Privacy Policy

1. Introduction

PulseBook.io ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered book illustration service.

By using PulseBook.io, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our service.

2. Information We Collect

2.1 Account Information

When you create an account through our authentication provider (Clerk), we may collect:

• Email address
• Name (if provided)
• Unique user identifier

2.2 Profile Information

You may optionally provide:

• Author display name
• Author profile URL slug

2.3 Content You Create

When you use our service, we store:

• Books (titles, text, settings)
• Characters (names, descriptions, appearance details)
• Locations (names, descriptions, views)
• Scenes (descriptions, prompts)
• Page layouts and designs
• Art style preferences

2.4 Generated Content

We store content generated through our AI services:

• AI-generated images
• Generation prompts and history
• Image version history

2.5 Billing Information

We maintain records of:

• Credit balance and usage history
• Subscription tier and status
• Transaction history

Note: Payment card details are processed and stored by Stripe. We do not have access to your full card numbers.

2.6 BYOK (Bring Your Own Key) Users

If you use your own Google AI API key, we store it encrypted using AES-256-GCM encryption. Your API key is only decrypted when making requests to Google's services on your behalf.

3. How We Use Your Information

We use the information we collect to:

• Provide our service: Generate images, store your books, and manage your content
• Authentication: Verify your identity and secure your account
• Process payments: Manage subscriptions and credit purchases
• Customer support: Respond to your questions and resolve issues
• Improve our service: Fix bugs and enhance functionality

We do not use behavioral analytics or tracking for advertising purposes.

4. Third-Party Services

We use the following third-party services to provide our platform:

Important Information About AI Processing

When you generate images, the following data is sent to Google's Gemini API:

• Scene descriptions and prompts
• Character details and appearance descriptions
• Location descriptions
• Reference images (character sheets, location views, style references)

This data is subject to Google's data retention policies. BYOK users: while your own API key is used, your content is still processed by Google's services.

5. Data Storage and Security

• Location: Our data is stored in the European Union (AWS eu-central-1 region)
• Encryption: Sensitive data including API keys is encrypted using AES-256-GCM
• Access Control: All data is filtered by user ID to ensure you only access your own content
• Secure URLs: Images are served through time-limited signed URLs

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to Access: View all your data through the application
• Right to Rectification: Update your information at any time
• Right to Erasure: Delete individual items (books, characters, scenes, images)
• Right to Data Portability: Export reusable items to your library
• Right to Object: Object to processing of your data

To request complete account deletion, please contact us at [email protected].

7. Data Retention

• Account data: Retained until you delete your account
• Content: Retained until you delete it
• Images: Stored until deleted
• Transaction history: Retained for billing and legal purposes
• Deleted data: Permanently removed within 30 days of deletion request

8. Cookies

We use only essential cookies required for the service to function:

• Authentication cookies from Clerk for secure login sessions

We do not use tracking cookies or third-party analytics cookies.

9. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]