Privacy Policy

• Account data — your name, email address, password (stored only as a secure hash), and profile details you provide.
• Content data — the ideas, prompts, voice notes, brand details, and text you submit, and the ebooks, covers, and marketing copy generated for you.
• Billing data — your plan, credit balance, and payment history. Card details are collected and stored directly by Stripe; we never see or store your full card number.
• Usage and technical data — server logs, device and browser information, and error reports needed to operate and secure the service, plus product usage events (for example that a project was created or a book was exported) so we can understand which parts of the service are used and improve them.

We do not buy personal data from third parties, and we do not build advertising profiles.

• to provide, personalize, and improve Erudizio;
• to generate your ebooks, including sending your inputs to AI model providers for processing;
• to process payments, manage subscriptions, and prevent fraud;
• to communicate with you about your account, transactions, and support requests;
• to send product updates or marketing where you have opted in, with an unsubscribe link in every such message;
• to send you a short series of onboarding reminders about the book you started, which you can opt out of at any time via the link in each email or in your account settings;
• to comply with legal obligations and enforce our Terms.

We do not use your content to train our own models, and we do not make decisions about you by purely automated means that produce legal or similarly significant effects.

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the service you signed up for (account, generation, billing).
• Legitimate interests — to secure, maintain, and improve the service and prevent abuse, balanced against your rights.
• Consent — for optional marketing communications; you can withdraw it at any time.
• Legal obligation — to meet accounting, tax, and other legal requirements.

To generate your ebooks, the content you submit — including any voice note you record, which is transcribed to text — is sent to OpenAI, which processes it on our behalf and returns text and images. We send only what the generation you requested needs.

We use OpenAI’s business API terms, under which submitted content is not used to train their models. We do not send your data to any other AI provider.

We do not sell your personal data and we do not share it for cross-context behavioural advertising. We share it only with the providers that make Erudizio work, each bound by an agreement requiring them to protect it:

• OpenAI, L.L.C. — AI text, image, and voice-transcription generation (United States).
• Stripe, Inc. — Payment processing and billing (United States).
• Hetzner Online GmbH — Application and database hosting (Germany (EU)).
• Amazon Web Services, Inc. — Storage of your generated files (S3) (France (EU)).
• Resend, Inc. — Transactional email delivery (United States).
• PostHog, Inc. — Product analytics (cookieless, nothing stored on your device) (Germany (EU Cloud, Frankfurt)).
• Cloudflare, Inc. — DNS, CDN, and network security (United States / global edge).

We may also disclose data where required by law, to protect our rights, or in connection with a merger or acquisition. If we change sub-processors, we update this list.

Your data stays in the European Union. The application and its database are hosted in Germany, your generated files are stored in France (AWS Paris region), and product analytics are processed in Germany (Frankfurt). None of it is replicated outside the EU.

Some of the providers we rely on to run the service are established in the United States — the AI models that generate your content, payment processing, email delivery and our CDN — so data reaches them when those functions run.

Where we transfer personal data outside the EEA or UK, we rely on appropriate safeguards: the EU-US Data Privacy Framework where the provider is certified under it, and otherwise the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum. You can ask us for details of the safeguard applying to a specific transfer.

We keep your data only as long as we need it:

• Account and content data — for as long as your account is open, and deleted or anonymized within 30 days of account deletion.
• Invoices and payment records — up to 7 years, because tax and accounting law requires it.
• Server and security logs — up to 12 months.
• Marketing preferences — until you withdraw consent, plus a suppression record so we do not contact you again by mistake.

Depending on where you live, you have the right to access, correct, delete, or export your personal data; to restrict or object to certain processing; and to withdraw consent. To exercise any of these, email privacy@erudizio.com from the address on your account. We respond within one month and never charge for it.

Deleting your account: you can do it yourself, at any time, from Settings → Danger Zone. Your ebooks, drafts, covers, exports, brand settings and sign-in details are erased immediately, and any active subscription is cancelled at the same moment. We keep only your invoices, as described above, and they are no longer linked to your name. You can also email us and we will do it for you. If you are in the EEA or UK, you may also lodge a complaint with your local data-protection supervisory authority.

If you are a California resident: you have the right to know, delete, correct, and opt out of sale or sharing of personal information, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by California law. Use the same address above.

We use only cookies that are strictly necessary to run the service — keeping you signed in, securing the session, and remembering your basic preferences. We do not use advertising cookies. We use a privacy-focused product analytics tool (hosted in the EU) to understand which parts of the service are used; it sets no cookies and stores nothing on your device. Because of that, we do not need to ask you for cookie consent. If that ever changes, we will ask before setting any non-essential cookie.

We use technical and organizational measures — such as encryption in transit, hashed passwords, access controls, and regular backups — to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant authority as the law requires.

Erudizio is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, notify account holders by email before the changes take effect.

For any privacy question or request, contact privacy@erudizio.com. Data controller: Smartmind Innovations, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States.