Security
We take the security of your account, your manuscripts, and your payment information seriously. Your book is your life's work, and we treat it that way. This page summarizes the practices we use to protect it.
Encryption
- In transit: all traffic between you and the Service is encrypted with HTTPS/TLS.
- At rest: manuscripts, generated files, and database records are stored on infrastructure that encrypts data at rest.
Accounts and passwords
- Passwords are hashed with bcrypt — we never store or have access to your plain-text password.
- Logins use signed, expiring session tokens; we apply rate limiting and lockouts to repeated failed login attempts.
- Password reset uses a single-use, time-limited token (a one-time magic link).
Payments
All payments are processed by PayPal. We never see or store your credit-card number — card data goes directly to the payment processor, which handles PCI-DSS compliance. We retain only the transaction record needed for receipts, refunds, and accounting.
Data isolation and access
- Every request that loads a project, draft, or file re-checks that it belongs to the signed-in account, so one customer can never reach another customer's work.
- Access to production systems is limited to authorized operators on a least-privilege basis.
- Your manuscript is sent to our AI providers only as needed to perform the task you requested, and those providers contractually agree not to train their models on it (see Sub-processors).
Storage, backups, and deletion
Your files are stored on our primary infrastructure and mirrored to encrypted backup object storage. You can delete your data — or your entire account — at any time from your Account page. We keep your files while your account is active; details are in our Privacy Policy.
Responsible disclosure
If you believe you have found a security vulnerability, please tell us before disclosing it publicly. Email cantos@bookdesigner.ai with the details and steps to reproduce. We will acknowledge your report, investigate promptly, and keep you informed. We appreciate the security community's help in keeping authors' work safe.
A note on our stage
BookDesignerAI is a growing service, and we improve our security posture continuously. If you have a question about how we handle a specific kind of data, we are happy to answer it — just reach out.