Privacy policy

Data controller

Carlos Alfonso Arbelaez Acevedo, an individual located in Colombia, operates KDP Book Cover Studio and is responsible for the processing described in this policy. You can contact him at carlos@kdpcoloringbook.com.

1. Data we process

• Account: your email and, if you sign in with Google, the name on your Google account. Also your preferred language and whether you agreed to receive news by email.
• Content: the messages you write in the chat, your cover plan (title, subtitle, author, style), the reference images you upload and the generated covers.
• Credits and purchases: your balance, the history of credits used and returned, and the purchase details Dodo Payments shares with us (pack, amount, date and status). We do not receive your full card number.
• Technical data: the session cookie and server logs (for example, IP address, browser and request times), needed for the service to work and stay secure.

2. How we use it

We process your data to provide the service you ask for, with your consent where we ask for it (for example, for news by email), based on our legitimate interest in keeping the service secure, and to comply with the law.

• Create your account, sign you in and keep it secure.
• Design, save and deliver your covers.
• Manage your credits, purchases and refunds.
• Send you the emails needed to use the service, such as the sign-in link.
• Send you news and tips only if you ticked the box for it. You can unsubscribe at any time.
• Answer your support requests.
• Prevent fraud and abuse, and comply with legal obligations.

3. Providers that process data

We work with these providers to run the service. Each one only receives the data it needs for its function:

• Railway: hosting for the application and the database (United States).
• Amazon Web Services S3: image storage, such as your references and covers (United States).
• OpenAI: text and image generation. It receives your messages, the cover plan and the reference images needed to generate the result.
• Google: sign-in with Google, if you choose that option.
• Resend: email delivery, such as the sign-in link.
• Sentry: logging of technical errors in the application, so we can detect and fix them. It may include technical data about the failed request, without your creative content.
• Google Analytics: website usage statistics (pages visited, where visits come from, approximate country and device type), only if you accept analytics.
• Dodo Payments: payment processing, taxes and receipts, as merchant of record. It processes your payment data under its own privacy policy.

4. International transfers

Our providers may process your data outside your country, mainly in the United States. We choose providers with reasonable security measures and only share what is needed.

5. Other disclosures

We do not sell your data. We may only disclose it when needed to comply with the law, respond to legal process, investigate fraud or protect the rights and safety of users and the service.

6. Cookies and local storage

We use a session cookie, which is essential to keep you signed in, and your browser’s local storage to remember preferences such as language. If you sign in with Google, Google may use its own cookies during that process.

Only if you accept analytics in the cookie notice do we use Google Analytics (_ga cookies) to see which pages are visited and where visits come from, plus our own cookie (bcs_ft) that remembers where you first came from (for example, a search engine or a link), so we know which channels work. If you decline, none of this is loaded. You can change your choice at any time from the “Cookies” link at the bottom of the page. We do not use advertising cookies.

You can clear cookies and local storage in your browser settings, although you will then need to sign in again.

7. Retention

We keep your data while your account is active. If you delete your account from the menu, your projects, conversations and images are deleted. We may keep purchase and credit records for as long as the law requires for accounting, tax or fraud-prevention purposes, and backups are removed within a limited period.

8. Security

We use reasonable security measures, such as encrypted connections and sessions in protected cookies, but no internet-connected service can guarantee absolute security. Let us know if you notice unauthorized access to your account.

9. Your rights

Depending on where you live, you may request access to your data, correct it, delete it, restrict or object to its processing, request a copy and withdraw your consent where applicable. You can delete your account yourself from the account menu.

For any request, email carlos@kdpcoloringbook.com from the address on your account. Some requests may be limited by legal retention obligations.

10. Minors

The service is intended for people aged 18 and over. We do not knowingly process data from minors; if you believe a minor has given us their data, email us and we will delete it.

11. Changes to this policy

We may update this policy when the service, our providers or the law change. The current version will always be on this page, with its last updated date.