1. Information We Collect

When you use Draft My Book, we collect information you provide directly:

Email address (for your account, receipts and delivery)
Author name (for book covers)
Book ideas and content you submit for generation
Payment information (processed securely by Stripe)
Photographs you upload, including photographs of people, when you make a roast or use a photo as a character reference. These are stored with the book they belong to.
Cover images you upload as a style reference. These are read once and not stored.
Manuscript files you upload so we can suggest a cover. Only an extract is read, and the file is not stored.
Basic usage data: pages visited, how you arrived, and session recordings (see Cookies below)

2. How We Use Your Information

We use your information to:

Generate your books and deliver them to you
Process payments and send receipts
Send transactional emails about your orders
Send occasional emails about new features and offers. Every one has an unsubscribe link, and using it stops them.
Measure advertising, which involves sharing a one-way hashed version of your email address with advertising platforms so they can tell whether an advert led to a sign-up. They cannot read your address from the hash.
Improve our services and user experience
Respond to support inquiries

3. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Stripe for payment processing, which is PCI DSS compliant. We do not store your full credit card information on our servers. Book content and user data are stored on secure cloud infrastructure with encryption at rest.

4. Data Sharing

We do not sell your personal information, and we never share the contents of your books. We share data with:

Payment processors (Stripe) to complete transactions
Cloud service providers who host the site and its data
The providers who generate text and images from what you submit, so that your book can be written and illustrated
Advertising platforms (Google and Reddit), which receive a one-way hashed email address for measuring adverts, never a readable one
Analytics providers (Google Analytics, Microsoft Clarity and Vercel Analytics), as described under Cookies
Email delivery providers, so that our emails reach you
Law enforcement if required by law

Under some privacy laws, including the CCPA, sharing hashed identifiers with advertising platforms can count as a sale or share of personal information. You can stop it by declining analytics cookies, or by writing to us at the address at the bottom of this page.

5. Your Rights

You have the right to:

Access your personal data
Request deletion of your data
Update or correct your information
Opt out of marketing communications

6. Cookies

We use essential cookies to maintain your session and preferences. We may use analytics cookies to understand how visitors use our site. You can disable cookies in your browser settings.

We use Google Analytics and Microsoft Clarity to measure how our pages perform. Microsoft Clarity records how visitors interact with our pages, including clicks, scrolling, and navigation, so we can find and fix confusing steps. These recordings exclude the contents of password fields and payment details, which are handled entirely by Stripe. If you decline analytics cookies, these tools run without storing cookies on your device. See the Microsoft Privacy Statement for details on how Microsoft processes this data.

We also load Vercel Analytics, which counts page views without cookies, and two advertising trackers: Google Ads conversion tracking and the Reddit advertising pixel. Both exist to tell us whether an advert led to a sign-up or a purchase, and both may receive a one-way hashed version of your email address. If you decline analytics cookies, Google is told not to store or personalise advertising data and Reddit is told not to set its own cookies, so both run without storing anything on your device.

7. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children under 18.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through our website.

9. Contact Us

For privacy-related questions, contact us at lhllparis@gmail.com

Privacy Policy