Privacy Policy

About this policy

This policy explains how BookLang handles personal data to provide and protect the service. The identity of the controller and contact details are in the final section, “Who we are and contact”.

What we process and why

We process uploaded EPUBs and their contents, file names and technical analysis, word counts, your contact email, quotes, order and payment identifiers, acceptance records, translation results and operational records needed to provide and protect the service. Files can contain personal data; upload only content you are entitled to provide. Stripe collects payment details in its checkout; BookLang does not ask you to send card numbers by email.

We use this information to analyze and quote your file, fulfill your order, confirm payment, deliver results, provide support, investigate failures or abuse, and comply with applicable legal obligations. Necessary service processing is not permission to send unrelated marketing or publish your book.

We use your email because it is necessary to fulfill your order, provide delivery and access verification, or respond to your requested custom quote. This is not a separate marketing consent. We do not use it for marketing. Acceptance of immediate performance is recorded separately from this necessary use.

We use Cloudflare Web Analytics to measure visits and performance on public pages, without analytics cookies or identification for advertising.

We use Cloudflare Turnstile when requesting a preview to protect against bots and abuse; Cloudflare processes IP addresses and technical browser signals for this verification under its Turnstile privacy policy (https://www.cloudflare.com/turnstile-privacy-policy/).

For the preview you request, we process your email, original and translated excerpt, upload identifiers and technical access and usage records. Pseudonymized email and IP identifiers enforce daily limits and protect against abuse. We keep aggregate counts by language of previews and purchases associated with the same upload, without disclosing personal data. The email is used to send the preview and, if you purchase, fulfill the order. It is not used for marketing, reminders or follow-up messages. A preview of the same file and destination may be reused with individual access; this grants no access to another customer's data or orders.

Service providers and international processing

We use infrastructure and storage providers, AI translation providers, Stripe for payments, and email services for delivery and support. They receive the information needed for their part of the service; translation providers receive book content. Support email is forwarded through Cloudflare to a Gmail inbox, and automatic delivery emails are sent through Resend. Data may be processed outside your country under the arrangements applicable to these services. We do not sell or publicly publish your books.

Storage and access

Files are stored in private storage. The order link acts as an access secret: anyone who has it may view the order. The browser that created the quote can download that order without a code for 30 days, using a necessary HttpOnly cookie tied to the quote. On another browser, or for an older order without this cookie, download requires verifying the order email with a six-digit code valid for ten minutes and at most five attempts. Verified-device access lasts 30 days; clearing cookies requires verifying again. We store hashes of access credentials. Keep the order link private. Contact support if you lose access to the email. The 30-day download window does not mean that all originals, results, support messages, payment records or backups are deleted after 30 days. Temporary staging uploads expire after one day. For free previews without a purchase, we delete the original and excerpts containing prose within 30 days of upload confirmation and invalidate the links. We retain minimal records, hashes and aggregate metrics without excerpt content. Payments, executions or checkouts that have not been conclusively closed protect necessary files from deletion; once resolved, the applicable retention policy takes over. Originals, results and evidence for paid orders still have no automatic deletion deadline. Backups follow their own policy, and we do not promise immediate deletion from every backup copy.

Requests and retention

Contact [email protected] to request access, correction or deletion of your personal data or files. We may need to verify your identity and assess which records must be kept for legal obligations, payment disputes or legitimate operational purposes. We explain applicable limits when handling a request; we do not promise immediate deletion from every backup. Privacy and other mandatory rights available under applicable law remain preserved.