This policy explains what personal data EbookMit collects, why, who processes it for us and the choices you have. We collect only what we need to run the service and never sell personal data.
1. What we collect
Account data: your name, email address, password hash (never the password itself), and your Google account identifier if you sign in with Google.
Content: the books, outlines, notes, images and topic searches you create or upload.
Billing data: your plan, payments and credit history. Card and PayPal details are entered on Stripe's or PayPal's pages and are never stored by us; we keep their customer and payment references.
Usage data: the AI tasks you run, their token and image counts and cost, sign-in sessions with IP address and browser, and technical logs used to keep the service secure and working.
2. Why we use it
To provide the service (generate and store your books, export files), to bill you and send receipts, to send account emails (verification, password reset, book ready, payment problems, low credits), to prevent abuse, and to understand costs and improve the product. We do not use your books to train AI models.
3. Who processes data for us
Hosting and database: Railway. AI generation: OpenAI, Anthropic and Google (the text of your book and image prompts are sent to the model chosen for each step). Image and file storage: Cloudinary. Email: Resend. Payments: Stripe and PayPal. Topic discovery sends only your keywords to Etsy's API and SerpApi.
Each provider processes data under its own terms and only to deliver its part of the service.
4. How long we keep it
Account data and books are kept while your account is open. Payment records are kept as long as tax and accounting law requires. Demo accounts and everything in them are deleted at the next daily reset. Logs are kept for a limited time for security.
5. Your rights
You can see and edit your profile in the app, export your books at any time, and ask us to access, correct or delete your personal data by writing to support@ebookmit.com. Depending on where you live (for example under the GDPR or CCPA) you may have further rights, including objecting to processing and complaining to a data protection authority.
6. Cookies
We use a session cookie to keep you signed in and to protect your account. We store your display preferences (such as light or dark mode) in your browser. We do not use advertising cookies.
7. Security
Passwords are hashed, connections are encrypted, finished files are only downloadable after an ownership check, and internal services authenticate every request. No system is perfectly secure; if we learn of a breach affecting you we will tell you promptly.
8. Children
EbookMit is not for children under 16 and we do not knowingly collect their data.
9. Changes and contact
We will post changes here and email you about significant ones. Questions or requests: support@ebookmit.com.