← Back to home

Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains what bukpress collects, why, and what you can do about it. We collect as little as the Service needs to work, and we do not sell personal data.

1. What we collect

  • Account data — your email address and a hashed password. If you sign in with Google, we receive your Google account identifier and email address instead of a password you choose. Email addresses are encrypted at rest in our database.
  • Your content — the Markdown you write, your design settings and Brand Kits, and any cover images, background artwork or font files you upload.
  • Exported files — the PDF and EPUB files rendered from your projects, stored so you can download them.
  • Billing data — handled by Stripe. We store your Stripe customer and subscription identifiers, your plan and its status. We never see or store your full card number.
  • Operational logs — technical records needed to run and debug the Service, such as error traces and export job status.

2. How we use it

To operate your account, render and store your exports, enforce plan limits, process payments, send transactional email (password resets and account notices), and to troubleshoot problems. We do not use Your Content to train machine-learning models, and we do not use it for advertising.

3. Who we share it with

Only the service providers needed to run bukpress: our cloud hosting and object storage provider (for storing projects, artwork and exported files), Stripe (payments), Mailgun (transactional email), and Google (only if you choose Google Sign-In, or when your account imports a font from Google Fonts). Each processes data on our behalf under its own agreement. We do not sell personal data.

4. How long we keep it

Your projects, artwork and exports are kept while your account is active. Deleting a project deletes its content; deleting your account deletes your projects, uploads and exported files. Limited billing records may be retained where required by law or accounting obligations.

5. Security

Data is transmitted over TLS. Passwords are hashed, never stored in plaintext, and email addresses are encrypted at rest with a blind index used only for login and uniqueness checks. Uploads go directly from your browser to our storage provider using short-lived presigned URLs. No system is perfectly secure, but we treat your drafts as private by default.

6. Your rights

You can access, correct, export or delete your data. Most of it is available directly in the app; for anything else, or to request deletion of your entire account, see our data deletion page or write to support@buk.press. Depending on where you live, you may have additional rights under laws such as the GDPR or the LGPD.

7. Children

The Service is not intended for anyone under 18, and we do not knowingly collect data from children.

8. Changes

We may update this policy. Material changes will be announced in the app or by email, and the "last updated" date above will change.

9. Contact

Privacy questions: support@buk.press.