Privacy Policy

Last updated: July 22, 2026

This Privacy Policy explains how Data Prompting S.r.l.s. ("Booksmaker", "we", "us") processes the personal data of users of booksmaker.ai and the Books Maker service (the "Service"), in accordance with Regulation (EU) 2016/679 ("GDPR"), Italian Legislative Decree 196/2003 as amended, and other applicable data protection laws.

1. Data Controller

Data Prompting S.r.l.s.
Viale Papiniano 22/B โ€“ 20123 Milan (MI), Italy
VAT: 14802240961
General contact: info@booksmaker.ai
Privacy and rights requests: support@booksmaker.ai

We have not appointed a Data Protection Officer (DPO), as we are not required to do so. For any request concerning your personal data, please contact the address above.

2. Categories of personal data we process

  • Identification and contact data: name and email address provided at registration.
  • Account and credential data: login information and profile settings. Passwords are stored in encrypted (hashed) form.
  • User Content: the texts, prompts, instructions and materials you upload or enter, as well as the books and outputs generated by the Service ("Generated Content").
  • Technical and usage data: IP address, browser and device type, time zone, session data and technical logs.
  • Payment data: handled by our reseller/Merchant of Record (see ยง4 and ยง6). We do not process or store your full payment card details.
  • Communications: the content of your support requests.

3. Purposes of processing and legal bases

Purpose Legal basis (Art. 6 GDPR) Retention
Registration, provision of the Service and account management Performance of a contract (Art. 6.1.b) For the duration of the relationship
Processing prompts and generating Content via AI Performance of a contract (Art. 6.1.b) Time needed for generation; Content remains in your account until deleted
Support and handling of requests Contract / legitimate interest (Art. 6.1.b/f) Up to 24 months after case closure
Security, fraud and abuse prevention Legitimate interest (Art. 6.1.f) Up to 12 months (logs)
Tax, accounting and legal obligations Legal obligation (Art. 6.1.c) As required by law (generally 10 years for accounting records)
Marketing communications and newsletter Consent (Art. 6.1.a) Until consent is withdrawn
Service improvement (aggregated statistics and diagnostics) Legitimate interest (Art. 6.1.f) Aggregated/anonymised, without time limit

For processing based on legitimate interest we have carried out a balancing test; you may request details and object at any time (ยง8).

4. Use of Artificial Intelligence and your content

The Service uses artificial intelligence models to generate and format content. In particular:

  • We do not use your Content, prompts or personal data to train, re-train or improve any AI model โ€” whether our own or third-party models.
  • Your prompts and materials are transmitted to AI model providers (see ยง6) solely to produce the output you requested. We select providers that, under their API terms, do not use data submitted via API to train their models.
  • We apply principles of transparency, non-discrimination and human oversight. Generated Content may contain inaccuracies: you are responsible for reviewing it (see the Terms and Conditions).

5. Nature of data provision

Providing identification and contact data is necessary to register and use the Service; refusal makes use of the Service impossible. Providing data for marketing purposes is optional and does not affect your use of the Service.

6. Recipients and processors

To operate the Service we rely on selected third-party providers acting as processors (Art. 28 GDPR) or independent controllers, including:

  • Cloud infrastructure and hosting providers (data storage and platform operation);
  • AI model providers, including U.S.-based providers (e.g. OpenAI, Anthropic) and gateways routing to open-source or third-party models, used solely to generate Content;
  • Transactional email providers (confirmation emails, account notifications);
  • Reseller / Merchant of Record for payments: sales and payments are processed through Lemon Squeezy, acting as merchant of record and independent controller of payment data under its own privacy policy;
  • Legal, tax and accounting advisors;
  • Public authorities, where required by law.

An up-to-date list of key processors is available on request at support@booksmaker.ai.

7. Transfers of data outside the European Economic Area (EEA)

Some providers (in particular AI model providers and certain cloud services) may process data outside the EEA, including in the United States. In such cases, transfers are made on the basis of appropriate safeguards under Art. 44 et seq. GDPR, such as:

  • European Commission adequacy decisions (including, where applicable, the EUโ€“U.S. Data Privacy Framework);
  • Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented by additional measures where necessary.

You may request a copy of the safeguards in place by writing to support@booksmaker.ai.

8. Your rights

As a data subject you have the right, under Arts. 15โ€“22 GDPR, to:

  • access your data and obtain a copy;
  • have inaccurate data rectified;
  • have your data erased ("right to be forgotten");
  • restrict processing;
  • data portability;
  • object to processing based on legitimate interest;
  • withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, write to support@booksmaker.ai. We will respond within one month, extendable where permitted.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the supervisory authority of your country of residence.

9. Data retention

We retain data only for as long as necessary for the purposes described (ยง3). Upon account deletion, your Content and account data are deleted or anonymised within a reasonable period, except where we are required to retain certain data for legal obligations (e.g. accounting/tax records).

10. Minors

The Service is reserved for individuals aged 18 or over. We do not knowingly collect data from minors. If we become aware of an account created by a minor, we will delete it.

11. Cookies and similar technologies

The website uses only technical and strictly necessary cookies required for the Service to function and for authentication, for which no consent is required. We do not use profiling cookies or third-party analytics tools. Should this change, we will update this Policy and, where necessary, request your consent via a banner.

12. Security

We implement appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, including encryption in transit, access controls and backups. However, no system is 100% secure.

13. Changes to this Policy

We may update this Policy. In case of material changes we will notify you via the website or by email. The version published on booksmaker.ai with the relevant update date prevails.

14. Contact

For any questions about this Policy or the processing of your data:
Data Prompting S.r.l.s. โ€“ Viale Papiniano 22/B, 20123 Milan (MI), Italy โ€“ support@booksmaker.ai

Updated on 07/22/2026