Privacy Policy — Pressabook
Effective date: 31 July 2026 Data controller: Grandfield Media, Plot No. 93, Koundinya Nagar, Nacharam, Hyderabad, Telangana 500076, India Contact: contact@pressabook.com
1. What we collect
- Account data: email address, display name, pen names you save.
- Waitlist data (pre-launch): email address and signup source.
- Content you provide: book briefs, notes, tables of contents, and other text you enter to design a book.
- Generated content: the books and materials the service creates for you.
- Usage and billing data: credit transactions, generation logs (timestamps, sizes, model usage and cost — not shared), product analytics events, and subscription status. Payment card details are collected and processed by Paddle (our merchant of record), not by us.
- Technical data: IP address, device/browser information, and cookies necessary for the service and analytics.
2. How we use it
To provide the service (generate your books, store them in your Library, manage credits and subscriptions); to send transactional email (verification codes, book-ready notices, receipts via Paddle); to send product and marketing email you can unsubscribe from at any time; to monitor quality, prevent abuse and fraud, and enforce our Content Policy; and to improve the product using aggregate analytics.
3. Your books are private
Generated books are stored in private cloud storage, scoped to your account. They are not public, not indexed, and not shared. Access paths: you, via time-limited download links in your Library; and our support staff, narrowly and only when investigating an issue you raise or a system failure affecting your book. We do not use your briefs or your generated books to train AI models, and we do not copy customer books to any company file storage.
4. Processors we use
We share data only with the processors needed to run the service: Supabase (database, authentication, file storage), Vercel (hosting), Anthropic (AI generation — your brief text is sent to the Anthropic API to generate your book), Resend (email delivery), PostHog (product analytics), Paddle (payments, as independent merchant of record), and Cloudflare (DNS). Each receives only what its function requires.
5. Retention
Account and Library files: retained while your account exists. Waitlist entries: until launch onboarding completes or you unsubscribe. Generation and billing logs: retained for accounting and abuse-prevention purposes. On verified account deletion request, we delete your account data and stored files within 30 days, except records we must retain by law.
6. Your rights
You may access, correct, export, or delete your data by emailing contact@pressabook.com from your account email. Marketing emails contain a one-click unsubscribe; transactional emails (codes, receipts, book-ready notices) are sent as part of the service.
7. Cookies
We use strictly necessary cookies (session/authentication) and analytics cookies (PostHog). [If serving EU/UK traffic with non-essential cookies, add a consent banner and describe it here.]
8. Security
Data is encrypted in transit; storage access is controlled by row-level security and short-lived signed URLs; secrets are managed in our hosting provider’s environment store. No method is 100% secure; we notify affected users of breaches as required by law.
9. Children
The service is not directed to children under 18 and we do not knowingly collect their data.
10. Changes
We will announce material changes to this policy by email or in-app notice.