How we handle your work, your data, and you.

At aibookgenerator.org ("we," "us," or "our"), part of Reflective AI, LLC, we respect your privacy and are committed to protecting the personal information you share with us through our website and services. This Privacy Policy explains how we collect, use, and share your information when you use aibookgenerator.org ("Services") and outlines your rights and choices concerning your personal information.

By accessing or using our Services, you agree to the terms of this Privacy Policy and the processing of your personal data as described below. This policy applies to all users, including those who use our Services without creating an account.

We collect several types of information from users to provide and improve our Services. This information may include:

1.1. Information You Provide Directly

• Contact Information: We may collect your name, email address, and other contact details when you sign up for an account, subscribe to a paid plan, or contact us directly.
• Account Information: When you create an account, we collect information such as username, password, and any profile details you choose to share.
• Payment Information: For paid subscriptions, we collect billing details and payment information. Payment card details are processed directly by our payment processor (Stripe) and are never stored on our servers.
• Content You Create: You may provide specific prompts, text, or details for the book content you wish to generate ("Input"). We also store the content generated by the Services ("Output") in your account. See Section 2 for how we use this data.
• Feedback: Any voluntary feedback or suggestions you provide about our Services.

1.2. Information We Collect Automatically

• Usage Information: We collect information about how you interact with our platform, such as pages viewed, features used, clicks, and other interactions to improve the user experience.
• Device Information: We may collect details about the device you use to access our Services, including device type, operating system, IP address, and browser information.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to collect data about your preferences and activity on our website. See Section 4 for details on the specific technologies we use.

1.3. Unauthenticated Users

You may use certain features of our Services without creating an account. In this case, we collect only: (a) technical data such as IP address, browser type, device information, and operating system; (b) usage data such as pages visited, features used, and session duration; (c) content you provide during your session (prompts and generated output). We do not associate this data with a personal identity. Content generated during unauthenticated sessions is available only during your active session and is not permanently stored on our servers. We recommend that unauthenticated users export any content they wish to keep before ending their session.

We use the information we collect to:

• Provide and maintain our Services, including the generation of AI-powered book content;
• Manage your account and process subscription payments;
• Personalize your experience and enhance the quality of book generation based on your inputs;
• Improve our Services through aggregated, anonymized analytics and usage trends;
• Communicate with you regarding updates, promotional offers, and customer support;
• Detect, prevent, and address security issues, fraud, and abuse;
• Ensure compliance with applicable laws and our Terms of Service.

2.1. AI Model Training

We do not use your Input, Output, or any content you create through our Services to train, fine-tune, develop, or improve any artificial intelligence or machine learning models. Your content is processed solely to generate the specific output you request and to provide the Services. This commitment applies to all users regardless of account type or subscription tier, including free-tier and unauthenticated users. Our third-party AI model providers (accessed via API) are also contractually prohibited from using API-submitted data for model training.

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. However, we may share your data under the following circumstances:

3.1. Service Providers

We share your information with trusted third-party service providers who assist with our operations. These providers are contractually obligated to protect your information and only use it for the purposes specified by us. Our key service providers include:

• Payment processing: Stripe
• Hosting and infrastructure: Vercel
• Database: Supabase
• Analytics: PostHog
• AI model providers: OpenRouter, Groq (these providers process your Input to generate Output via API and do not use your data for model training)
• Background job processing: Inngest

3.2. Legal Compliance

We may disclose your personal information to government authorities or third parties if required by law, subpoena, or other legal process, or if necessary to protect our rights, users, or the public.

3.3. Business Transfers

In the event of a merger, acquisition, or sale of our business, your information may be transferred as part of the transaction. We will notify you of any such change in ownership and any changes to how your personal information will be used.

We use cookies and similar technologies to operate and improve our Services. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Services to function (authentication, security, session management). These cannot be disabled.
• Analytics Cookies: Help us understand how users interact with our Services so we can improve them. We use PostHog for product analytics.
• Functional Cookies: Remember your preferences and settings (such as theme or language choices) to provide a personalized experience.

We do not use marketing or advertising cookies. You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our Services.

We retain different types of data for different periods based on legal requirements and business necessity:

• Account data (name, email, preferences): duration of account plus 30 days post-deletion.
• Generated content (books, chapters, scenes): duration of account plus a 30-day export window after account termination.
• Billing and transaction records: 7 years (per IRS record-keeping requirements).
• Support correspondence: 3 years from resolution.
• Server and access logs: 90 days.
• Anonymous session data: 30 days.
• Exported files (EPUB/PDF): not retained after delivery to user.

After the applicable retention period, data is permanently deleted or irreversibly anonymized. You may request deletion of your personal information at any time by contacting us; we will process your request within 30 days, subject to any legal retention requirements.

Depending on your location, you may have the following rights regarding your personal information:

• Access and Portability: You can access and export your personal information and generated content through your account settings.
• Rectification: You can update or correct your personal information through your account settings.
• Deletion: You can request the deletion of your personal information by contacting us at legal@aibookgenerator.org.
• Opt-Out of Communications: You can opt out of receiving promotional emails by following the unsubscribe link provided in the emails. You cannot opt out of transactional communications (such as billing confirmations or security alerts).

To exercise any of these rights, contact us at legal@aibookgenerator.org. We will respond within 30 days.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR).

7.1. Legal Bases for Processing

We process your personal data under the following legal bases:

• Contract performance — to provide the Services you requested (account creation, content generation, payment processing).
• Legitimate interests — for analytics, security, fraud prevention, and service improvement, where these interests are not overridden by your rights.
• Consent — for marketing communications and non-essential cookies, which you may withdraw at any time.
• Legal obligation — to comply with applicable laws, such as tax and financial record-keeping requirements.

7.2. Your GDPR Rights

In addition to the rights listed in Section 6, you have the right to:

• Restrict processing of your personal data;
• Object to processing based on legitimate interests;
• Withdraw consent at any time (without affecting the lawfulness of prior processing);
• Lodge a complaint with your local data protection supervisory authority.

7.3. International Transfers

Your data may be transferred to the United States, where our servers and service providers are located. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to safeguard these transfers and ensure an adequate level of data protection.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions (such as tax record-keeping).
• Right to Opt-Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights (e.g., by denying services, charging different prices, or providing a different quality of service).

To exercise these rights, contact us at legal@aibookgenerator.org. We will verify your identity before processing your request and respond within 45 days.

We implement reasonable administrative, technical, and physical measures to protect your personal information, including encryption in transit and at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute protection of your data. If we become aware of a security breach affecting your personal information, we will notify you in accordance with applicable law.

Our Services are not intended for, and should not be used by, individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a person under 18, we will delete that information as quickly as possible. If you believe a minor has provided us with personal information, please contact us at legal@aibookgenerator.org.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you via email (if you have an account) or by posting a prominent notice on our website at least 30 days before the changes take effect. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions or concerns about this Privacy Policy, wish to exercise your data rights, or want to file a complaint, please contact us at:

Reflective AI, LLC
Email: legal@aibookgenerator.org