Privacy policy
Last updated: October 14, 2026
This policy explains what personal data Bookify collects, why, who receives it and how long we keep it.
1. Controller
SOFTWARY S.R.L., Via Giovanni Porzio F11, 80143 Napoli (NA), Italy, VAT IT10580571213 — support@bookify.it.
For payments, Paddle.com is the Merchant of Record and an independent controller of the payment data it collects (see Paddle’s privacy notice).
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Email address, password (stored as a one-way hash) or Google sign-in identifier | Account, sign-in, service emails | Contract |
| What you write in Bookify: the sentence, outlines, answers, books, edits, versions | Writing and storing your books | Contract |
| Materials you upload (documents, slides, text) and the text extracted from them | Using them in your book, only if you add them | Contract |
| Brand kit: logo, colours, author name and bio | Designing your exports | Contract |
| Balance and purchase history (credits, amounts, Paddle customer and transaction identifiers) | Credits, refunds, tax records | Contract, legal obligation |
| Product events (for example “outline ready”, “book exported”), with your account or a random browser identifier before you sign up | Improving the product, preventing abuse of free actions | Legitimate interest |
| Emails sent to you and whether they were accepted by the provider | Delivering service emails and reminders | Contract, legitimate interest |
| Website statistics with Google Analytics, only if you accept cookies | Understanding which pages work | Consent |
We do not collect card details: payments happen on Paddle’s checkout. We do not use your books or materials to train AI models, and we do not sell your data.
3. Who receives the data
We use these providers. Those that process data on our behalf do so under data-processing agreements; Paddle and Google (for Google sign-in) act as independent controllers.
- Anthropic (AI models, United States): the text needed to write and review your book — your sentence, outline, materials and chapters. Not your email address or payment data.
- Railway (hosting, database and file storage, servers in the European Union).
- SendGrid / Twilio (sending emails, United States).
- Paddle (payments, as Merchant of Record).
- Google (Google sign-in, if you use it; Google Analytics, only with your consent).
- Cloudflare (hosting of the website bookify.it).
Transfers outside the European Economic Area rely on the European Commission’s adequacy decisions (EU–US Data Privacy Framework) or on standard contractual clauses.
4. How long we keep it
- Account, books, materials and brand kit: while your account exists. Deleting the account removes them.
- Exported files: 30 days, then they are deleted (you can export again).
- Balance and purchase history: 10 years, as required for tax records; after account deletion it is kept without your name or email.
- Product events: up to 24 months.
- A record that an address unsubscribed or bounced: kept so that it is never emailed by mistake.
5. Your rights
You can access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. From the account page you can download your data and delete your account; for anything else, write to support@bookify.it. You can withdraw consent to cookies at any time from “Cookie settings” at the bottom of the site. You can complain to the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or to the authority of your country.
6. Children
Bookify is not intended for people under 18.
7. Changes
We will publish any update here and, for important changes, tell you by email.