Privacy policyLast updated November 7, 2026·Version 1Loading the document…JavaScript is disabled; here is the plain text of the document.1. Who is responsible Host Ri LLC, the United States company that owns and operates the OwnEbook brand, is responsible for OwnEbook's account and service processing described here. Privacy contact: . Payment providers and other independent services may be separately responsible for their own processing. 2. Data and purposes Account: name, email, password hash, language, settings and security/session information, to operate and protect your account. Projects: prompts, reference images, uploaded files, generated text, images, PDFs and project metadata, to perform and support the creation, preview, editing and delivery you request. Usage and billing: job status, measured AI costs, balance entries, payments, subscription references and consent records, to price approved work, reconcile orders and handle refunds or disputes. Technical and support data: IP address, device/browser details, logs, error reports and messages or attachments you send to support, for security, diagnosis and responding to you. Optional browsing events: page visits, referral information and related browser/device identifiers when the relevant non-essential consent is enabled. Where a lawful basis is required, account, book and order processing relies on performing your contract; required records rely on legal obligations; proportionate security, fraud prevention and service diagnosis rely on legitimate interests subject to your rights. Optional tracking and marketing rely on the appropriate consent. We do not use payment data to infer sensitive personal characteristics. Avoid uploading unnecessary personal or sensitive information about yourself or others. 3. Who receives data AI processing: OpenRouter routes the prompts, text and images needed for your request to the selected model provider, including OpenAI or Anthropic where used. Processing, safety checks and provider retention are governed by the applicable provider arrangements. We do not promise that all provider processing stays in one country or that every provider has zero retention. Whop payments: Whop and its financial partners handle card entry, saved payment credentials, authentication and any required billing or identity information. We may send your email and order details to prepare checkout and receive payment, subscription, refund and dispute records. Host Ri LLC and Whop act as independent data controllers for their respective payment-related processing, not as joint controllers. See Whop's Privacy Policy. Operations: our hosting, storage and transactional-email providers receive what is needed to operate the service and send requested account or purchase messages. Authorized support staff can access relevant records to investigate a request; access is limited to its purpose. Optional support and marketing: Tawk receives live-chat interactions and related technical information when functional consent allows its widget. Whop Pixel receives browsing events when marketing consent is granted, for advertising attribution and measurement; it is separate from essential payment processing. Security: when Google reCAPTCHA is enabled for a form, Google may receive browser/device and interaction data to identify abusive traffic. Google's Privacy Policy and Terms apply to its service. Publishing: if you choose to connect a store or publish/share a book, the selected destination receives the book, assets and listing information needed for that action. Recipients of shared links may access those files. Do not treat a shared asset URL as private account-only storage. We may also disclose necessary information to comply with a lawful request, protect rights or investigate fraud. We do not sell customer project files or payment records as a data-broker product. Optional advertising disclosures may nevertheless be considered "sharing" or targeted advertising under some privacy laws; the consent and opt-out controls below apply. 4. Cookies and your choices Essential storage supports login, security, consent choices and the checkout you request. You can reject non-essential categories and still use the core service. Functional consent controls optional live chat; marketing consent controls Whop Pixel and any other enabled advertising integration. Analytics integrations, when enabled, use the applicable analytics consent category. Accepting a payment or the Terms does not grant marketing consent. Use the site's cookie controls to review or withdraw these choices. Withdrawal stops future optional tracking after the page reload required to unload a third-party script; it does not undo earlier lawful processing. Refusing chat does not prevent contacting . You may also contact us to exercise any applicable right to opt out of sale, sharing or targeted advertising. 5. Retention and deletion Account data and projects are kept while needed to provide your account and requested work. You can use Your Data or contact support for export or deletion. We retain billing, consent, fraud and dispute evidence only as needed for the applicable legal obligations, claim periods and security purposes, even where account content has been deleted. Backups and technical logs are removed through their retention cycles rather than necessarily at the instant of a deletion request. We assess deletion requests within the deadlines that apply to them and explain any lawful exception. Ask us for the retention criteria relevant to a specific record. OwnEbook does not receive or store full card numbers or CVC codes. Saved cards are managed by the payment provider, and deleting an OwnEbook project does not automatically delete the provider's legally required payment records. 6. International processing and security OwnEbook and its providers may process data outside your country, including in the United States. Where a restricted transfer requires safeguards, the applicable provider agreement and legal transfer mechanism must support that transfer, such as standard contractual clauses where relevant. You may request information about applicable safeguards at . This policy does not claim a regulatory registration, authorization or adequacy finding that has not been established. We use access controls, password hashing, secure transport and operational logging to protect the service. No system provides absolute security. Send security concerns to without including passwords or full payment credentials. 7. Rights and updates Depending on the law applicable to you, you may request access, correction, deletion, portability, restriction, objection or withdrawal of consent, and may complain to your competent supervisory authority. We verify identity proportionately and do not require unnecessary sensitive information. Requests about Whop's independent processing can also be directed to Whop through its privacy notice. Nothing here restricts rights under applicable US state, EU/EEA, UK, Moroccan or other mandatory privacy law. The service is for people with capacity to contract; it is not offered as a direct account service for children. A book intended for children does not authorize uploading unnecessary personal data about them. We publish updated policy versions and give appropriate notice of material changes.