Build Your BookTM Back to Home
Your privacy, our commitment

Privacy Policy

We collect only what we need to deliver your storybooks, never sell your data, and let you walk away with everything erased — anytime, no questions asked.

Last updated: 21 May 2026

Delete your account anytime

You can request account and data deletion at any time from Settings, or by emailing us. Within 30 days, every storybook, illustration, audio narration, comment, and personal detail you ever uploaded is permanently erased from our active systems and backups.

Auto-deletion after 1 year of inactivity

If your account is inactive for 1 continuous year (no logins, no purchases, no creations), we automatically delete the account and all associated personal data. We'll email you twice before the deletion runs so you have the chance to log in and keep your library.

1. What we collect

We collect the minimum data needed to deliver your storybook experience:

  • Account info — name, email, password hash (bcrypt), Google profile picture when you sign in with Google.
  • Content — storybooks, illustrations, audio you create or purchase, plus comments and reviews.
  • Payment metadata — order amount, currency, payment status, Razorpay transaction ID. We never see or store your card / UPI / bank details — those go directly to Razorpay.
  • Usage data — pages visited, features used, IP-derived country (for currency detection), browser type. No precise location, no tracking across other websites.
  • Cookies — one session cookie (session_token) for authentication, and a localStorage entry for your language preference. We do not use third-party advertising trackers.

2. Why we collect it

  • To create, store, and serve back the storybooks you make.
  • To process payments and honour subscription / marketplace purchases.
  • To moderate content for child safety (our four-layer Child-Safe Promise).
  • To send transactional emails (gift received, order confirmation, password reset, moderation outcome, subscription expiring).
  • To prevent fraud, abuse, and brute-force login attempts.

3. Third-party processors

We rely on a small set of trusted vendors who receive only the data needed to do their job — and nothing more:

  • Razorpay — payment processing (sole gateway).
  • Google — Sign-in with Google (OAuth).
  • Google Gemini — AI text + illustration generation. Story prompts are sent to Gemini for processing and are not stored by Google for model training (per Google's enterprise data policy).
  • OpenAI — audio narration (TTS).
  • Tigris — encrypted object storage for cover art, illustrations, audio files.
  • Resend — transactional email delivery.
  • MongoDB Atlas — encrypted database hosting.

We do not sell, rent, or share your data with advertisers, data brokers, or affiliates.

4. Your rights

You can, at any time:

  • Access — download a copy of all your storybooks and personal data from Settings → "Export my data".
  • Correct — update your name, email, profile picture, or password from Settings.
  • Delete — delete your account + all data from Settings → "Delete my account". Completed within 30 days.
  • Withdraw consent — unsubscribe from non-transactional emails using the link in every email.
  • Object — to any specific processing activity by writing to us.

5. Retention & auto-deletion

  • Active accounts — content is retained as long as your account is active.
  • Inactive accounts — if you do not log in, purchase, or create content for 1 continuous year, your account and all associated data are permanently deleted automatically. We email you at the 11-month and 11.5-month marks so you can keep your library by simply logging back in.
  • Deleted accounts — personal data is erased within 30 days from active systems; encrypted backups roll off within 90 days.
  • Payment records — order metadata (without card details) is retained for 7 years for accounting and tax compliance, per Indian law.

6. Children's privacy

Build Your Book is intended for adults creating storybooks for children. Accounts may only be created by individuals aged 13 or older (16+ in the EU and UK). We do not knowingly collect data directly from children. If you believe a child has created an account without parental consent, email us at buildyourbook0@gmail.com and we will delete the account within 7 days.

7. Security

All traffic is encrypted in transit (HTTPS / TLS 1.2+). Passwords are hashed with bcrypt. Sensitive payment data never touches our servers. Storage and database access are restricted, logged, and audited. We will notify affected users within 72 hours in the unlikely event of a personal-data breach.

8. International transfers

Our servers are hosted in India and the United States. By using Build Your Book, you consent to your data being processed in these jurisdictions under the standard contractual clauses that govern each processor listed in Section 3.

9. Changes to this policy

We may update this policy from time to time. For material changes, we'll email all active users at least 14 days before the new policy takes effect. The "Last updated" date at the top of this page always reflects the current version.

10. Contact us

Questions, requests, or complaints about this policy? Reach us at buildyourbook0@gmail.com. We respond within 5 business days.

Build Your Book is a service of OrcSyn Intelligent Technologies.

Made with Emergent