Privacy Policy

Last updated: November 7, 2026

BookFoundry AI respects your privacy and is committed to protecting personal information collected through the use of our platform. This Privacy Policy explains how data is collected, used, stored, and safeguarded when accessing or using BookFoundry services.

BookFoundry AI is provided by Nearby Software Inc., a company based in Canada, which is responsible for your personal data as described in this policy. You can reach us at [email protected].

Information We Collect

We may collect limited personal and technical information necessary to operate the platform effectively. This may include account details such as email address, authentication identifiers, usage activity, system logs, device information, and other technical metadata.

For account security and statistics we record each sign-in with its date and time, the IP address, the country derived from it, and basic device details (browser, language, time zone). We do not store your city or precise location. This record is kept for one year, and deleted sooner if you delete your account.

Payment information is processed exclusively by third-party payment providers. BookFoundry AI does not store, process, or have access to complete payment card details.

Information from Sign-in Providers (Google, Apple, Microsoft, Yahoo)

When you sign in with Google, Apple, Microsoft or Yahoo, the provider shares a limited set of profile information with BookFoundry AI: your name, email address, profile picture (where the provider offers one), and a unique identifier for your account. We do NOT receive your password, contact list, calendar, files, or any other data from your Google, Apple, Microsoft or Yahoo account.

This data is used solely to create and maintain your BookFoundry AI account, authenticate you on subsequent visits, and personalize the interface (for example, to display your name in the dashboard). We do not use sign-in data for advertising, do not share it with third-party marketers, and do not sell it.

You may revoke BookFoundry AI's access to your sign-in provider at any time through your provider's security settings (Google Account > Security > Third-party apps; Apple ID > Sign in with Apple; Microsoft Account > Privacy > Apps and services). Revoking access does not automatically delete your BookFoundry AI account; to request account deletion, see the User Rights section below.

Third-Party Service Providers

To operate the platform we rely on the following third-party service providers, who process limited personal data on our behalf strictly to deliver the service:

• Google Firebase (authentication, database, hosting) stores your account credentials, profile data, and application content.
• Vultr and Hetzner (Germany) host our servers, Cloudflare delivers and protects our website traffic, and Backblaze B2 stores our backups.
• Stripe processes web payments. Stripe receives card details directly; we never see or store them.
• PayPal and NOWPayments (cryptocurrency payments, where offered) process payments made through them. They receive the payment details directly; we never see or store them.
• Apple App Store, Google Play and Huawei AppGallery process in-app purchases on their devices. Their privacy policies govern those transactions.
• Brevo sends our emails on our behalf, including account and order emails and, unless you opt out, emails about features and offers.
• AI model providers (Google Gemini, and OpenAI for some speech and translation features) receive the content needed for the feature you use, which can include text, images and voice audio. They process it under their business terms, which do not allow them to use it to train their models.
• Google Analytics measures how our website is used and how well our marketing works, as described under Cookies below.
• GeoJS receives your IP address to estimate your country, region and time zone, which we use for sign-in security records, local prices and payment options, the timing of notifications, and the right cookie notice.
• Firebase Cloud Messaging and Huawei Push deliver app notifications to your device using a device token.

Each provider operates under its own privacy policy and security commitments. We choose providers with strong data protection track records and bind them by contract to handle data only as required to deliver the service.

How Information Is Used

Collected information is used strictly for legitimate business purposes, including operating the platform, delivering services, managing user accounts and subscriptions, improving system performance, detecting abuse, and maintaining security and compliance.

We do not sell, rent, or trade personal data to third parties.

We send emails about your account and your orders. We also send occasional emails about features and offers; each one has an unsubscribe link, and you can turn them off at any time.

Legal Bases for Processing

Where the law requires a legal basis for processing personal data, we rely on the following:

• Performance of our contract with you: creating and running your account, making the books and other work you request, processing payments, and providing support.
• Our legitimate interests: keeping the service and your account secure, preventing fraud and misuse, enforcing our policies, improving the service, and sending you emails about features and offers, which you can turn off at any time.
• Your consent: analytics cookies where the law requires consent. You can withdraw consent at any time.
• Legal obligations: keeping financial records, handling copyright and other legal notices, and responding to lawful requests from authorities.

Cookies and Local Storage

We use strictly necessary cookies and browser local storage to keep you signed in, remember your language and protect your account. We also use Google Analytics, with your consent where the law requires it, to understand how the website is used and to measure our marketing, which can include Google's advertising measurement features. Inside our mobile apps, Google Analytics, including its advertising measurement features, is enabled.

For details and controls, see our Cookie Policy at /cookies.

Data Storage & Security

Reasonable administrative, technical, and organizational safeguards are implemented to protect stored data. Despite these measures, no method of electronic storage or transmission can be guaranteed to be completely secure.

By using the platform, you acknowledge and accept this inherent risk.

International Data Transfers

We and our providers process personal data in several countries, including the United States and Germany. Where the law requires it, these transfers are protected by appropriate safeguards, such as the standard contractual clauses included in our providers' data processing terms.

Review of User Content

To improve the reliability and quality of the Service, user content may be reviewed on a limited basis by automated systems or authorised personnel where necessary, including for the purposes of quality assurance, error detection, handling support requests, and preventing misuse. This review is carried out under security controls and restricted access procedures, and the content is not used for any purposes other than those set out in the Privacy Policy and the Terms of Service. By using the Service, you acknowledge that this processing may be a necessary part of operating and improving the Service.

Automated Content Checks

Before a book is created, an automated system checks the request for prohibited sexual content. If it refuses a request, you are not charged, and we keep the text of the refused request in your account so our team can review it if you contact us. You can ask for a human review through support at any time.

Content You Choose to Make Public

Your books are private by default. If you create a public author profile or share a book through a public reading link, the name, biography, photo and content you choose to publish can be seen by anyone, and may be copied or indexed by others.

Data Retention

Personal information is retained only for as long as necessary to provide the services, comply with legal obligations, resolve disputes, and enforce agreements.

Specific periods: sign-in records are kept for one year; your account data is kept while your account is active; after you ask to delete your account, it is deleted once a 30-day grace period ends; refused requests are kept until your account is deleted; financial records are kept for as long as tax and accounting laws require.

User Rights

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of personal data associated with your account. Requests may be submitted by contacting support.

Certain data may be retained where required by law or for legitimate business purposes.

If you reside in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) gives you specific rights, including the right to access, rectify, erase, restrict processing of, port, and object to processing of your personal data, as well as the right to lodge a complaint with your local supervisory authority.

If you reside in California, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information is collected about you, the right to delete it, and the right to opt out of any sale. We do not sell personal information.

Residents of Canada, Brazil and other countries have similar rights under their own privacy laws, such as PIPEDA and the LGPD. To exercise any of these rights, contact [email protected].

Account Deletion

You can delete your account at any time from your account settings, or by emailing [email protected] from the email address associated with your account. Deletion starts with a 30-day grace period, during which you can change your mind. When it ends, we permanently delete your account profile and your book records. If you also want the stored copies of your book files removed from our storage and backups, email [email protected] and we will delete them, except where retention is required by law (for example, financial records for tax purposes).

Revoking the third-party sign-in connection (Google, Apple, Microsoft) does not by itself delete your BookFoundry AI account or its data. Use the deletion request above to remove both.

Children's Privacy

BookFoundry AI is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children below that age. If we learn that a child has provided personal information to us, we will delete it as soon as practicable.

Age-Restricted Content and Safety Enforcement

BookFoundry.ai supports lawful creative and written work of every kind, from picture books to novels, memoirs and non-fiction. Books for adults may involve mature themes. Access to designated adult-only features is restricted to users aged 18 or older who satisfy all applicable legal age requirements.

When you confirm your age, we record that confirmation together with its date, the version of the statement you accepted and the language it was shown in. We do not ask for or store your date of birth or any identity document.

BookFoundry.ai strictly prohibits, in any form (including text, images, covers, illustrations and audio), sexually explicit or pornographic content, sexual abuse or exploitation of minors, sexualized depictions of minors (including fictional or AI-generated material), non-consensual sexual content, and any other content prohibited by applicable laws or app store and platform policies.

Users must not circumvent content safeguards or misrepresent their eligibility to access restricted features.

BookFoundry.ai may use automated safeguards and authorized human review, where appropriate and legally permitted, to identify and address violations. Users may report inappropriate AI-generated content through the Service.

BookFoundry.ai may reject requests, restrict or remove content, investigate reports, and suspend or terminate accounts in accordance with its Terms & Conditions and applicable law. Nothing in this policy limits any mandatory legal obligations of BookFoundry.ai.

Copyright Notices

If you send us a copyright notice or a counter-notice, we use the information in it, including your name and contact details, to handle the claim. Where the law requires it, for example under the U.S. DMCA counter-notice procedure, we share that information with the other party. We keep these records for as long as needed to handle the claim and meet our legal obligations.

Policy Updates

We may update this Privacy Policy at any time, for example to reflect changes to our services, the providers we use, or the law. The date at the top of this page always shows when it last changed. If a change materially affects how we use your personal data, we will tell you before it takes effect, by email or in the Service, and ask for your consent where the law requires it. By continuing to use the Service after a change takes effect, you accept the updated policy.

Contact: [email protected]

Please contact us by email at [email protected]. We handle all requests, including legal and copyright notices, by email.

Postal address: Nearby Software Inc., 5100 Erin Mills Pkwy #70, Mississauga, ON L5M 4Z5, Canada