Skip to content

Privacy policy

Version 1.1.0 • Effective 11 August 2026 • Last updated 11 August 2026

How SayeBook collects, uses and protects personal data: account details, orders, author applications, analytics, retention and your rights.

This text is a plain-language draft and still requires professional legal review before launch.Plain-language draft. Needs review against GDPR/local data protection law for every market we operate in, including lawful basis, data transfer and DPO requirements.

Data we collect

Account and profile data: name, email address, authentication identifiers and, for authors, a public profile.

Purchases and orders: titles purchased, amounts, billing details and payment references. Card numbers are handled by our payment provider and never stored by us.

Author applications and submissions: identity and rights information you provide when applying to publish, and the manuscripts and metadata you submit.

Reviews and follows: reviews you write, ratings you leave, and the authors you choose to follow.

Search and discovery activity: pages viewed, searches performed and interactions with recommendation rails, used in aggregate to improve the catalogue.

Financial and royalty data: for authors, sales and royalty statements tied to your published titles.

Support requests: the content of messages you send us and the information needed to resolve them.

Why we use it

To deliver your purchases, run author payouts, provide support, prevent fraud, meet accounting obligations and improve the service.

Who we share it with

We work with a small number of processors who necessarily receive some of your data to run the service: our payment provider (to process payments), our cloud database and hosting provider (to store and serve the platform), and, where configured, an email delivery provider (to send transactional email).

These processors act under contract, only for the purposes described here, and never receive more data than they need to do their job.

Retention

Account data is kept while your account is open. Order and royalty records are kept as long as required by accounting and tax rules, then deleted or anonymised.

Account and data requests

You can access, correct, export or delete your personal data, and object to certain processing, by contacting us. We aim to respond within one month.

Security

We use encrypted connections, access controls limiting who on our team can see personal data, and a managed hosting provider with its own security practices. No system is completely risk-free, and we will tell you if a breach affects your data.

Contact

Privacy requests can be sent through our contact page.

Version history

  • Version 1.1.011 August 2026

    Added author applications, reviews/follows, discovery analytics and royalty data as explicit categories; named processor categories.

  • Version 1.0.01 November 2025

    Initial publication.