Privacy Policy

About this policy

This policy explains how BookCoverDesign.ai at bookcoverdesign.ai handles personal information when you visit the website, use available features, or contact us. It applies to this service; external websites and providers have their own policies.

Information and purposes

We process information relevant to the features you use:

• Account details, sign-in records and support messages to manage access and respond to requests.
• Prompts, uploaded files, generated results and task records to provide requested AI and media features. Content needed for a task is sent to the generation and storage providers involved in that task. Do not submit information you lack permission to use.
• Credit balances, subscriptions, orders and transaction references to provide and reconcile purchases. Payment providers handle payment details through their own payment interfaces.
• IP addresses, browser information, request times and operational logs to deliver, secure and troubleshoot the service and prevent abuse.
• Acquisition information, including an anonymous identifier, landing page, referrer, campaign parameters, affiliate codes and recognized advertising click identifiers, to measure visits and service outcomes and associate the source with accounts or orders.

Where data protection law requires a legal basis, the basis depends on the purpose: providing a service you request, meeting legal obligations, legitimate interests in operating and securing the service subject to your rights, or consent where required. Contact us for information about a particular processing activity.

Acquisition and optional services

Our server-side acquisition and order records operate independently of the optional-services choice, including in Europe. A marketing first touch has a 30-day attribution window; a later direct or organic visit does not replace it during that window. Order attribution preserves the source recorded at checkout. Raw advertising click identifiers stay out of the browser attribution cookies and the compact checkout metadata sent to payment providers.

Browser marketing attribution storage follows the regional choice rules described in our Cookie Policy. First-party affiliate storage is separate. Refusing optional services does not stop server-side acquisition or erase records already associated with an account or order.

Configured optional third-party analytics, support and referral services wait for an affirmative choice in the EEA, United Kingdom, Switzerland and unknown regions. Elsewhere they may load by default unless you refuse or Global Privacy Control (GPC) blocks them. Refusal stops these optional services in every region. In the consent-gated regions, the explicit site choice controls loading even when GPC is enabled. Same-origin, self-hosted, cookieless aggregate measurement may run separately from this gate.

Recipients and international processing

Providers supporting enabled hosting, authentication, storage, email, AI generation, payments and support receive information needed for those functions. Optional providers receive information when configured and permitted by the choice rules above. We may also disclose information when legally required or necessary to protect rights and service security.

Providers may process information outside your country. Applicable transfer requirements and safeguards depend on the provider, location and processing involved. Contact us for details about the recipients and safeguards relevant to your information.

Retention and security

Attribution browser copies expire within 30 days; the optional-services preference cookie lasts up to 180 days. These browser periods do not mean that account, content, support or financial records are automatically deleted on the same schedule. Those records are retained according to the service purpose, account status, security needs and applicable legal obligations. Contact us for the period or criteria applicable to a particular record.

We use access controls and technical measures to protect information. No storage or transmission system is completely secure.

Your choices and rights

Use Cookie settings, where available, to change your optional-services choice. Browser controls can remove or block local storage; this does not erase existing server records. Account controls may let you update information or request account deletion.

Depending on applicable law, you may request access, correction, deletion, portability or restriction, object to processing, withdraw consent without affecting earlier lawful processing, and complain to your data protection authority. These rights can be subject to verification and legal exceptions. Send requests to [email protected] or use our contact page.

Updates and contact

We may update this policy as the service or data practices change. The date above identifies this version. For privacy questions, contact [email protected]. See also our Terms of Service and Cookie Policy.