Privacy policy
This policy explains what Iwe collects, why, and who it is shared with. The controller is [legal entity name, address]; contact [privacy contact email]. [To confirm with counsel: obligations under the Nigeria Data Protection Act 2023 and, for readers in the EU or UK, the GDPR.]
What we collect
- Account: your email address and, if you give it, your name.
- Free chapters: the email address and optional name you enter to read a free sample.
- Purchases: the book, price, currency, and payment reference. Card details go to Paystack and never reach us.
- Reading: which chapters were opened and when, your reading position, and highlights and notes you make (stored encrypted).
- Security: IP addresses and a device identifier (stored only as a one-way hash) for each chapter request, used to enforce the device limit, detect automated extraction, and trace leaked copies.
- Authors: profile details, books, and payout details. Bank details are sent to Paystack to set up payouts; we keep the reference Paystack returns, the account name, the bank name, and a one-way hash of the account number, never the number itself.
Who sees it
- The author of a book sees the email address and name of everyone who buys it or reads its free chapters, and may contact them about their books. [To confirm: lawful basis and the opt-out offered to readers.]
- Paystack processes payments and author payouts.
- Resend sends our emails (receipts and password reset links) and so receives your email address.
- Amazon Web Services stores encrypted files in Ohio, United States. [To confirm: database and application hosting provider and region.]
We do not sell personal data and we do not use advertising trackers.
Cookies
We use only cookies needed for the service: a sign-in session, a device cookie for the device limit, and a cookie that remembers free-chapter access for a book. No analytics or advertising cookies.
How long we keep it
- Free-chapter access expires after 30 days.
- Chapter access records and IP addresses: [period to confirm, for example 12 months].
- Orders: as long as required for tax and accounting [period to confirm].
- Accounts: until you ask us to delete yours.
Your rights
You can ask for a copy of your data, to correct it, or to delete it by writing to [privacy contact email]. You can also complain to the Nigeria Data Protection Commission [or the relevant regulator, to confirm].
Last updated: [date].