1. Who We Are

Bookstagram Studio is a content creation tool for book influencers, operated by Flirting With Fiction, based in Vancouver, Washington, United States. References to "we," "us," or "our" in this Policy refer to Flirting With Fiction operating Bookstagram Studio.

Contact: For privacy-related questions, email us at privacy@bookstagramstudio.com

2. Information We Collect

2.1 Information you provide directly

• Account information: When you create an account, we collect your email address and the username you choose.
• Voice recordings (Brain Dump): When you use the Brain Dump feature, we collect audio recordings you make. These are processed by OpenAI's Whisper API to produce text transcripts. Both the audio file and the transcript are stored in your Reading Vault.
• Book and reading data: Information you enter about books you read, including titles, authors, ratings, reviews, reading dates, and notes.
• Highlights and quotes: Text you capture via OCR Quote Capture or enter manually from physical or digital books.
• ARC and publisher information: Advance Reader Copy details including deadlines, embargo dates, and publisher contacts you enter manually.
• Settings and preferences: Your writing style preferences, banned words list, disclosure preferences, and affiliate program details.

2.2 Information from connected platforms

• Instagram (when connected): We access comments on your Instagram posts and the ability to post replies on your behalf. We do NOT access your direct messages, follower list, following list, or any account data beyond what is necessary to display and reply to comments. Access requires your explicit authorization and can be revoked at any time.
• Buffer (when connected): We access your Buffer profiles and scheduled posts to enable scheduling content from Bookstagram Studio. We do not access your Buffer billing information.
• Readwise (when connected): We access your highlight library to import reading highlights into your vault.
• Kindle Highlights (file upload): When you upload a My Clippings.txt file, we parse it locally to extract highlights. The file is not stored permanently after processing.

2.3 Information collected automatically

• Usage data: We collect information about how you use the app, including which features you use and when. This helps us improve the product.
• Device information: Browser type, operating system, and general device type.
• No cross-site tracking: We do not use tracking pixels or third-party advertising scripts. We do not track your activity outside of Bookstagram Studio.

3. How We Use Your Information

• To provide the service: Your vault data is used to generate content, populate templates, and power all features of Bookstagram Studio.
• To process voice recordings: Audio recordings are sent to OpenAI's Whisper API for transcription. OpenAI processes audio per their API Terms and Privacy Policy. We do not use your recordings to train our models or any AI systems.
• To generate content: Your vault data (including transcripts, ratings, and notes) is sent to Anthropic's Claude API to generate captions and reviews on your behalf. We do not use your data to train AI models.
• To communicate with you: We send product updates, deadline reminders, and support communications. You can opt out of non-essential communications at any time.
• To improve the product: Anonymized, aggregated usage data helps us understand which features are most valuable.

4. AI Processing — What This Means For You

• Your voice recordings: Sent to OpenAI Whisper for transcription. OpenAI does not use API inputs to train their models per their API usage policies. Audio is deleted from their servers after processing.
• Your vault data and transcripts: Sent to Anthropic Claude to generate captions, reviews, and other content. Anthropic does not use API inputs to train their models per their API usage policies.
• Trained on your voice, not others: Bookstagram Studio does not use any book text, reviews, or published works to power its AI features. The AI only processes data you personally provide — your own recordings, notes, ratings, and highlights. We do not use any copyrighted book content in our AI processing.

5. Data Storage and Security

• Where data is stored: Your Reading Vault data is stored in secure cloud infrastructure using industry-standard encryption in transit and at rest.
• Audio files: Voice recordings are stored in secure cloud storage. You can delete individual recordings from your vault at any time.
• API keys: If you provide your own API keys (for Anthropic, OpenAI, or Buffer), these are stored encrypted and never visible in plaintext after entry.
• Data retention: We retain your data as long as your account is active. If you delete your account, all vault data, recordings, and generated content is permanently deleted within 30 days.

6. Your Rights

• Access: You can export your full Reading Vault at any time from Settings.
• Correction: You can edit any data in your vault directly within the app.
• Deletion: You can delete individual recordings, books, or your entire account at any time. Deletion is permanent.
• Portability: You can export your vault data as JSON or CSV from Settings.
• Withdraw consent: You can disconnect any connected platform (Instagram, Buffer, Readwise) at any time from Settings. Withdrawing Instagram access stops all comment reading and replying immediately.

To exercise any of these rights, contact us at privacy@bookstagramstudio.com or use the controls available directly in the app settings.

7. Third-Party Services

Bookstagram Studio integrates with the following third-party services. Each service's own privacy policy applies to data they process:

• Anthropic Claude API: anthropic.com/privacy — content generation
• OpenAI Whisper API: openai.com/policies/privacy-policy — voice transcription
• Instagram Graph API (Meta): privacycenter.instagram.com — comment management when connected
• Buffer API: buffer.com/legal/privacy-policy — post scheduling when connected
• Readwise API: readwise.io/privacy — highlight import when connected
• Google Books API: policies.google.com/privacy — book metadata lookup
• Bookshop.org: bookshop.org/info/privacy — affiliate link destination

8. Children's Privacy

Bookstagram Studio is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used our service, contact us at privacy@bookstagramstudio.com.

9. Instagram Data Use — Additional Disclosure

Because Bookstagram Studio integrates with Instagram's Graph API, we provide the following additional disclosures as required by Meta's Platform Terms:

• Data accessed: Comments on your Instagram posts, your basic profile information (username, profile photo ID), and comment replies.
• How it is used: Comment data is used solely to display comments in the The Reply Studio inbox and to help you draft and send replies. It is not used for advertising, profiling, or data aggregation.
• Data sharing: Instagram comment data is not shared with any third party except Anthropic's Claude API, solely for generating draft reply suggestions. This data is not stored beyond the current session after a reply is sent or skipped.
• Data retention: Comment data retrieved from Instagram is held in memory during your active session only. It is not stored in your Reading Vault. Only the fact that a reply was sent is retained for analytics — not the comment content.
• Revoking access: You can disconnect your Instagram account at any time from Settings > Connected Platforms. This immediately revokes all access to your Instagram data.

10. Changes to This Policy

We may update this Privacy Policy as our product evolves. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Continued use of Bookstagram Studio after changes constitutes acceptance of the updated policy.

11. Contact Us

• Email: privacy@bookstagramstudio.com
• Mailing address: Flirting With Fiction, Vancouver, Washington, United States
• Response time: We aim to respond to all privacy-related requests within 5 business days.