Privacy Policy

BookBlast ("we," "us," or "our") provides an AI-powered platform that helps authors transform their books into social media content. This Privacy Policy explains how we collect, use, share, and protect information when you use our website at bookblast.ioand our related services (collectively, the "Service").

By using BookBlast, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

Account information

When you sign up, we collect your email address, name (if you provide one), and a hashed password. If you sign in with Google, we receive your email and name from Google.

Content you create

We store the content you upload and generate, including:

• Book passages and source materials you upload
• Generated social media posts, carousels, and designs
• Voice DNA writing samples and analysis
• Brand Kit details (logo, colors, fonts, author identity)
• Public profile information you choose to display
• Sales attribution links and channel configurations

Usage data

We collect information about how you use BookBlast, including features accessed, posts generated, AI tokens consumed, click counts on tracking links, and timestamps of activity. This helps us improve the Service and enforce plan limits fairly.

Technical data

We automatically collect technical information when you visit BookBlast, including your IP address (which we use only to determine country for analytics), browser type, device type, pages visited, and approximate location based on IP. We use this for security, debugging, and fraud prevention.

Cookies and similar technologies

We use cookies for authentication (so you stay logged in) and to remember your preferences. We do not use third-party advertising cookies. You can disable cookies in your browser, but this may break parts of the Service.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate AI content based on your inputs (using Anthropic Claude)
• Process payments through Stripe (when you subscribe)
• Send transactional emails (account confirmations, receipts, security alerts)
• Send marketing emails about features and tips (you can opt out anytime)
• Detect, investigate, and prevent fraud, abuse, and security issues
• Comply with legal obligations
• Track aggregate usage patterns to improve the product

BookBlast uses Anthropic's Claude APIto power features like the Content Slicer, Voice DNA, Carousel Designer, Smart Recycling, Auto-Fill Calendar, and AI Performance Insights. When you use these features, the relevant content (your book passages, posts, or analysis prompts) is sent to Anthropic's servers for processing.

Important:Per Anthropic's commercial terms, your content is not used to train Anthropic's AI models. Anthropic processes your data solely to generate the response we requested. We retain only the input and output of these calls in our database to enable features like history and analytics.

For full details on how Anthropic handles data, see the Anthropic Privacy Policy.

When you create an account, we may send you a welcome email sequence (typically 4 emails over 14 days) introducing you to BookBlast's features. We may also send periodic marketing emails about new features, tips, and special offers.

We use Resend as our email delivery provider. Resend processes the email address you provided and the email content we generate, on our behalf, in order to deliver messages to your inbox. Resend does not use your data for any other purpose.

You can opt out of marketing emails at any time by:

• Toggling off "Welcome email sequence" in Settings → Notifications
• Clicking the unsubscribe link at the bottom of any marketing email
• Emailing us at support@bookblast.io

Even if you opt out of marketing emails, we will still send transactional emails (password resets, billing receipts, security alerts) because these are necessary to operate your account.

We never sell your personal information. We share data only with the following service providers and only to the extent necessary to operate the Service:

Sub-processors

Each of these providers has its own privacy policy and security practices. We choose providers carefully and require contractual data protection terms.

Legal compliance

We may disclose information when required by law (subpoena, court order, government request) or to protect the rights, property, or safety of BookBlast, our users, or the public.

Business transfers

If BookBlast is acquired, merged, or sells assets, your information may be transferred. We will notify you and ensure the new entity honors this Privacy Policy.

BookBlast offers public author profile pages at bookblast.io/p/[username]. If you choose to make your profile public:

• The information you add (avatar, cover image, bio, links, books, recent posts) is visible to anyone on the internet
• Your profile may be indexed by search engines like Google
• Your profile may appear in social media previews when shared
• You can disable your public profile at any time in Settings

By default, profiles are private. You must explicitly toggle them public.

BookBlast generates short tracking links at bookblast.io/r/[code] that you can include in your social media posts. When someone clicks these links:

• We log an anonymous click event including timestamp, country (from IP), referrer URL, and user agent
• We do not log the visitor's IP address or any personally identifying information
• The visitor is then redirected to your destination URL with UTM tracking parameters
• You can view aggregated click data in your Sales Attribution dashboard

We use this data only to provide click analytics to you (the link owner). We do not use it for any other purpose.

We retain your data as follows:

• Account data: For as long as your account is active
• Content (passages, posts, designs): Until you delete it or close your account
• Email logs (delivery records): For 12 months
• AI call logs (token usage tracking): For 12 months
• Click tracking events: For 24 months
• Error logs (Sentry): For 90 days
• Backups: For 30 days after deletion

When you close your account, we delete your account data and content within 30 days, except where we are legally required to retain certain records (such as billing records for tax compliance).

We take security seriously. We implement industry-standard practices including:

• TLS encryption for all data in transit
• Encryption at rest in our databases
• Row-level security policies that prevent users from accessing each other's data
• Hashed and salted passwords (we never store passwords in plain text)
• Regular security updates to our infrastructure
• Access controls for our team based on least-privilege principles

However, no system is 100% secure. If you believe your account has been compromised, contact us immediately at support@bookblast.io.

Depending on your location, you may have the following rights regarding your personal data:

Access

You can request a copy of the personal data we hold about you.

Correction

You can update most information directly in your account settings. For other corrections, contact us.

Deletion

You can delete your account at any time from Settings → Privacy & Data. This permanently deletes your data within 30 days.

Portability

You can export your generated posts and other content from your dashboard.

Opt-out of marketing

You can disable marketing emails in Settings → Notifications or via unsubscribe links.

Object to processing

You can object to certain types of processing by contacting us.

To exercise these rights, email us at support@bookblast.io. We respond to verified requests within 30 days.

If you are in the European Union, the United Kingdom, or another jurisdiction with similar data protection laws, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent legislation.

Legal basis for processing: We process your data based on:

• Contract: To provide the Service you signed up for
• Legitimate interests: To improve the Service, prevent fraud, and operate our business
• Consent: For marketing emails and optional features (you can withdraw consent anytime)
• Legal obligation: To comply with applicable laws

Data transfers: Your data may be processed in the United States and other countries where our service providers operate. We rely on appropriate safeguards including Standard Contractual Clauses to protect cross-border transfers.

Right to lodge a complaint: You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• Right to know what personal information we collect and how we use it
• Right to delete your personal information
• Right to correct inaccurate information
• Right to opt out of "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising)
• Right to non-discrimination for exercising these rights

To exercise these rights, email support@bookblast.io.

BookBlast is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by posting a prominent notice in the Service before the changes take effect. The "Last updated" date at the top reflects the most recent revision.

Continued use of BookBlast after a change means you accept the updated policy.

Questions, comments, or requests about this Privacy Policy?