Legal
Privacy policy
What we collect, why, who else processes it, and how to get it back or have it erased.
Effective 29 October 2026 · Last updated 29 October 2026
1. Who is responsible for your data
BookPilot (bookpilot.org, including the BookPilot AI app) is run by Zirlandia Milkovic, a private individual based in Croatia. There is no registered company behind it.
- Name: Zirlandia Milkovic
- Country: Croatia
- Email: hello@bookpilot.org (general questions, purchases, refunds and privacy requests)
She is the controller of the personal data described here. No data protection officer has been appointed, because the law does not require one for an operation of this size; write to hello@bookpilot.org with any privacy question.
This policy covers three groups of people: visitors to bookpilot.org and its blog, e-book buyers who pay through Stripe, and app users who create a BookPilot AI account.
If you, as an app user, install the BookPilot tracking script on your own website, you are the controller of the data it collects there and BookPilot acts as your processor. Your own privacy notice needs to cover it.
2. Visitors and blog readers
You can read the website, the books page and the blog without an account. We do not set advertising or tracking cookies and we do not run a third-party analytics tool such as Google Analytics.
- Server logs. Our host, Netlify, processes your IP address, browser type, requested page and time to deliver the site and protect it against abuse. Legitimate interests, Art. 6(1)(f) GDPR.
- Netlify Real User Monitoring (RUM). Netlify measures page load performance on the site in aggregate. It does not set cookies and we only see anonymous statistics. Legitimate interests in a fast, working site, Art. 6(1)(f).
- Email. If you write to hello@bookpilot.org, we use your email address and message to answer you. Legitimate interests, or steps before a contract, Art. 6(1)(b)/(f).
The blog has no comments and no newsletter sign-up, so it collects nothing else from you.
3. E-book buyers
E-books are sold through Stripe Payment Links. When you click "Buy", you leave bookpilot.org and pay on a page hosted by Stripe. Stripe collects your name, email address, billing country and payment details. We receive your name, email, country, what you bought, the amount and the payment status; we never see your full card number.
We use this to deliver the e-book (a download link from Stripe and/or by email), to answer questions and refund requests, and to keep the accounting records the law requires. Contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c).
4. Store links (Amazon and others)
Many books link to Amazon or other stores. When you follow such a link you leave bookpilot.org; the store is responsible for its own data processing and its own terms apply. We get no personal data about you from those stores.
5. BookPilot AI app users
| Data | Why | Lawful basis (GDPR Art. 6) |
|---|---|---|
| Name, email, password (stored hashed by Supabase), country, currency, language | To run your account | Contract, 6(1)(b) |
| Book details you enter: title, description, genre, price, sales link, cover, optional sample text, bio and reviews | To analyse your book and generate marketing material — this is the service | Contract, 6(1)(b) |
| Generated output: analysis, personas, angles, creatives, scores | To give you what you asked for and let you return to it | Contract, 6(1)(b) |
| Campaign and performance data from an ad account you connect (Meta) | To build campaigns and show you what your advertising did | Contract, 6(1)(b) |
| Website events from your own site via the tracking script (event type, order value, campaign parameters, a random session key) | To attribute sales to ads | Your instructions; we act as processor |
| Plan, subscription and payment records (via Stripe) | To take payment and keep accounting records | Contract and legal obligation, 6(1)(b) and (c) |
| Security and audit logs (who did what, when — identifiers and outcomes, not content) | To detect abuse and investigate incidents | Legitimate interests, 6(1)(f) |
| Product emails and product analytics | Only if you switch them on in Settings | Consent, 6(1)(a) |
The app has no field for special category data (Art. 9). Reader personas are built from interests and life stage only, and the AI is instructed never to target on health, religion, ethnicity, sexual orientation, political views or trade union membership.
AI processing
Your book details are sent to Anthropic's API to generate the analysis and marketing material. Under Anthropic's commercial API terms, this input is not used to train its models. Your manuscript is never used to train any model by us. No automated decision with legal or similarly significant effects (Art. 22) is made; scores and suggestions are advisory.
6. Who processes data for us
| Provider | Purpose | Location / transfer safeguard |
|---|---|---|
| Netlify, Inc. | Website hosting, serverless functions, performance monitoring (RUM) | USA — EU-US Data Privacy Framework and/or Standard Contractual Clauses |
| Supabase, Inc. | App database and sign-in | Hosted in the region of our project; company in the USA — Standard Contractual Clauses |
| Anthropic, PBC | AI text generation in the app | USA — Standard Contractual Clauses / Data Privacy Framework |
| Stripe (Stripe Payments Europe, Ltd. and affiliates) | E-book payments and app subscriptions | EU (Ireland) with transfers to the USA — Data Privacy Framework and Standard Contractual Clauses |
| Meta Platforms | Only if you connect your Meta ad account in the app | Under your own relationship with Meta |
When data leaves the EEA, it is protected by an adequacy decision (including the EU-US Data Privacy Framework for certified companies) or by the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards. We do not sell or rent your data.
7. How long we keep it
- Emails to hello@bookpilot.org: up to 2 years after the conversation ends, unless they relate to a purchase.
- App account and book data: as long as your account exists; deleted when you delete the account, with backups rolling off within 30 days.
- Tracking events and campaign performance data: 25 months, or until you delete your account.
- Audit and security logs: 12 months.
- Hosting logs: as set by Netlify, normally a few days to 30 days.
- Purchase, invoice and payment records: 10 years from the start of the limitation period, as required by Art. 66 of the Croatian General Tax Act (Opći porezni zakon) — in practice about 11 years from the purchase.
8. Your rights
Under the GDPR you have the right to:
- access your data and get a copy (Art. 15);
- have inaccurate data corrected (Art. 16);
- have data erased (Art. 17);
- restrict processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interests (Art. 21);
- withdraw consent at any time, without affecting earlier processing (Art. 7(3)).
App users can export their data and delete their account in Settings → Your data. For anything else, write to hello@bookpilot.org. We answer within one month.
You have the right to lodge a complaint with a supervisory authority. In Croatia this is the Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr. You can also complain to the authority where you live or work in the EU.
9. Security
All traffic uses TLS. In the app, database row-level security means a request can only return rows that belong to your account. API keys and ad-platform tokens are kept server-side and never sent to your browser. We never ask for your Meta or Amazon password; connections use OAuth.
10. Children
The site and the app are not directed at children. We do not knowingly create accounts for anyone under 16.
11. Changes
We will post any change here and update the date at the top. App users will be told in the app before a material change takes effect.