Privacy Policy. What we collect, and what we do with it.

We try to be honest by design, and that includes how we handle your data. In plain terms:

• we collect what we need to run the Service and your account;
• the material you upload to ground a book is kept private to your account, and is never used to train any AI model — ours or anyone else's;
• we don't sell your personal information;
• we don't currently run product analytics or advertising trackers on this site — §6 says exactly what that means;
• you can delete your material, your books and your whole account yourself, at any time.

The sections below spell out the details.

This Privacy Policy explains how SuperEbook ("SuperEbook," "we," "us," or "our") handles personal data when you use superebook.ai and the SuperEbook app (the "Service"). It should be read together with our Terms of Service.

The operator of the Service is the data controller for the personal data described here. Operator details will be published before launch. Payments are a partial exception: Dodo Payments is the merchant of record and acts as the controller of your payment and tax data (see §7).

We collect the following, mostly so we can operate your account and write your books:

• Account information — your name, email address and, if you sign in with Google, your profile picture. You sign in with Google, or where it is offered, with a one-time code sent to your email. We do not store account passwords.
• Your books and settings — the ideas, plans, chapters, covers and files you create, your preferences, and your progress through the app's getting-started steps.
• Usage and credits — your credit balance and transactions, and basic product and log data such as device and browser type, approximate location derived from your IP address, and timestamps, used to run, secure, and improve the Service.
• Product analytics — none currently configured on this deployment (see §6).
• Payment information — handled by Dodo Payments as our merchant of record. We receive confirmation of a purchase and limited billing metadata (such as plan, country, and card brand or last four digits), but we do not receive or store your full card number.
• Communications — the contents of messages you send us, including feedback you send from the app.

We also collect the material you choose to upload to ground a book — that gets its own section below, because it matters most.

When you paste text or upload notes, files, or transcripts to ground a book, we extract the text, split it into passages, and build a private search index tied to your account. While a book is being written, we retrieve the most relevant passages for each chapter so the draft is built from your substance rather than generic filler. An uploaded file itself is deleted as soon as its text has been indexed; the passages stay until you remove that source, delete the book, or delete your account.

Your material — and the books you generate from it — are private to your account. We do not use them to train, fine-tune, or improve any AI model, ours or anyone else's. We do not sell them and we do not use them for advertising. When your material is sent to an AI provider — to index it, or to write your book — it is processed only to produce that output for you, under provider terms that prohibit training on your data (see §7). This is a core promise of the product, not a footnote.

We use the information above to:

• provide and operate the Service — planning and writing your books, retrieving passages from your material, generating covers, and producing your files;
• manage your account, credits, plans, and billing;
• provide support and respond to your messages;
• keep the Service secure and prevent fraud, abuse, and violations of our Terms;
• understand and improve the product using aggregated or non-content usage data — not the contents of your material or your books;
• comply with legal obligations.

Where data-protection law (such as the GDPR) applies, our legal bases are performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where we ask for it, and compliance with legal obligations.

We use cookies and similar local storage that are essential to the Service — keeping you signed in, remembering your light/dark theme and reading preferences, carrying an idea you typed through sign-up, and protecting against abuse. Those are always on; without them the Service does not work.

We do not currently run product analytics on this deployment. If that changes, this section will name the tool before it goes live.

We do not currently run advertising pixels or cross-site ad trackers on this deployment. If we turn them on, they will be named here — and where consent is required, asked for first.

Whatever is enabled, the rule does not change: no analytics or advertising tool ever receives the contents of your material or the books you generate.

We share data with a small set of providers who process it on our behalf, under agreements and only on our instructions:

• Vercel — hosts the website and app, and runs the AI Gateway through which our requests reach the AI model providers below.
• Convex — our database and backend: your account, credits, books, and the private index of your material.
• Cloudflare — R2 file storage (uploads until they are indexed, covers, and your exported files) and Browser Rendering, which turns your book into a PDF.
• AI model providers, through Vercel’s AI Gateway — Anthropic (writing chapters and AI rewrites), Google (planning, format suggestions, and cover prompts), and OpenAI (indexing your material and, through fal.ai, cover images). If you turn on paid web research, the research model and a web-search provider (such as xAI or Exa) receive your book's topic and the research you asked for. Each receives only what it needs to produce your output, under terms that prohibit training on your data.
• fal.ai — generates cover artwork from a short art prompt derived from your book's title and topic; it never receives your material.
• AutoSend or Resend — deliver our email, such as sign-in codes, "your book is ready" notices, and the results you ask a free tool to send.
• Dodo Payments — the merchant of record, which sells and processes payments and handles applicable tax. Your card details go to Dodo, not to us; for that transaction Dodo is its own controller, under its own privacy policy.
• Google — if you choose "Continue with Google," Google authenticates you and shares your name, email address, and profile picture with us.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

We keep your data while your account is open, so you can keep working with your books. When you remove a source or delete a book, it is deleted from our active systems — the book's chapters, covers, and files, and the source's indexed passages.

You can delete your whole account in Settings. Deleting it cancels any active subscription immediately, then deletes:

• every book, including any still being written — manuscripts, covers, and exported files;
• the material you uploaded or pasted, and its index;
• your name, email address, and profile picture, which are removed from the account record;
• your sign-in on every device, and your credit balance;
• your email address from our log of the emails we sent you.

We keep, under the anonymized account:

• records of your payments, subscriptions, and credit transactions — what was bought, when, and for how much — which accounting, tax, and dispute rules require us to keep, and which let a refund still be processed after deletion;
• any feedback you sent us, no longer linked to you;
• a one-way hash of your email address, so that a new account with the same address doesn't receive the free starting credits again.

Copies held in our providers' backups, if any, are removed as those backups expire. Payment and tax records held by Dodo Payments as merchant of record are kept under Dodo's own policy.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can delete your material, your books, and your account yourself, in the app. For anything else, email privacy@superebook.ai and we will help.

We do not sell personal information. If you are in a region with a supervisory or data-protection authority, you also have the right to lodge a complaint with it.

The Service is not directed to, and is not intended for, children under 16 (or, where lower, the minimum age required by your local law, and in no case under 13). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We and our providers may process and store data in countries other than the one you live in, including the United States. Where such transfers are subject to data-protection law, we rely on appropriate safeguards, such as the Standard Contractual Clauses in our providers' data-processing terms.

We use reasonable technical and organizational measures to protect your data — including encryption in transit, access controls, and indexing your material privately per account. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly if something goes wrong.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, give you additional notice. Your continued use of the Service after an update means you accept the revised policy.

Questions about your privacy or this policy? Email privacy@superebook.ai. Operator details will be published before launch.