Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us when you register on our platform, subscribe to our services, or interact with our tools. This includes:

• Account credentials (email address, name, profile image) managed via Clerk.
• Billing and transaction data (processed securely through Stripe or Paddle).
• Generated files, including book outlines, covers, and puzzle interiors.

2. How We Use Your Information

We use the collected information for the following purposes:

• To provide, maintain, and optimize the book creation tools.
• To manage your account, authentication states, and billing subscriptions.
• To send periodic newsletters, updates, and promotional materials (with a one-click unsubscribe option).
• To protect our platform and users from fraud or malicious activities.

3. GDPR Legal Bases for Processing

If you reside in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the data concerned and the context in which we collect it:

• Performance of a Contract: To fulfill our service agreement and provide you with studio tools.
• Consent: When you opt-in to marketing updates or cookies.
• Legitimate Interests: To improve our platform security and service quality.

4. Third-Party Data Processors (Subprocessors)

To deliver our services, we share data securely with the following GDPR-compliant subprocessors:

• Clerk Inc.: User identity management, authentication, and security services.
• Supabase / Prisma: Secure hosting and management of our user databases.
• Vercel Inc.: Hosting of our web applications and serverless backend instances.
• Stripe / Paddle: Processing transactions and invoice billing securely (PCI-DSS compliant).

5. International Data Transfers

Our infrastructure resides primarily on secure cloud databases in Singapore, the United States, and the European Union. By using our platform, you acknowledge that your information may be transferred and processed in these locations. We protect all transfers using standard contractual clauses (SCCs) to maintain the safety of your personal data.

6. Your Rights under GDPR / CCPA

As a user, you have complete control over your personal data. Under GDPR, you have the following rights:

• Right of Access & Rectification: You can view and update your details inside your account profile.
• Right to Erasure (Right to be Forgotten): You can request to delete your account and all associated books by contacting us at [email protected].
• Right to Data Portability: You can request a copy of all your generated data.
• Right to Restrict Processing: You can object to processing based on legitimate interests.

7. Changes to This Privacy Policy

We reserve the right to modify this privacy policy at any time. Changes will be posted immediately on this page, and the "Last Updated" date will reflect the revision.