1. Who we are

Mbookx (https://mbookx.top) operates an AI interactive story platform. For payment processing, Paddle acts as merchant of record and may collect billing data directly.

2. Data we collect

Account data: email address, display name, and authentication identifiers from Supabase.

Creative data: story prompts, outlines, settings, generated books, and shelf metadata stored in your account.

Usage data: pages visited, generation jobs, and error logs to operate and improve the service.

Payment-related data on our servers: Paddle customer ID, subscription status, plan tier, and credit balances — not full card numbers.

3. How we use data

Authenticate you and sync your library across devices.

Generate stories by sending prompts to DeepSeek API (a third-party AI provider).

Fulfill purchases by linking Paddle transaction events to your account and granting credits.

Prevent abuse, enforce Terms, and maintain security.

4. Payment data & Paddle

Checkout is hosted by Paddle. Paddle collects payment method details, billing address where required, and transaction records as the merchant of record.

We receive limited payment metadata from Paddle (e.g. customer ID, transaction ID, subscription status) to activate your plan.

Paddle privacy policy: https://www.paddle.com/legal/privacy

5. Third-party processors

Supabase — authentication and database hosting

DeepSeek — AI text generation (prompts transmitted for processing)

Paddle — payments, tax, invoicing

Vercel — application hosting

Resend — transactional email (magic links), when configured

6. Cookies & local storage

Essential cookies/session tokens for login.

localStorage for theme, language, and post-login redirect preferences.

7. Your rights

Request export or deletion of your account data: support@mbookx.top

Public books remain visible until you unpublish or delete them.

Depending on your region, you may have additional privacy rights (access, correction, objection). We will respond within a reasonable time.

8. Retention

Account data is retained while your account is active.

After deletion, backups may persist up to 30 days.

Billing records handled by Paddle are retained according to Paddle policy and legal obligations.

9. Security

We use HTTPS, database row-level security, server-side validation, and rate limiting.

No method of transmission or storage is 100% secure.

10. Contact

Privacy inquiries: support@mbookx.top