1) Overview
This Privacy Policy explains how What Book Is This ("we", "us", "our") collects, uses, discloses, and protects personal data when you visit our website, create an account, purchase credits or subscriptions, or use our book-finding features.
By using the service, you acknowledge that you have read this Policy.
2) Who controls your data
Unless a different entity is stated for a specific region or product, the service operator identified on our website is the data controller for personal data described in this Policy.
For privacy requests, contact: support@whatbookisthis.com
3) Data we collect
Depending on how you use the service, we may collect the following categories of data:
A. Account and identity data
- Name, email address, profile image, and provider account identifiers received from sign-in providers (for example, Google OAuth)
- Internal user ID and account status
B. Authentication and security data
- Session identifiers and authentication state
- Technical and security logs (for example, request metadata, timestamps, and anti-abuse signals)
- Pseudonymous trial-abuse identifiers derived from network signals and server-side salts
C. Usage and interaction data
- Prompts or descriptions you submit to find a book
- Product interaction events (for example, feature usage and request outcomes)
- Device/browser metadata needed for reliability and fraud prevention
D. Billing and transaction data
- Subscription status, plan identifiers, credit balances, and transaction records
- Payment-related metadata from payment providers (for example, checkout and webhook status)
We do not receive or store full payment card numbers in our application database.
4) How we use personal data
We process personal data to:
- Provide, operate, and improve the service
- Authenticate users and secure accounts
- Deliver paid features, credits, and subscription entitlements
- Detect abuse, fraud, and unauthorized activity
- Monitor reliability, troubleshoot incidents, and maintain service quality
- Communicate with you about service, account, legal, and support matters
- Comply with legal obligations and enforce our Terms
5) Legal bases (EEA/UK where applicable)
Where GDPR or similar laws apply, we rely on one or more of these legal bases:
- Contract: to provide the service you request
- Legitimate interests: security, fraud prevention, service improvement, and business operations
- Legal obligation: compliance with law, accounting, tax, and regulatory duties
- Consent: where consent is required (for example, certain optional communications or cookies)
6) Cookies and similar technologies
We use cookies and similar mechanisms to:
- Keep you signed in and maintain session integrity
- Remember key service preferences
- Support security controls and abuse prevention
You can control cookies through your browser settings. Blocking essential cookies may affect site functionality.
7) How we share data
We may share personal data with:
- Infrastructure and hosting providers (for site delivery, storage, and operational security)
- Authentication providers (for login)
- Payment providers (for checkout, subscriptions, billing events)
- AI/model gateway providers used to process your requests
- Professional advisers and authorities where legally required
We do not sell your personal data in the ordinary commercial sense.
8) Cross-border transfers
Our providers may process data in countries different from your own. Where required, we use appropriate safeguards (for example, contractual protections) for international transfers.
9) Data retention
We retain data only as long as reasonably necessary for the purposes in this Policy, including legal, tax, audit, security, and dispute-resolution needs.
Typical retention factors include:
- Active account lifecycle
- Billing and accounting retention requirements
- Security and abuse investigation windows
- Legal hold obligations
When data is no longer needed, we delete, anonymize, or securely isolate it as required.
10) Security measures
We use administrative, technical, and organizational safeguards designed to reduce unauthorized access, disclosure, alteration, or destruction of personal data. No internet service can be guaranteed 100% secure, but we continuously improve our controls.
11) Your rights
Depending on your location, you may have rights to:
- Access personal data we hold about you
- Correct inaccurate or incomplete data
- Delete personal data (subject to legal exceptions)
- Restrict or object to certain processing
- Receive a portable copy of data you provided
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority
To exercise rights, contact support@whatbookisthis.com. We may need to verify your identity before completing requests.
12) Children's privacy
The service is not directed to children under the age required by applicable law to consent to data processing. If you believe a child provided personal data unlawfully, please contact us and we will review promptly.
13) Third-party services and links
Our site may include links or integrations with third-party services. Their data practices are governed by their own terms and policies.
14) Policy updates
We may update this Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the service after updates means you accept the revised Policy to the extent permitted by law.
15) Contact
Privacy and data protection inquiries: support@whatbookisthis.com