1. Who is responsible and how to contact us

draftmybook is the trading name of a business operated by an individual entrepreneur. For questions about how the service handles personal information or to exercise your rights, contact support@draftmybook.com.

2. Information used to provide the service

Account information, such as your name, email, password hash or Google sign-in information, and verification status.
Your ideas, instructions, author names, uploaded reference images, generated text, illustrations and book files. Character photographs may be saved with the project. Avoid submitting information about other people without an appropriate right to do so.
Order, subscription and credit records, payment references and billing status. Stripe handles payment details; draftmybook does not store your full card number.
Support messages, withdrawal notices, email delivery records, technical logs, security information and your saved privacy choices.

Account and project information is needed to save and deliver your work. Without the information needed for an order, we cannot fulfil that order. Optional analytics and advertising choices are separate from purchasing or using the core service.

3. Purposes and legal bases

Providing the contract: creating and managing your account, generating and storing your books, delivering files, handling payment and subscription requests, and related service messages.
Legal obligations: accounting records, consumer requests and other obligations applicable to the business.
Legitimate interests: protecting accounts, preventing misuse, investigating errors and addressing support issues, subject to your rights and interests.
Your consent: optional analytics and advertising tools. Agreeing to website tracking does not subscribe you to promotional emails.

Service messages include verification, order and account notices. Bulk promotional campaigns are currently paused. For promotional-email preferences or an objection to direct marketing, contact support@draftmybook.com. Such requests do not prevent essential messages about a transaction or your account.

4. Providers and recipients

Generating a book requires sharing relevant instructions and reference material with AI providers, including Google Gemini. Hosting and database providers store and process account and project data. Stripe processes payments, Google supports Google sign-in, and email delivery providers deliver service messages. Authorised support access may be needed to investigate a problem with a project.

Submitting a book for generation does not automatically publish it to a marketplace. Processing by service providers is different from publishing the book to the public. Information may also be disclosed where required by law or necessary to establish or defend legal claims.

If you enable optional tracking, the providers described below may receive usage, device and event information. We do not include your account email in our advertising event payloads. Advertising identifiers are personal data even when pseudonymous or hashed.

5. Cookies and optional measurement

Essential storage supports sign-in, security, saved preferences and requested features. Optional tracking is off until you choose it. Use Cookie settings in the site footer to accept, reject or change the separate categories at any time.

Analytics: Google Analytics, Microsoft Clarity and Vercel Analytics help measure visits and interactions. Clarity can record interactions such as clicks, scrolling and navigation. These tools load only when analytics is allowed.
Advertising: Google advertising measurement, Meta and Reddit help attribute visits, sign-ups and purchases to advertising. They may use cookies and device or event identifiers. Advertising requires the marketing choice; accepting analytics alone does not enable it.

Withdrawing a choice stops future optional processing controlled by that choice. It does not undo processing that was lawful before withdrawal. You can also clear site data through your browser. Providers may apply their own retention rules to information already received.

6. Storage, retention and international processing

Account and book records support your saved library while you keep an account. Retention also depends on the record's purpose: fulfilling orders, resolving support requests, preventing misuse, meeting accounting duties, and handling claims. A deletion request is assessed across these purposes; records still required by law or for a valid legal claim may be retained with restricted use.

Service providers may process information outside the European Economic Area, including in the United States. International transfers must have an applicable legal basis, such as an adequacy decision or appropriate contractual safeguards. Contact support@draftmybook.com for information about the providers and safeguards relevant to your data. This policy does not imply that all data stays in France or the EU.

We use access controls and encrypted connections to protect data. No internet service can guarantee absolute security. Do not submit payment-card numbers, passwords or unnecessary sensitive information in book prompts or support messages.

7. Your privacy rights

Depending on the processing and applicable law, you can request access, correction, erasure, restriction and portability of your personal data, object to processing based on legitimate interests, and withdraw consent. You may object to direct marketing at any time. Some rights have legal exceptions, including required financial recordkeeping.

Send requests to support@draftmybook.com. We may ask for proportionate information to verify your identity. Under the GDPR, the usual response period is one month; an extension is possible where the law permits, with notice to you.

You may complain to the French data protection authority, the CNIL, or the competent authority where you live or work in the EU. You do not have to contact us first.

8. Adults and policy updates

The service is intended for adults aged 18 and over. If you believe a child has supplied personal information, contact us so we can investigate.

We may update this notice as the service changes. Material changes will be brought to your attention through the site or an appropriate account notice. A notice update does not itself grant consent to new optional processing.

Privacy Policy