
Delete: Ask us to delete your Personal Information, subject to records we are legally required to keep.
Portability: Request your information in a structured, commonly used, machine-readable format.
Restrict or object: Ask us to limit how we process your information, or object to a particular use.
Withdraw consent: Where we rely on your consent, you can withdraw it at any time.
Opt out of sale or sharing: We do not sell or share Personal Information. If that ever changes, we will provide a clear opt-out mechanism and notify affected individuals first.
Non-discrimination: Exercising any of these rights will never affect the price, quality, or availability of your Services.
To exercise a right, email ashley@toecurlingtales.com with your name, contact details, and what you are requesting. We respond within 45 days. If we need more time, we will tell you why and when to expect an answer. For your protection, we may ask you to verify your identity before we act on a request.
12. Your Choices and Browser Signals
Newsletter: Unsubscribe from Candlelight Notes using the link at the bottom of any issue.
Cookies: Use the cookie banner on the Website or your browser settings. Full detail is in our Cookie Policy.
Analytics: Opt out of Google Analytics across all websites using the Google Analytics Opt-Out Browser Add-on.
Global Privacy Control (GPC): GPC is a setting some browsers send automatically that asks a website not to sell or share your personal information. Where we receive a GPC signal, we treat it as a request to opt out. We do not sell or share Personal Information in any case, so no further action is needed on your part.
Do Not Track (DNT): DNT is an older browser setting with no agreed technical or regulatory standard behind it, so we do not respond to DNT signals. The options above give you direct control instead.
13. Security
We protect your information with:
Two-factor authentication on accounts holding client data
Encrypted transmission for files and correspondence
Password-protected delivery links with expiration dates
Device-level security software and password protection on all working devices
Access limited to the people described in Section 9
Scheduled deletion under Section 10
No system is completely secure, and we cannot guarantee absolute protection. If a breach puts your Personal Information or your manuscript at meaningful risk, we will contain and assess it immediately, notify you promptly by email, notify regulatory authorities where the law requires it, and tell you what we are changing to prevent a recurrence.
14. International Visitors
We operate from the United States, and information we collect is stored and processed here. If you are accessing the Website or engaging our Services from outside the U.S., your information is transferred to the United States.
We do not have a designated Data Protection Officer. The rights in Section 11 are extended to you regardless, and we handle international data with the same care and security described throughout this Policy.
15. Children’s Privacy
Our Services are for adults. We do not knowingly collect Personal Information from anyone under 18, and we delete it promptly if we learn we have. For children under 13, we follow the Children's Online Privacy Protection Act (COPPA).
Parents or guardians with concerns can reach us at ashley@toecurlingtales.com. We handle these requests in accordance with the Children’s Online Privacy Protection Act (COPPA).
16. Your Responsibilities
Give us accurate information. Correct contact and billing details keep projects and invoices on track.
Keep it current. Tell us when your email address or billing information changes.
Get permission before sharing someone else’s information. If your manuscript, notes, or correspondence include Personal Information about real people—a co-author, a reader whose notes you forward, or someone written into the book—you confirm you have the right to share it with us.
17. Changes to This Policy
We may update this Policy to reflect changes in our practices, our tools, or the law. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will post a notice on the Website and email active clients where the law requires it.
Continuing to use the Website or Services after an update means you accept the revised Policy.
18. Contact
Questions, concerns, or privacy requests:
Toe-Curling Tales
Email: ashley@toecurlingtales.com
2108 N ST #8345, Sacramento, CA 95816
For privacy rights requests, include your full name, contact details, and the specific request. We may need to verify your identity before responding.
We respond within 1–2 business days (Pacific Time). Privacy rights requests can take up to 45 days (Section 11).