Privacy notice

What we collect, why, and what we never do with it.

bookmatic is operated by Konsensus LLC, registry 86585140624059, c/o Próspera Employment Solutions LLC, Beta Building, Oficina 6, Próspera ZEDE, St. John’s Bay, Islas de la Bahía 34101, Honduras — the data controller for everything described here. For anything in this notice, write to hello@konsensus.net.

What we collect

• Your account — email address, a password we store only as a hash, and, if you switch on two-factor sign-in, its authenticator secret and recovery codes.
• Your books — the manuscripts, images, covers and translations you upload or create. They are yours; we store them to run the product, nothing else.
• Collaboration — comments, margin notes, chat messages, reactions and reading progress from you and the readers you invite.
• Purchases — when a reader buys a book we keep the sale record and the buyer's email address, which we use to deliver the book and its download links.
• Reports — bug reports sent from inside the app (which can include a small capture of the flagged element), feedback, and abuse reports about public pages.

Cookies

We set functional cookies only: your sign-in session and which book you have open. No advertising cookies, no third-party trackers.

Payments

Card payments are processed by Paddle as merchant of record — your card details go to Paddle, never to our servers, and Paddle's own privacy policy applies to the payment. Bitcoin payments run through our self-hosted BTCPay server, which needs no card or bank details at all.

IP addresses

We use IP addresses only to rate-limit abuse: they live in daily counters that are deleted automatically within 90 days, and anything kept longer — such as an abuse report — records a one-way hash, never the address itself.

Email

We send transactional email only — sign-in and account messages, purchase deliveries, and notices about your books. No marketing email without your explicit consent.

Who else processes it

We do not sell, rent, or share your data with advertisers — no exceptions. We do use a small set of processors to run the product, and nothing goes further than this list:

• Cloudflare — hosting, and the database that holds everything.
• Anthropic and Google — the AI models behind translation and the revision memo. When you run one of those features, the text you asked us to process is sent to the model provider to produce the result. It is not used to train their models.
• OpenAI — cover-art generation, when you use it: your art brief is sent, your manuscript is not.
• sats4ai — cover artwork and audiobook narration, when you use them. For artwork, only your art brief is sent. For narration your book itself is sent, as the EPUB we built, because that is what is read aloud. It is processed to produce your audio and is not used to train anything. Narration only ever runs when you start it.
• Paddle — card payments, as merchant of record.
• Resend — the transactional email we send you.

Features that use a model provider are marked in the app, and they only run when you start them. If you never run them, your manuscript never leaves Cloudflare. Narration is the one feature that sends your whole book rather than a selection — it is labelled where you start it, and it is never automatic.

How long we keep it

• Anonymous trial books (uploaded without an account) are deleted automatically after 30 days, with their notes and images.
• Books that belong to an account stay until you delete them or ask us to.
• In-app bug reports are deleted automatically after 90 days.
• Abuse reports are kept so repeat notices show a pattern — see the content & takedown policy.

Your rights

Email us to access, correct, export, or delete your data — we honor these requests for everyone, not only where a statute compels it. Deleting your account removes your books, your profile, and your collaboration data.

Changes

Any change to this notice lands on this page with a fresh revision date below.

bookmatic · Terms · Refund policy · Content & takedown policy · version 1.1, last revised 28 July 2026