Privacy Policy

1. Data controller

The controller of users personal data is the entity operating the Edulibro service. You may contact us about data protection matters at the email address given in the site footer.

2. What data we collect

Email address, hashed password, display name, interface language, account name, and the billing details passed to the payment provider. With an order we also store the subject and options of the publication — without them it cannot be produced or reissued.

3. Order content

The subject and outline entered by the customer are passed to the language model provider, which produces the text from them. We do not use this data to train models and do not share it with anyone beyond the providers listed below. If personal data appears in the subject it becomes part of the order — we advise against putting there anything you do not wish to pass on.

4. Finished publications

Files are stored on our servers, outside the public directory, and released only after an authorisation check. They are not indexed by search engines and have no publicly guessable addresses.

5. How long we keep data

Account data is kept for as long as the account exists. Orders abandoned at the free-outline stage are deleted together with the email address given with them after thirty days — we have no basis to keep them longer. Billing data is kept for the period required by tax law.

6. Who we share data with

Providers necessary to deliver the service: the payment provider, the language model provider that produces the text, the email provider, and the server infrastructure provider. Each receives only the data needed to perform its task.

7. Your rights

You have the right to access, rectify, erase, restrict processing of and port your data, and to object. We provide an organization data export on request. You may also lodge a complaint with your data protection authority.

8. Cookies

The cookies necessary for the service to work are the session cookie and the remember-me cookie. Only with your consent (Art. 6(1)(a) GDPR) do we use Google Analytics 4, a tool of Google Ireland Ltd., which sets the _ga and _ga_* cookies (up to 2 years) to count visits and see which content gets read. Data may be transferred to Google LLC in the USA under the Data Privacy Framework. Without consent Google Analytics sets no cookies. You can withdraw consent at any time via the "Cookie settings" link in the page footer. We do not use advertising trackers or cross-site profiling.

9. Waitlist

If you join the waitlist, we process your email address, the page language and the signup date. We do this to send what you asked for: a confirmation link and a single email on launch day (Art. 6(1)(b) GDPR). Your signup only counts once you click the link in the email. We send marketing tips only if you tick a separate consent box (Art. 6(1)(a) GDPR), which you can withdraw at any time. Every email includes a link that removes your address immediately. We keep addresses until launch and for at most 12 months after it.