Privacy Policy

1. Data We Collect

We collect the following information when you use BookSmith:

• Account information — your email address and name, provided during registration
• Payment information — processed securely through Stripe; we do not store your full card details
• Book content — manuscripts, outlines, chapter drafts, and other content you create on the platform
• Usage analytics — how you interact with the platform, including pages visited, features used, and generation history

2. How We Use Your Data

• Account management — to create and maintain your account, authenticate your sessions, and communicate with you
• Book generation — to process your inputs and deliver AI-generated content through our platform
• Payment processing — to handle credit purchases, subscriptions, and refunds
• Service improvement — to understand usage patterns and improve the platform experience

3. Third-Party Services

We use the following third-party services to operate BookSmith:

• Supabase — database hosting and user authentication
• Stripe — payment processing and billing management
• Anthropic — AI content generation
• Vercel — application hosting and deployment

Each of these services has its own privacy policy. We only share the minimum data necessary for each service to function.

4. Data Retention

Your account data and book content are retained for as long as your account is active. If you delete your account, all associated data will be permanently removed from our systems within 30 days. Anonymized, aggregated usage statistics may be retained indefinitely for service improvement purposes.

5. Your Rights

You have the right to:

• Access — request a copy of all personal data we hold about you
• Correction — update or correct inaccurate personal data
• Deletion — request deletion of your personal data and account
• Data export — download your data in a portable format

To exercise any of these rights, contact us at support@booksmith.ai.

6. Cookies

BookSmith uses session cookies strictly for authentication and maintaining your login state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required because we only use essential cookies necessary for the service to function.

7. GDPR and CCPA Compliance

BookSmith complies with both the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Under either regulation, you can request complete deletion of your personal data by contacting us. We will process deletion requests within 30 days. We do not sell your personal data to third parties.

8. Contact

For privacy-related questions or requests, contact us at support@booksmith.ai.