Privacy Policy

Last updated: July 6, 2026

BookArc is a book delivery platform that helps authors send books directly to their readers. This Privacy Policy explains how we collect, use, and protect your personal data when you use BookArc at bookarc.app and our associated services.

BookArc is operated by Orpheus Technology Ltd, registered in England and Wales.

What Information Do We Collect?

Email Address and Name
When an author shares a book with you through BookArc, we collect your email address and, where provided, your name. This allows us to send you your download link, identify your delivery, and communicate with you about that book.

Download and Delivery Data
We record which books have been delivered to you, when downloads occurred, and which formats or delivery methods were used. This helps us ensure your download works and lets the author understand how their delivery campaign is performing.

Device and Technical Information
We automatically detect the type of device and operating system you are using so we can suggest the most compatible reading format. We also collect standard technical data such as your IP address, browser type, and approximate location (country or region level) for security, fraud prevention, and service operation.

Usage Data
We record how you interact with BookArc delivery pages — for example, whether a page was viewed and whether a download was initiated — to help authors measure campaign performance and to improve the service.

Author Account Data
If you are an author or publisher using BookArc to deliver books, we collect your name, email address, billing information, and content configuration data to provide and manage your account.

Support Correspondence
Any messages you send to our support team are retained to help us resolve your query and improve the service.

How Do We Use Your Information?

We use the information we collect to:

• Deliver books and download links on behalf of the author or publisher who shared them with you
• Detect your device type and suggest the best reading format
• Send you emails that an author or publisher has authorized us to send on their behalf
• Allow authors to view aggregated delivery and engagement statistics for their campaigns
• Operate, maintain, and improve the BookArc platform
• Prevent fraud and abuse
• Comply with our legal obligations

We process your data on the basis of: legitimate interests (delivering the service and preventing abuse); contract performance (providing services to authors); legal obligations (billing and tax compliance); and, where required by law, your consent.

Do We Read Your Books or Content?

No. BookArc facilitates the delivery of books from authors to readers. We do not read, analyze, or retain the content of any books delivered through our platform beyond what is technically necessary to transmit them to you.

Will We Send You Emails?

We will only send you emails that the author or publisher who shared a book with you has authorised. These include delivery confirmation emails, download link emails, and follow-up messages the author has configured.

We will never send you unsolicited marketing emails or emails from third parties unrelated to the author who shared a book with you. You can unsubscribe from any author's list at any time using the unsubscribe link in their emails.

For users in the EU and UK, we comply with GDPR and the UK GDPR. Marketing communications are only sent with appropriate lawful basis.

Do We Share Your Information?

We do not sell your personal data.

We may share your data with:

• Authors and publishers who delivered books to you — they can see that a delivery was made to your email address and whether it was downloaded.
• Trusted service providers who help us operate the platform (hosting, payment processing, email delivery), under appropriate contractual protections — see our published sub-processor list.
• Law enforcement or regulatory authorities where required by law.

We do not share your data with advertisers or data brokers.

Do We Use Cookies?

Yes. Cookies on our pages fall into the following categories:

Essential cookies (always on)

These are required for the site to work and do not need your consent:

• Maintaining your session while interacting with a delivery page
• Signing authors in to their dashboard
• Security tokens that protect forms from forgery
• Remembering your cookie preferences

We also collect aggregate, privacy-preserving page analytics on our own servers. This does not use cookies: IP addresses are hashed with a salt that changes daily, so they cannot be traced back to you.

Optional analytics and marketing cookies (only with your consent)

Authors may add third-party analytics or advertising tools to their individual landing pages:

• Google Analytics — helps the author understand how their page is used. Data is processed by Google; see the Google Privacy Policy.
• Meta (Facebook) Pixel — measures the effectiveness of the author's advertising and may be used by Meta to profile visitors for ad targeting across other websites. See the Meta Privacy Policy.

If you are visiting from the EEA, the United Kingdom, or Switzerland, these tools are never loaded unless you opt in through the cookie banner shown on the page. You can accept all, reject all, or choose per category — rejecting them never affects your ability to use the page. You can change or withdraw your choice at any time using the "Cookie Settings" link in the page footer, and your choice is remembered for 180 days.

You can also control or delete cookies through your browser settings at any time.

Do We Collect Information From Children?

BookArc is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us.

Where Is My Information Stored?

Your data is stored and processed in the United Kingdom and by service providers in the European Economic Area and United States. Where data is transferred outside the UK or EEA, we rely on appropriate legal safeguards such as Standard Contractual Clauses, supplemented by technical measures including encryption and restricted access.

How Is My Information Secured?

We protect your data using industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) for all data transmitted to and from our services
• Encryption at rest for sensitive stored data
• Access controls and role-based permissions
• Regular security reviews and vulnerability management

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

How Do I Delete My Data?

You can request deletion of your personal data at any time by contacting us at hello@bookarc.app. Author accounts can be deleted from account settings; associated reader delivery data is deleted within 60 days.

How Long Is My Data Retained?

We retain your data for as long as necessary to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. Where data is no longer needed, we delete it securely.

Your Rights

If you are in the UK or EU, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal obligations.
• Objection: Object to processing based on legitimate interests, including marketing.
• Portability: Request your data in a structured, machine-readable format.
• Complaints: Lodge a complaint with the Information Commissioner's Office (UK) or your national supervisory authority (EU).

To exercise any of these rights, please contact us at hello@bookarc.app.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Where changes are material, we will notify you by email or by a notice on our website.

Contact Us

For any questions about this Privacy Policy or to exercise your data rights, please contact:

EU Representative

Chris Banks serves as BookArc's representative in the EEA for data protection matters under Article 27 of the General Data Protection Regulation. You can reach him via hello@bookarc.app.