BookArc is a reading and book-delivery platform that lets authors and publishers send books directly to their readers, and lets you read and organise those books in your personal BookArc library. This Privacy Policy explains how we collect, use, and protect your personal data when you use BookArc at bookarc.app, our reading apps, and our associated services.

BookArc is operated by Orpheus Technology Ltd, registered in England and Wales.

Email Address and Name
When an author shares a book with you through BookArc, or when you create a BookArc account, we collect your email address and, where provided, your name. This lets us send you your download link, identify your deliveries, and communicate with you about your books and account.

Account and Profile Data
If you create a BookArc reader account, we store your email address, a securely hashed password, and any display name and reading preferences you set.

Your Library, Reading Activity, and Notes
We store the books in your library along with your reading progress, bookmarks, highlights, and annotations, so that we can sync them across the devices where you are signed in and let you pick up where you left off. Highlights and notes are stored to provide this feature to you — not to analyse what you read.

Download and Delivery Data
We record which books have been delivered to you, when downloads occurred, and which formats or delivery methods were used. This helps us ensure your download works and lets the author understand how their delivery campaign is performing.

Device and Technical Information
We automatically detect the type of device and operating system you are using so we can suggest the most compatible reading format. We also collect standard technical data such as your IP address, browser type, and approximate location (country or region level) for security, fraud prevention, and service operation.

Usage Data
We record how you interact with BookArc — for example, whether a delivery page was viewed and whether a download was initiated — to help authors measure campaign performance and to improve the service.

Author Account Data
If you also use BookArc as an author or publisher to deliver books, we collect your name, email address, billing information, and content configuration data to provide and manage your account.

Support Correspondence
Any messages you send to our support team are retained to help us resolve your query and improve the service.

We use the information we collect to:

• Deliver books and download links on behalf of the author or publisher who shared them with you
• Provide your reading experience, including syncing your library, reading progress, highlights, and notes across your devices
• Detect your device type and suggest the best reading format
• Send you emails that an author or publisher has authorised us to send on their behalf, and service messages about your account
• Allow authors to view aggregated delivery and engagement statistics for their campaigns
• Operate, maintain, and improve the BookArc platform
• Prevent fraud and abuse
• Comply with our legal obligations

We process your data on the basis of: legitimate interests (delivering the service and preventing abuse); contract performance (providing services to you and to authors); legal obligations (billing and tax compliance); and, where required by law, your consent.

No. BookArc facilitates the delivery of books from authors to readers and lets you read them. We do not read, analyse, or retain the content of the books you receive, or the highlights and notes you make, beyond what is technically necessary to deliver those books to you and to sync your library and notes back to your own devices.

We will only send you emails that the author or publisher who shared a book with you has authorised, together with service messages about your own account. Author emails include delivery confirmations, download link emails, and follow-up messages the author has configured.

We will never send you unsolicited marketing emails, or emails from third parties unrelated to the author who shared a book with you. You can unsubscribe from any author’s list at any time using the unsubscribe link in their emails.

For users in the EU and UK, we comply with the GDPR and the UK GDPR. Marketing communications are only sent with an appropriate lawful basis.

We do not sell your personal data.

We may share your data with:

• Authors and publishers who delivered books to you — they can see that a delivery was made to your email address and whether it was downloaded.
• Trusted service providers who help us operate the platform (hosting, payment processing, email delivery), under appropriate contractual protections.
• Law enforcement or regulatory authorities where required by law.

We do not share your data with advertisers or data brokers.

Yes. We use cookies, local storage, and similar technologies to:

• Keep you signed in and maintain your session
• Store your library, reading position, and settings on your device so the reading apps work offline and stay in sync
• Detect your device type for format recommendations
• Collect aggregate analytics to understand how BookArc and delivery pages perform

We do not use cookies to track you across third-party websites for advertising purposes. You can control cookies through your browser settings.

BookArc is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us.

Your data is stored and processed in the United Kingdom and by service providers in the European Economic Area and the United States. Where data is transferred outside the UK or EEA, we rely on appropriate legal safeguards such as Standard Contractual Clauses, supplemented by technical measures including encryption and restricted access.

We protect your data using industry-standard security measures, including:

• Encryption in transit (TLS/HTTPS) for all data transmitted to and from our services
• Encryption at rest for sensitive stored data
• Access controls and role-based permissions
• Regular security reviews and vulnerability management

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

You can request deletion of your personal data at any time by contacting us at hello@bookarc.app. You can also close your account from your account settings; your account and associated reader and delivery data are deleted within 60 days.

We retain your data for as long as necessary to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. Where data is no longer needed, we delete it securely.

If you are in the UK or EU, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal obligations.
• Objection: Object to processing based on legitimate interests, including marketing.
• Portability: Request your data in a structured, machine-readable format.
• Complaints: Lodge a complaint with the Information Commissioner’s Office (UK) or your national supervisory authority (EU).

To exercise any of these rights, please contact us at hello@bookarc.app.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Where changes are material, we will notify you by email or by a notice on our website.

For any questions about this Privacy Policy or to exercise your data rights, please contact:

Orpheus Technology Ltd
International House
36–38 Cornhill
London EC3V 3NG
United Kingdom
hello@bookarc.app

Chris Banks serves as BookArc’s representative in the EEA for data protection matters under Article 27 of the General Data Protection Regulation. You can reach him via hello@bookarc.app.