Privacy Policy

1. Who We Are

Imprint ("we", "us", "our") is an independent self-publishing platform. We are committed to protecting your personal data and processing it in accordance with the General Data Protection Regulation (GDPR) and applicable Irish data protection law.

Data controller: Imprint. Contact: privacy@imprintpublish.com

2. Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, and (where applicable) profile image, provided when you register or sign in with Google.
• Transaction data: Order history, payment amounts, and shipping addresses, collected when you purchase a book.
• Author data: Manuscript files, book metadata (title, genre, description), and Stripe Connect account information for authors.
• Usage data: Pages visited, search queries, and interactions with platform features (book clubs, reviews, etc.).
• Communications: Messages submitted via the contact form or email correspondence with Imprint.

3. How We Use Your Data

• To provide, maintain, and improve the Platform
• To process orders and facilitate royalty payments to authors
• To authenticate your account and keep it secure
• To send transactional emails (order confirmations, payout notices)
• To moderate content and enforce our Terms of Service
• To comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

4. Third-Party Services

We use the following third-party services which may process your personal data on our behalf. Each operates under their own privacy policy:

• Stripe — payment processing and author payouts (stripe.com/privacy)
• Lulu — print-on-demand fulfilment; your shipping address is shared to fulfil physical book orders (lulu.com/about/privacy-policy)
• Supabase — database and file storage hosting
• Vercel — platform hosting and edge network
• Google — optional OAuth sign-in (policies.google.com/privacy)
• Sentry — error monitoring (anonymised error traces only)
• Algolia — book search functionality (queries only; no personal data stored)

5. Cookies

We use essential cookies only:

• A session cookie to keep you logged in (next-auth.session-token)
• A CSRF cookie for security (next-auth.csrf-token)
• A local storage flag to remember your cookie consent choice

We do not use analytics, tracking, or advertising cookies.

6. Data Retention

We retain your account data for as long as your account is active, or as necessary to provide services. Order records are retained for 7 years for financial compliance purposes. You may request deletion of your account at any time — see Section 7.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten") — you can delete your account from your profile settings
• Restrict or object to processing in certain circumstances
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at privacy@imprintpublish.com. We will respond within 30 days.

8. Security

We use industry-standard measures to protect your data, including encrypted HTTPS connections, hashed passwords, and access controls. However, no online service can guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last updated" date. Significant changes will be communicated by email or a notice on the Platform.

10. Contact

For privacy-related queries, contact our data team at privacy@imprintpublish.com. You also have the right to lodge a complaint with the Data Protection Commission (Ireland) at dataprotection.ie.