Privacy Policy
Last updated: February 3, 2026
Introduction
At BookOS ("we," "our," or "us"), we are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices concerning the data we collect when you use our platform, website, and related services (collectively, the "Service").
By using BookOS, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
Information We Collect
Information You Provide
- Account Information: Email address, name, password, and profile details when you create an account.
- Content: Books, chapters, notes, characters, and other creative content you write and store on our platform.
- Payment Information: When you subscribe to paid plans, our payment processor (Stripe) collects payment details. We do not store your full credit card information.
- Communications: Messages, feedback, and support requests you send to us.
Automatically Collected Information
- Usage Data: Information about how you use the Service, including writing sessions, features accessed, and interactions.
- Device Information: Browser type, operating system, device identifiers, and IP address.
- Cookies and Tracking: We use cookies and similar technologies to enhance your experience and analyze usage patterns.
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the BookOS Service
- Process your transactions and manage your subscriptions
- Send you technical notices, updates, and support messages
- Respond to your comments, questions, and customer service requests
- Analyze usage patterns to improve our features and user experience
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations and enforce our terms
Data Storage & Security
We take the security of your data seriously. Your content and personal information are stored on secure servers with industry-standard encryption both in transit (TLS 1.3) and at rest (AES-256).
Our security measures include:
- End-to-end encryption for sensitive data
- Regular security audits and penetration testing
- Access controls and authentication requirements
- Automated backups with geographic redundancy
- Employee security training and access limitations
While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
AI and Your Content
This section is especially important for authors concerned about AI and their creative work.
- Your content is never used to train AI models. We do not use your books, chapters, or any creative content to train machine learning models, either our own or third-party.
- AI assistance is always transparent. When you use our AI features, any AI-generated or AI-assisted content is clearly labeled and tracked in your manuscript.
- You maintain full control. You can choose to enable or disable AI features at any time. Your content remains yours regardless of whether you use AI assistance.
- Limited AI context. When you use AI features, only the necessary context from your current work is sent to our AI providers, and this data is not retained after processing.
Third-Party Services
We work with trusted third-party service providers to deliver our Service:
- Supabase: Database and authentication services
- Stripe: Payment processing
- AI Providers: OpenAI, Anthropic, and Google for AI-assisted features
- Analytics: Privacy-focused analytics to improve our service
These providers are contractually obligated to protect your data and use it only for the purposes we specify.
Your Rights
Depending on your location, you may have certain rights regarding your personal data:
For All Users
- Access and download your personal data and content
- Correct inaccurate information in your account
- Delete your account and associated data
- Export your books in multiple formats
For EU/EEA Residents (GDPR)
- Right to access, rectification, and erasure
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
For California Residents (CCPA)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
Children's Privacy
BookOS is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice, such as an email notification. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@bookos.com
- Address: BookOS, Inc., 123 Author Lane, San Francisco, CA 94102
For data protection inquiries in the EU, you may also contact our Data Protection Officer at dpo@bookos.com.