Privacy Policy for AI eBook Suite

Last Updated: May 14, 2025

1. Introduction

Welcome to AI eBook Suite ("we," "us," "our," or "BertoProduction"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how BertoProduction, operated by Andrea Bertolotti (NIF: Y-451-4312-R), collects, uses, discloses, and safeguards your information when you visit our website aiebooksuite.com (the "Site") and use our services (the "Services").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. You are encouraged to periodically review this Privacy Policy to stay informed of updates.

2. Data Controller

The data controller for the information you provide or that is collected by BertoProduction is:

Andrea Bertolotti (BertoProduction)
Address: Granadilla de Abona, Canary Islands, S.C. de Tenerife, Spain, 38627
NIF: Y-4514-312-R
Email: info@aiebooksuite.com
Phone: +34642643499

3. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Site and through our Services includes:

3.1. Personal Data You Provide to Us:

• Account Information: When you register for an account, we collect your email address and a hashed password.
• Subscription and Billing Information: When you subscribe to our Services, our payment processor, Stripe, will collect your payment information (such as name, billing address, and credit card details). We do not directly store your full payment card details but may store your Stripe Customer ID, Subscription ID, and subscription status provided by Stripe.
• eBook Generation Inputs: When you use our eBook generator, we collect the inputs you provide, such as the topic, brief, genre, writing style, language, number of chapters, dedication, custom title, and any other specific instructions you submit through the form. This information is processed to provide the Service.
• API Key Information: If you choose to use your own API keys for third-party LLM providers (e.g., OpenAI, OpenRouter, Straico), we collect the provider name, an optional key name, and the encrypted API key. These are used solely to proxy your requests to the selected LLM provider on your behalf.
• Communications: If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

3.2. Data Collected Automatically (Usage Data and Cookies):

• Log and Usage Data: We may collect information that your browser sends whenever you visit our Site. This Log Data may include your IP address, browser type and version, the pages of our Site you visit, the time and date of your visit, the time spent on those pages, and other statistics.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Service and hold certain information. This includes essential cookies for site functionality (like user sessions) and may include cookies for analytics (e.g., Google Analytics) if you consent. Please see our Cookie Policy for more details.

3.3. Information from Third Parties:

• Payment Processors: We use Stripe for payment processing. Stripe provides us with information related to your transactions and subscription status, such as your Stripe Customer ID and Subscription ID.

4. How We Use Your Information

We use the information we collect for purposes including:

• To provide, operate, and maintain our Service.
• To process your subscriptions and manage your account.
• To generate eBooks based on your inputs and selected AI models.
• To improve, personalize, and expand our Service.
• To understand and analyze how you use our Service.
• To develop new products, services, features, and functionality.
• To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes (subject to your consent where required by applicable law).
• For security purposes, including fraud prevention and ensuring the integrity of our Services.
• To comply with legal obligations.

5. Legal Basis for Processing Personal Information (GDPR)

If you are an individual in the European Economic Area (EEA), we collect and process information about you only where we have legal bases for doing so under applicable EU laws. The legal bases depend on the Services you use and how you use them. This means we collect and use your information only where:

• We need it to provide you the Services, including to operate the Services, provide customer support and personalized features, and to protect the safety and security of the Services (Performance of a Contract).
• It satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote our own Services (where consent is not strictly required), and to protect our legal rights and interests.
• You give us consent to do so for a specific purpose (e.g., for sending marketing emails or using non-essential cookies).
• We need to process your data to comply with a legal obligation.

If you have consented to our use of information about you for a specific purpose, you have the right to change your mind at any time, but this will not affect any processing that has already taken place.

6. Sharing and Disclosure of Information

We do not sell your personal information. We may share your information in the following situations:

• With Third-Party Service Providers: We share information with third-party service providers that perform services on our behalf, such as:
  • Payment Processing: Stripe, Inc. (USA) processes payments. Their use of your information is governed by their privacy policy.
  • Large Language Model (LLM) Providers: To generate eBook content, your inputs and, if you provide them, your API keys are transmitted to the LLM providers you select. These may include:
    • OpenAI (USA): Processes data to provide AI model responses.
    • Anthropic, Meta, Google, and others via OpenRouter (OpenRouter is likely US-based; data processing depends on the specific model chosen and OpenRouter's policies).
    • Straico: (Location and data processing for Straico needs to be verified by you and specified here).
    Your interaction with these LLMs via your API keys is subject to the terms and privacy policies of those providers. We encourage you to review their policies.
  • Hosting and Infrastructure Providers: (Specify your hosting provider, e.g., AWS, Google Cloud, DigitalOcean, and their primary region if known).
  • Analytics Providers: Google Analytics (Google LLC, USA) may be used to help us understand ajsage of our Service, if you consent to analytical cookies.
  • Email Delivery Services: To send you transactional and (if consented) marketing emails.
• Legal Compliance and Protection: We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is reasonably necessary to protect our rights, property, or the safety of our users or the public.
• Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction as permitted by law and/or contract.

7. International Data Transfers

Your information, including personal data, may be transferred to and processed in countries other than your country of residence, particularly the United States, where our third-party service providers (such as Stripe, Google, OpenAI, and other LLM providers) may be located or have data centers.

These countries may have data protection laws that are different from the laws of your country (and, in some cases, may not be as protective). We take steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it. For transfers of personal data from the European Economic Area (EEA), the UK, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs), and/or, where applicable for transfers to the U.S., a provider's certification under the EU-U.S. Data Privacy Framework (DPF) and its UK and Swiss extensions.

Specifically:

• Stripe, Inc.: Processes data in the USA and other countries, utilizing SCCs and DPF certification.
• Google LLC (for Google Analytics): Processes data in the USA, utilizing SCCs and DPF certification.
• OpenAI: Processes data primarily in the USA, utilizing SCCs and/or DPF certification.
• Other LLM Providers (via OpenRouter, Straico, or direct): The location of data processing and transfer mechanisms will depend on the specific provider. You are responsible for reviewing their respective privacy policies and terms. If these providers are outside the EU/EEA, appropriate safeguards are expected.

8. Data Retention

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Account information and user-generated eBook inputs and outputs are retained while your account is active to ensure service functionality and for a reasonable period thereafter for recovery purposes or as required by law. You can request deletion of your account and associated data as per your rights outlined below.

9. Your Data Protection Rights

Depending on your location and applicable law, you may have the following data protection rights:

• The right to **access, correct, update, or request deletion** of your personal information.
• The right to **object to processing** of your personal information, ask us to **restrict processing** of your personal information, or **request portability** of your personal information (if you are in the EEA).
• The right to **opt-out of marketing communications** we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing emails we send you.
• If we have collected and processed your personal information with your consent, then you can **withdraw your consent** at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
• The right to **complain to a data protection authority** about our collection and use of your personal information. For more information, please contact your local data protection authority.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA). These may include the right to know about the personal information a business collects about you and how it is used and shared, the right to delete personal information collected from you (with some exceptions), the right to opt-out of the sale or sharing of your personal information, and the right to non-discrimination for exercising your CCPA rights.

To exercise any of these rights, please contact us at: info@aiebooksuite.com. We will respond to your request in accordance with applicable data protection laws.

10. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. For example, passwords are hashed, API keys you provide are encrypted at rest, and communication with our Site is over HTTPS. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our Site is at your own risk.

11. Children's Privacy

Our Services are not directed to, and we do not knowingly collect personal information from, children under the age of 16. If you are a parent or guardian and believe that your child under the age of 13 (or 16 in some jurisdictions like the EEA) has provided us with personal information without your consent, please contact us at info@aiebooksuite.com, and we will take steps to delete such information from our systems.

12. Cookie Policy Link

For more detailed information on the cookies we use, please refer to our Cookie Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws. You can see when this Privacy Policy was last updated by checking the "Last Updated" date displayed at the top of this Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Andrea Bertolotti (BertoProduction)
Email: info@aiebooksuite.com
Address: Granadilla de Abona, Canary Islands, S.C. de Tenerife, Spain, 38627
Phone: +34642643499