Skip to content
Iwe

Draft

This text is a draft and has not been reviewed by a lawyer. It will change before launch.

Privacy policy

This policy explains what Iwe collects, why, and who it is shared with. The controller is [legal entity name, address]; contact [privacy contact email]. [To confirm with counsel: obligations under the Nigeria Data Protection Act 2023 and, for readers in the EU or UK, the GDPR.]

What we collect

  • Account: your email address and, if you give it, your name.
  • Free chapters: the email address and optional name you enter to read a free sample.
  • Purchases: the book, price, currency, and payment reference. Card details go to Paystack and never reach us.
  • Reading: which chapters were opened and when, your reading position, and highlights and notes you make (stored encrypted).
  • Security: IP addresses and a device identifier (stored only as a one-way hash) for each chapter request, used to enforce the device limit, detect automated extraction, and trace leaked copies.
  • Authors: profile details, books, and payout details. Bank details are sent to Paystack to set up payouts; we keep the reference Paystack returns, the account name, the bank name, and a one-way hash of the account number, never the number itself.

Who sees it

  • The author of a book sees the email address and name of everyone who buys it or reads its free chapters, and may contact them about their books. [To confirm: lawful basis and the opt-out offered to readers.]
  • Paystack processes payments and author payouts.
  • Resend sends our emails (receipts and password reset links) and so receives your email address.
  • Amazon Web Services stores encrypted files in Ohio, United States. [To confirm: database and application hosting provider and region.]

We do not sell personal data and we do not use advertising trackers.

Cookies

We use only cookies needed for the service: a sign-in session, a device cookie for the device limit, and a cookie that remembers free-chapter access for a book. No analytics or advertising cookies.

How long we keep it

  • Free-chapter access expires after 30 days.
  • Chapter access records and IP addresses: [period to confirm, for example 12 months].
  • Orders: as long as required for tax and accounting [period to confirm].
  • Accounts: until you ask us to delete yours.

Your rights

You can ask for a copy of your data, to correct it, or to delete it by writing to [privacy contact email]. You can also complain to the Nigeria Data Protection Commission [or the relevant regulator, to confirm].

Last updated: [date].