Privacy Policy

At BookNova.ai, we take your privacy seriously. This Privacy Policy explains how IMAGE LLC ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our AI-powered PDF book generation service.

1. Information We Collect

1.1 Information You Provide Directly

When you use BookNova.ai, we collect information that you provide to us directly:

• Account Information: Name, email address, password (encrypted), and account preferences
• Payment Information: Processed securely through Paddle (our payment processor). We do not store your credit card details on our servers
• Book Content: Book titles, author names, topics, generated content, table of contents, and AI-generated images
• User Settings: Language preferences, book quality settings, tone preferences, and customization options
• Communications: Messages, feedback, and support inquiries you send to us

1.2 Information Collected Automatically

When you access BookNova.ai, we automatically collect certain technical information:

• Usage Data: Features used, books generated, time spent on the platform, and actions taken
• Device Information: IP address, browser type, operating system, device type, and screen resolution
• Log Data: Access times, pages viewed, error logs, and referral URLs
• Cookies and Tracking: Session cookies, authentication tokens, and analytics data (see Section 6 for details)
• Advertising and Attribution Data: A first-party visitor identifier, the advertising campaign tag in the link you arrived through, advertising click identifiers passed in the URL by ad platforms (for example Meta, Google, Microsoft, Reddit and TikTok click IDs), UTM parameters, the referring website, the pages you viewed and how far you scrolled. We use this to determine which marketing channel brought you to us and to measure whether it converts (see Sections 5.4 and 6)

1.3 Information from Third Parties

• Payment Processor (Paddle): Transaction confirmations, payment status, and billing information
• Analytics Services (Google Analytics): Anonymized usage statistics and demographic data

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 Service Delivery

• Generate AI-powered book content based on your specifications
• Create and manage your user account
• Process payments and manage billing
• Store your book projects and generated content
• Provide customer support and respond to inquiries
• Deliver product updates and service notifications

2.2 Service Improvement

• Analyze usage patterns to improve our AI algorithms
• Identify and fix technical issues
• Develop new features and functionality
• Conduct research and analytics to enhance user experience
• Monitor service performance and optimize infrastructure

2.3 Security and Legal Compliance

• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service
• Comply with legal obligations and respond to legal requests
• Protect our rights, property, and safety, as well as those of our users

2.4 Marketing (With Your Consent)

• Send promotional emails about new features and special offers (you can opt out at any time)
• Display personalized recommendations

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We only share your data in the following limited circumstances:

3.1 Service Providers

We work with trusted third-party service providers who help us operate BookNova.ai:

Provider	Purpose	Data Shared
Paddle	Payment Processing	Name, email, billing information
Google Analytics	Usage Analytics	Anonymized usage data, IP address
Cloud Hosting (EU Servers)	Data Storage	All user data (encrypted)
AI Services	Content Generation	Book topics, content requests

All service providers are contractually bound to protect your data and use it only for the specified purposes. They are GDPR-compliant and located within the European Union or have adequate data protection safeguards.

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to:

• Comply with legal obligations
• Protect our legal rights and enforce our Terms of Service
• Prevent fraud, security threats, or illegal activities
• Protect the safety and rights of our users and the public

3.3 Business Transfers

If IMAGE LLC is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website before your data is transferred.

3.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

4. Data Security

We implement industry-standard security measures to protect your personal information:

4.1 Technical Security Measures

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Secure Authentication: Passwords are hashed using bcrypt with strong salt
• Access Controls: Role-based access restrictions and multi-factor authentication for administrative access
• Regular Security Audits: Periodic vulnerability assessments and penetration testing
• Secure Infrastructure: Data stored on secure EU-based servers with DDoS protection and firewall protection
• Backup and Recovery: Regular automated backups with secure off-site storage

4.2 Organizational Security Measures

• Limited employee access to personal data on a need-to-know basis
• Confidentiality agreements with all employees and contractors
• Security awareness training for all team members
• Incident response plan for data breaches

Important: While we take extensive precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

5.1 Active Accounts

• Account Data: Retained while your account is active
• Book Projects: Retained while your account is active and for 90 days after account deletion (to allow recovery)
• Usage Logs: Retained for 12 months for security and analytics purposes

5.2 Deleted Accounts

• Personal information is permanently deleted 90 days after account deletion request
• Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention, financial records)
• Anonymized usage statistics may be retained indefinitely for analytics

5.3 Backup Data

Deleted data may persist in encrypted backups for up to 90 days before being permanently purged.

5.4 Visitor Analytics and Attribution Data

Visit records described in Section 1.2 (visitor identifier, marketing source, click identifiers, referring website, pages viewed, IP address and country) are stored separately from your account and are retained indefinitely. We keep them because marketing attribution, refund and chargeback investigations, and year-over-year channel reporting all require comparison against historical periods.

These records are keyed to a visitor identifier rather than to your name, but where you have made a purchase they can be linked to your customer record, and we therefore treat them as personal data. You can ask us to erase them at any time under Section 7.3 by contacting us at the address in Section 13; deletion of your account does not automatically remove them.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on BookNova.ai.

6.1 Cookies We Set Ourselves

These are first-party cookies, set by BookNova.ai on your device:

Cookie	Purpose	Duration
Authentication cookies	Keep you signed in to your account and protect the session	Session / 30 days
unique_code	Visitor identifier. Links your visits together so we can tell which marketing channel brought you to us and whether it led to a purchase	1 year, renewed on each visit
code	Marketing campaign tag from the link you arrived through	90 days
_fbc	Meta advertising click identifier, reconstructed from the click parameter in the URL you arrived with	90 days
tool_uid	Identifies your browser to our free AI tools so that usage limits and abuse protection can be applied	1 year
trial_offer_end	Keeps a limited-time offer countdown consistent across page reloads	2 hours

Renewal: the unique_code cookie is refreshed on every visit, so for a regularly returning visitor it does not expire in practice. It expires one year after your last visit.

6.2 Third-Party Advertising and Analytics Cookies

Advertising and analytics platforms set their own cookies on our pages: Google Analytics and Google Ads (_ga, _ga_*, _gcl_aw), Meta (_fbp), Reddit (_rdt_uuid), and, where their tags are active, Microsoft Advertising and TikTok. Their duration is set by those providers, not by us, and can be up to two years.

We read the values of these cookies and store a copy alongside your visit record, so that a purchase can be matched back to the advertisement that led to it. That copy is retained as described in Section 5.4.

6.3 Local Storage

We also store your visitor identifier and marketing source in your browser's local storage (bn_uc, bn_src). This is a fallback for browsers that block or discard cookies: without it, each page view would look like a new visitor and the source of a purchase would be lost. Local storage entries have no expiry date and remain until you clear your browser's site data.

6.4 Legal Basis and Managing Cookies

Authentication cookies are strictly necessary to provide the service you have asked for. The analytics and advertising cookies described in Sections 6.1 to 6.3 are set when you arrive on the site, on the basis of our legitimate interest in measuring which marketing channels work and in preventing abuse of our free tools. You can object to this processing at any time under Section 7.6, and you can control or remove these cookies yourself:

• Accept all cookies: For full functionality
• Block third-party cookies: Blocks third-party advertising and analytics cookies while allowing essential cookies
• Block all cookies: May impair functionality of BookNova.ai
• Clear site data: Removes both our cookies and the local storage entries described in Section 6.3

To opt out of Google Analytics tracking, visit: Google Analytics Opt-out

7. Your Privacy Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

7.1 Right to Access

You can request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format within 30 days.

7.2 Right to Rectification

You can update or correct inaccurate personal information through your account settings or by contacting us.

7.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data. We will comply unless we have a legitimate reason to retain it (e.g., legal obligations, fraud prevention).

7.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

7.5 Right to Data Portability

You can request a copy of your data in a portable format to transfer to another service.

7.6 Right to Object

You can object to processing of your data for direct marketing or based on legitimate interests.

7.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time.

7.8 Right to Lodge a Complaint

You can file a complaint with your local data protection authority if you believe your rights have been violated.

8. International Data Transfers

Your personal data is primarily stored and processed within the European Union. If we transfer data outside the EU, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized data transfer mechanisms

9. Children's Privacy

BookNova.ai is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

If we become aware that we have collected data from a child under 18, we will delete that information immediately. If you believe we have collected data from a child, please contact us at [email protected].

10. Third-Party Links

BookNova.ai may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party services you visit.

11. AI Content and Privacy

When you use our AI book generation service:

• Your book topics and content requests are processed by AI systems to generate content
• We do not use your generated content to train AI models without your explicit consent
• Your book content is private and visible only to you unless you choose to share it
• We may analyze anonymized usage patterns to improve AI quality

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email to your registered email address
• Display a prominent notice on BookNova.ai

Your continued use of BookNova.ai after changes to this Privacy Policy constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Response Time: We aim to respond to all privacy inquiries within 5 business days and will fully address your request within 30 days as required by GDPR.

By using BookNova.ai, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.