Privacy policy
What we collect, why, and what we never do with it.
Last updated
The short version
We collect the minimum needed to run an account and generate a book. We do not train AI models on your writing. We do not sell your data. We do not share your book with anyone except the model provider that generates it.
Craftebook is the trading name used for this service. The operator's legal name, business address, country, and any applicable registration and tax numbers must be added before these documents are treated as final.
What we collect
Account data: your email address and authentication details. Lawful basis: performance of our contract with you.
Content data: the description you write, the outlines and chapters generated for you, and any cover art you upload. Lawful basis: performance of our contract.
Billing data: handled by Whop. We store a payment reference, your plan, and credit top-up records, never your card number. Lawful basis: performance of our contract and our legal obligation to keep tax records.
Product analytics: aggregate daily usage counts plus a random first-party visitor identifier so we can measure sessions and connect a campaign visit to signup and verified revenue. We do not store URL queries or book text in our product analytics.
Marketing attribution: the Whop Pixel measures page views, links visits to purchases processed by Whop, and attributes conversions to advertising campaigns. Whop receives browser, device, page, referral, campaign, and event information needed for that attribution. We do not send book text to the pixel.
Account and progress emails: we send Resend your email address and simple account, checkout, generation, and export event names so it can deliver service messages and relevant reminders. We do not send your quiz answers, book idea, title, outline, chapters, images, or exported files. You can unsubscribe from reminder emails using the link included in them; essential security, payment, and account messages may still be sent.
What stays in your browser
A local browser cache may keep in-progress draft and image data so recovery feels immediate. Signed-in ebook drafts are also checkpointed to your account, and generated cover or coloring-page images are stored in our private object storage when configured.
AI model providers
Generating a book requires sending your description and outline to a third-party model provider. We use providers that contractually agree not to train on data sent through their API. The current provider is named in our subprocessor list.
How long we keep things
Projects stay until you delete them. Deleting a project removes its active database record and stored image objects immediately. Copies in infrastructure backups age out under the backup retention schedules of our infrastructure providers. Account records are kept while your account is open, and billing records may be retained where tax or accounting law requires it.
Lifecycle email delivery rows are kept for up to 30 days after delivery or final failure, and limited email-provider event metadata is kept for up to 90 days for delivery, suppression, and support checks.
Where your data is processed
We use OpenAI for text and image generation, MongoDB Atlas for account and project data, Cloudflare R2 for private generated-image storage, Resend for email delivery, Whop for checkout and billing, and our deployment provider for application hosting. These providers may process data outside your country under their contractual transfer safeguards and applicable data-protection law.
Providers and processing locations can change as the service develops. We will update this policy when a material provider change affects how personal data is handled.
Your rights
You can ask for a copy of your data, correct it, delete it, restrict how we use it, object to processing based on legitimate interest, and take your content elsewhere. Email us and we will respond within 30 days.
If you are in the UK you can complain to the ICO; in the EU, to your national supervisory authority.
Privacy requests can be sent to support@craftebook.com. We may need to verify that the request concerns your account before acting on it.
Children
craftebook is not for people under 16. We do not knowingly create accounts for them.