Compliant with the Digital Personal Data Protection (DPDP) Act, 2023 & Information Technology (SPDI) Rules, 2011 • Republic of India (Bharat)
1. Overview & Data Fiduciary Details
At Bookified™, we respect your privacy and are committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
This Privacy Policy explains what personal information we collect, how it is processed, stored, and the rights you hold as a Data Principal.
2. Information We Collect
Account Information: Name, email address, profile picture, and authentication identifiers provided through our secure authentication partner (Clerk).
User Uploaded Content: PDF documents, book titles, author details, and auto-generated cover images you choose to upload to your digital library.
Voice Interaction & Session Transcripts: Audio streaming data and conversation text transcripts generated during voice sessions with the AI assistant.
Technical Metadata: Browser type, operating system, IP address, and session timestamps used for security monitoring and fraud prevention.
3. Purpose of Data Processing (Lawful Grounds)
We process your personal data solely for specified, lawful purposes with your explicit consent:
Providing and managing your user account and subscription quotas;
Segmenting and querying PDF book text to power interactive voice answers;
Delivering high-quality synthetic voice conversations via ElevenLabs & Vapi AI;
Ensuring platform security, bug debugging, and compliance with statutory Indian obligations.
4. Storage & Security Standards
We enforce strict security practices under Rule 8 of the SPDI Rules, 2011, including encrypted HTTPS transmission in transit (TLS 1.3), hashed tokens, and encrypted database storage with MongoDB Atlas and Vercel infrastructure.
5. Rights of Data Principals (Under DPDP Act 2023)
Under Indian data protection regulations, you have the right to:
Right to Access: Request a summary of your personal data processed by us;
Right to Correction & Erasure: Request the correction of inaccurate data or complete deletion of your account and books;
Right to Nominate: Nominate another individual to exercise your rights in the event of incapacity;
Right of Grievance Redressal: Direct any privacy concerns directly to our designated Grievance Officer.
6. Data Protection & Grievance Officer Contact
If you have any questions, wish to exercise your data principal rights under the DPDP Act 2023, or have a grievance regarding your privacy, please contact our designated officer: