Privacy Policy

Introduction

Booova is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI book agent. Booova is operated by NOWGIC LTD (company number 16149967), a company registered in England and Wales. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For UK GDPR and the EU GDPR, NOWGIC LTD is the controller of your personal data.

Information we collect

We collect the following types of information to provide and improve our service:

• Account information: email address for authentication and account management. If you sign in with Google, we receive the email address (and name, if Google provides it) associated with that Google account.
• Book data: recordings, documents, notes, transcripts, outlines, manuscripts, illustrations, and agent chat, stored so you can keep writing and export your work
• Usage data: basic analytics to improve our service (for example, feature usage and error logs). We may publish aggregated, fully anonymized usage statistics in public reports. These statistics can never identify any individual or reveal book content.
• Payment information: processed securely through Stripe. We do not store card details.

AI processing

Our service uses AI providers to transcribe your sources, help write your book, and generate cover art and illustrations:

• Your recordings, documents, notes, writing requests, and image prompts are sent to AI providers to transcribe, draft, and illustrate
• When the agent researches a topic, search queries may be sent to a web search provider. Results may inform the book. You are responsible for rights in what you publish.
• We do not use your content to train AI models
• Your books and sources stay associated with your account
• You can delete a book or your account at any time

Other people in your materials

Recordings, interviews, documents, and the books you write may include personal data about people other than you. You are responsible for having the rights and permissions needed to upload that material and to have it processed. We rely on your warranties in the Terms of Service. We do not independently obtain consent from people who appear in your sources. If someone asks us to delete data about them, we will review the request and may remove the relevant material or ask you to do so.

Data storage and security

We implement appropriate measures to protect your data:

• Encrypted cloud storage for all user data
• Industry standard security protocols (HTTPS, encryption at rest)
• Secure data centres with reputable cloud providers
• Regular security reviews and updates

Data sharing

We do not sell your personal data. We do not share it with advertisers to show you ads on other sites. We may share information only in these limited circumstances:

• With your explicit consent
• With service providers who assist in operating our platform (for example, cloud hosting, payment processing, and AI processing)
• Within NOWGIC LTD, as needed to operate Booova
• When required by law or to protect our legal rights

Data retention

We retain your data for the following periods:

• Account data (email, preferences): retained until you delete your account
• Books, sources, transcripts, illustrations, and agent chat: retained until you delete them or delete your account
• Analytics data: retained by our analytics provider in accordance with their retention policies. You can request deletion at any time
• Payment records: retained for up to 7 years as required by UK tax and accounting regulations
• Verification codes (OTP): automatically deleted after 15 minutes
• Login sessions: your login session expires after 30 days of inactivity, requiring you to sign in again. This does not affect your books or account data

Legal basis for processing

Under UK GDPR and GDPR Article 6, we process your data based on the following legal grounds:

• Performance of contract: processing your materials and producing the book workflow you signed up for
• Consent: analytics cookies and optional tracking are only activated with your explicit consent
• Legitimate interest: maintaining security, preventing fraud, and improving service reliability
• Legal obligation: retaining payment records as required by UK financial regulations

Third party data processors

We use the following categories of third party service providers to operate our platform. All processors are bound by data processing agreements and process data only on our instructions:

• Speech recognition provider (US based): receives audio for transcription. Audio is processed to produce a transcript and is not retained by the provider after processing is complete
• AI language processing provider (US based): receives text to draft, revise, and improve your book. Content is not used for model training
• Image generation provider (US based): receives prompts to generate cover art and illustrations. Images are not used to train our models
• Web search provider (US based): receives search queries when the agent researches a topic. Queries are processed to return results, not to train our models
• Cloud storage provider (global CDN): stores encrypted books, sources, illustrations, and related files
• Payment processor, Stripe (US based): processes payment information under Stripe's own privacy policy
• Email delivery provider: sends sign in codes and account messages
• Analytics provider, Mixpanel (US based): receives usage events only with your consent. We configure Mixpanel not to store IP addresses. Mixpanel may associate events with your account after you sign in
• Advertising measurement, Google Ads (US based): measures ad campaign performance using Google Consent Mode. Tracking respects your cookie preferences
• Session and rate limiting provider (US based): manages authentication sessions. No book content is stored
• Sign in with Google (US based): if you choose Google sign in, Google authenticates you under Google's own terms and privacy policy. We receive the account identifiers needed to create or open your Booova account

International data transfers

Some of our service providers are based in the United States. For transfers of personal data outside the UK and EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or the service provider's participation in recognised data protection frameworks, to ensure your data is protected to the same standard as under UK GDPR.

Cookies and tracking

We use essential cookies to support core functionality:

• Authentication and session management
• User preferences and settings

We use optional analytics cookies (Mixpanel) and advertising measurement cookies (Google Ads) to understand how the service is used and to measure advertising. These are only activated with your explicit consent via the cookie banner. We implement Google Consent Mode v2, so tracking respects your cookie preferences. If you decline cookies, Google uses privacy preserving modelling rather than individual tracking.

We do not use cookies for tracking you across other sites or for behavioural advertising.

Your rights

Under UK GDPR, GDPR, and applicable privacy laws, you have the right to:

• Access your personal data and books
• Correct inaccurate personal data
• Export your manuscripts in standard formats (data portability)
• Delete your account and associated data from your account settings
• Restrict or object to certain processing, where the law allows
• Withdraw consent for analytics cookies at any time
• Opt out of non essential communications
• Complain to the UK Information Commissioner's Office (ICO) or your local supervisory authority

To exercise these rights, email us at the address below. We will respond within one month, or tell you if we need more time as allowed by law. We may need to verify your identity before completing a request.

Children

The service is not directed at children under 13, or the equivalent minimum age in your country. We do not knowingly collect personal data from children under that age. If you believe we have, contact us and we will delete it.

Contact

If you have questions about this privacy policy or our privacy practices, or to exercise your rights, contact us at contact@booova.com

NOWGIC LTD, company number 16149967. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Policy updates

We may update this privacy policy from time to time. Any significant changes will be notified via email or through a notice on our website.