Privacy Policy

0. Overview

We design our Services to collect only what we need to deliver high-quality, AI‑assisted book creation and reading experiences. We do not sell your personal information. Where feasible, we minimize retention and use privacy‑enhancing techniques.

0.1 Definitions

• "Personal data" means information related to an identified or identifiable individual.
• "Processing" means any operation performed on personal data (e.g., collection, use, storage, disclosure).
• "Services" means our website, applications, and related features offered by Infinite Library.

0.2 Data Controller

For purposes of data protection laws where applicable, the controller is Infinite Library. You can contact us at hello@infinitelibrary.ai.

1. Information We Collect

We collect information you provide directly to us, and information collected automatically when you use the Services:

• Account data: name, email address, authentication identifiers.
• Profile & preferences: genres, themes, characters, settings, language and content preferences.
• Content you provide: prompts, files you upload, notes, highlights, chats, and any user‑generated content supplied for book creation.
• Transactional data: subscription plan, token purchases, Stripe payment identifiers and status (we do not store full card data).
• Usage data: pages viewed, features used, books generated, reading progress, device type, approximate location derived from IP, timestamps, and diagnostic logs.
• Cookies and similar technologies: limited cookies for essential functionality and preferences. See Cookies below.

Sensitive or special category data should not be submitted. If you voluntarily include such information in prompts or uploads, you acknowledge we will process it solely to provide the requested functionality.

1.1 Legal Bases for Processing (EEA/UK/Switzerland)

• Contract: to provide and support the Services you request.
• Legitimate interests: to secure and improve Services, prevent abuse, and understand feature performance. We balance these interests against your rights.
• Consent: where required, e.g., for certain cookies/marketing.
• Legal obligation: to comply with applicable laws and enforce terms.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our instant book creation service
• Personalize and enhance your experience with tailored book recommendations
• Process payments and manage subscriptions
• Analyze usage patterns to improve our AI prompts and service quality
• Communicate with you about your account, purchases, and updates
• Ensure security, prevent fraud/abuse, and comply with law

3. Data Retention

We retain personal data only as long as necessary to provide the Services, fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Prompts, generated outputs, and uploaded files may be retained for service functionality, debugging, and to improve user experience; where feasible we reduce identifiers or aggregate data. You may request deletion as described below.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. This includes encryption of sensitive data and regular security audits.

4.1 Security Incidents

If we become aware of a security incident that affects your personal data, we will investigate and, where required by law, notify you and/or regulators without undue delay, describing steps taken to mitigate potential harm.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service providers who perform services on our behalf (e.g., payment processing, cloud hosting)
• Law enforcement or other government entities when required by law
• Other parties with your consent or at your direction

6. AI Services & Model Providers

We use third‑party AI services to generate content based on your inputs. In particular, our Services may send your prompts and relevant context to OpenAI LLC (and its affiliates) to generate outputs using GPT‑class models via the OpenAI Responses API. We may also store files and context in third‑party vector stores as part of the generation workflow. Please avoid uploading confidential or sensitive personal data unless necessary.

AI outputs can be imperfect or inaccurate. You are responsible for reviewing outputs before relying on them. We may use de‑identified or aggregated usage information to improve prompt quality and user experience.

We understand OpenAI does not use API data to train its models by default. See OpenAI’s policy for details.

7. Payments

Payments are processed by Stripe, Inc. (and its affiliates). We receive limited information about your transactions (e.g., status, last4, expiration month/year) but do not store full card numbers. Stripe processes your payment data pursuant to its own privacy policy and PCI‑compliant practices.

8. Hosting, Analytics & Search

• Hosting & infrastructure: We use cloud providers to host our Services and databases, including Firebase/Firestore and related Google Cloud infrastructure.
• Analytics: We use privacy‑respecting analytics (including Vercel Analytics and Vercel Speed Insights) to understand feature adoption, performance, and to improve the product. We limit tracking to what’s necessary and, where applicable, honor consent choices.
• Search & SEO tooling: We use Google Search Console to monitor indexing and site health.

8.1 Third‑Party Policies & Links

• OpenAI: Privacy Policy
• Stripe: Privacy Policy
• Firebase/Google Cloud: Privacy Policy
• Vercel (hosting & analytics): Privacy Policy
• Google Search Console: Privacy Policy

9. Your Rights

You have the right to:

• Access, correct, or delete your personal information
• Object to or restrict certain processing of your data
• Data portability (receive your data in a structured, commonly used format)
• Withdraw consent at any time, where processing is based on consent

We do not sell or "share" your personal information for cross‑context behavioral advertising as defined by applicable U.S. state laws.

10. Cookies and Tracking Technologies

We use essential cookies for authentication, security, and core functionality, and may use preference/performance cookies to enhance experience. Where required by law, we request your consent before setting non‑essential cookies. You can control cookies via your browser settings and our in‑product consent banner.

11. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we may have collected information about a child, please contact us.

12. International Data Transfers

We may transfer, store, and process your information in countries other than where you live, including the United States and the European Union. When we transfer personal data internationally, we implement appropriate safeguards (such as Standard Contractual Clauses where applicable) to protect your information.

13. Region‑Specific Disclosures

EEA/UK/Switzerland: You have rights under GDPR/UK GDPR including access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with your local supervisory authority.

California and certain U.S. states: Depending on your location, you may have rights to know/access, correct, delete, opt‑out of certain data sharing/sale, and non‑discrimination. We do not sell personal information as defined by the CCPA/CPRA.

14. How to Make a Data Request

To exercise your rights or request deletion, please email hello@infinitelibrary.ai with the subject line "Privacy Request" and include the email address associated with your account. We may take steps to verify your identity.

15. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.

16. Do Not Track

Some browsers transmit "Do Not Track" (DNT) signals. There is no industry standard for DNT response. At this time, our Services do not respond to DNT signals. We continue to review developments and may update this policy if our practices change.

17. Contact Us

If you have any questions about our privacy practices, please contact us at hello@infinitelibrary.ai.

Last updated: 2025-09-01