Privacy Policy

At BookMadeByAI (accessible at bookmadebyai.com, our progressive web application, and associated tools, collectively referred to as the "Service" or "Platform"), we respect your privacy and are committed to protecting the personal information you share with us.

This Privacy Policy explains what information we collect, how we use and store it, how artificial intelligence ("AI") processing and content safety moderation function, how different visibility levels (public, private, draft, testing, and archived) affect your content, and the rights you have under applicable data protection laws, including Canadian and Québec privacy legislation.

We process personal information solely for legitimate operational and service purposes:

1. Service Delivery & Reading Continuity: Render books, synchronize reading progress across devices, manage your personal library, and maintain offline accessibility.
2. Author Vault & Book Creation: Store, organize, edit, and export your fiction and nonfiction manuscripts, chapter scenes, and story codices.
3. Interactive AI Reading Companion ("Ask AI"): Ground literary companion queries in the specific book context, chapter excerpt, or character codex you are viewing.
4. Authentication & Account Security: Authenticate sessions, prevent unauthorized account takeovers, enforce role-based access, and manage creator permissions.
5. Service Communications: Deliver essential account confirmations, password resets, security notifications, and waitlist updates (via transactional email infrastructure).
6. Platform Safety & Moderation: Screen uploaded and generated text and media with automated safety systems to prevent illegal, explicit, or abusive content.
7. Performance Optimization: Monitor error rates, page load speeds, and edge caching to keep the platform responsive.

BookMadeByAI allows authors to maintain profiles and publish works. To give you full control over who sees your work, the platform clearly distinguishes between distinct visibility states:

BookMadeByAI is a multimedia storytelling platform. In addition to book text, our platform processes and stores diverse forms of media:

• Cover Images: Uploaded by creators, selected from external media repositories, or generated via AI model pipelines.
• Character & Person Imagery: Portraits and entity references attached to Story Codex profiles for fictional characters or historical/nonfiction figures.
• Paragraph Images: Scene illustrations and contextual graphics embedded alongside specific manuscript paragraphs.
• Videos & Video References: Embedded video citations and archival multimedia links (such as YouTube references).
• Audio Assets: Narration, voice audio, foley, sound effects, scene audio, and background music tracks integrated into chapters or ambient soundscapes.
• Profile Assets: Custom author avatars and banner artwork.

All uploaded, selected, or generated media is stored in cloud asset storage and processed solely as necessary to operate, render, transcode, format, and deliver the Service.

To power novel creation tools and our interactive reader companion, BookMadeByAI interfaces with third-party generative artificial intelligence and machine learning inference providers.

To maintain a safe, lawful, and welcoming community, BookMadeByAI employs automated content screening and moderation services (such as Sightengine and safety classification filters) alongside human review:

• Scope of Safety Checks: Automated moderation is not limited to book covers. It applies to all media and content submitted or generated through the platform, including cover artwork, paragraph illustrations, character portraits, author avatars, profile banners, and manuscript text.
• Restricted Categories: Systems screen for prohibited or restricted content, including non-consensual sexually explicit imagery, child exploitation material, extreme gore, violent extremism, weapons, targeted harassment, and unlawful material.
• Enforcement: If content is flagged as violating our safety guidelines or Terms of Service, the platform may reject the upload, block generation, restrict publication, make the content inaccessible, or suspend the offending account.
• Limitations: Automated moderation is designed to assist safety enforcement, but it is not infallible. We encourage users to report any policy violations directly to our support team.

To assist creators in finding illustrations and primary source references, the platform integrates search and display capabilities with external media repositories:

• Pixabay: Media retrieved via Pixabay search is governed by the Pixabay Content License.
• Wikimedia Commons & Wikipedia: Educational photographs, portraits, and summaries are retrieved under Creative Commons (e.g., CC BY, CC BY-SA) or Public Domain declarations, accompanied by licensing metadata.
• Flickr: SafeSearch-filtered imagery governed by the respective creator's selected license terms.
• YouTube Embeds: Video references embedded to provide historical or educational context are delivered directly from YouTube subject to YouTube's Terms of Service.

BookMadeByAI does not own third-party media. Users who select or reference external media remain responsible for adhering to applicable third-party license conditions and attribution requirements.

We partner with industry-leading infrastructure and cloud service providers to maintain high platform security, availability, and data integrity:

• Supabase: Cloud database, authentication management, and row-level encrypted storage. Row-level security policies ensure that private books, notes, and drafts can only be accessed by the authenticated creator.
• Vercel: Global edge delivery network, application hosting, serverless execution, and performance monitoring.
• Resend: Secure transactional email infrastructure used exclusively to deliver essential account emails, including sign-up verification, password resets, account security alerts, and waitlist notifications. We do not sell your email address to commercial marketers.

All communications between your browser, our application servers, and infrastructure providers are encrypted in transit using industry-standard Transport Layer Security (TLS/SSL).

BookMadeByAI uses modern client-side storage technologies to deliver an instantaneous, offline-capable progressive web application (PWA):

• Local Storage: Stores your active reading theme, typography scales, soundscape volume settings, Creator Vault draft autosaves, and reading positions so your experience remains immediate and responsive even when offline.
• Service Worker Caches: Caches application shells, font packages, and offline-enabled books so you can read seamlessly without a continuous internet connection.
• Authentication & Analytics Cookies: Manage secure login session state and collect aggregated, anonymized usage telemetry to improve platform stability.

We believe creators should have clear choices regarding how their data is retained, archived, or erased:

• Archiving Content: Hides your book from public discovery and library shelves while preserving the manuscript, scenes, and codex entries inside your Creator Vault. Archiving is not deletion; you can restore or delete archived items at will.
• Making Content Private: Switches the visibility of a published book so that it is accessible exclusively to you in preview mode.
• Deleting Content: When you delete an individual draft, chapter, paragraph image, or private note, it is permanently removed from active production database tables.
• Deleting an Account: You can delete your account at any time via your account settings. Initiating account deletion permanently erases your profile, authentication identity, reading progress, private bookmarks, notes, reviews, follower relationships, and user-created books from active databases.
• Backup and Retention Exceptions: Like any modern cloud application, BookMadeByAI maintains automated, encrypted routine disaster-recovery snapshots and temporary operational logs. While personal data is immediately removed from active databases upon deletion, residual fragments in encrypted backup archives will cycle out and be permanently overwritten in accordance with standard backup retention windows (typically within 30 to 90 days), or as strictly required by applicable legal obligations or security investigations.

Because BookMadeByAI operates from Canada and the Province of Québec, we comply with applicable Canadian privacy legislation, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Québec's Act respecting the protection of personal information in the private sector (as modernized notably by Law 25).

Depending on your location, you may also benefit from additional regional statutory privacy rights:

BookMadeByAI utilizes cloud hosting, content delivery networks, and AI inference providers that operate infrastructure in Canada, the United States, and other international jurisdictions.

When personal data is transferred across provincial or national borders, it is protected through technical safeguards (such as encrypted transmission) and contractual data protection provisions. You acknowledge that data stored or processed in other jurisdictions may be subject to the lawful access requests of courts, law enforcement, and national security authorities of those foreign jurisdictions in accordance with their local laws.

BookMadeByAI is not directed to children under 13 years of age (or under 14 in Québec, or 16 in the European Economic Area). We do not knowingly collect personal information from children without verified parental consent. If we learn that personal data of a minor has been collected without appropriate consent, we will take prompt operational steps to delete that data.

We may update this Privacy Policy from time to time to reflect improvements in our platform functionality, changes in AI model integrations, or evolving statutory requirements. When updates occur, we will revise the "Last Updated" date at the top of this document and, for material modifications, provide prominent notice across the Service.

If you have questions, wish to exercise any of your privacy rights, or wish to reach our Privacy Officer, please contact us: