Privacy Policy

Last updated: April 12, 2026

BookUnfold is a trade name of Chi Lung Yung, a sole proprietorship based in the Netherlands. This privacy policy explains how we collect, use, and protect your personal data when you use our website and services. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and Dutch data protection law (Uitvoeringswet AVG).

1. Data Controller

The data controller responsible for your personal data is:

Chi Lung Yung, trading as BookUnfold
The Netherlands
Email: hello@bookunfold.com

2. What Data We Collect

We collect the following personal data:

• Contact information: your name and email address, provided when you place an order or contact us.
• Payment information: processed securely by our payment provider (Stripe). We do not store credit card numbers, bank account details, or other financial data on our systems.
• Uploaded content: the ebook PDF you submit for processing. This is your intellectual property and is handled as described in section 5.
• Communication data: emails you send to us and our responses.
• Technical data: if we use analytics on our website, this may include anonymized data such as browser type, device type, and pages visited. No cookies are used for tracking or advertising purposes.

3. Legal Basis for Processing

We process your personal data on the following legal grounds under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): processing your order, generating marketing assets from your ebook, delivering the finished product, and communicating about your order.
• Legitimate interest (Art. 6(1)(f)): improving our service, responding to inquiries, and preventing fraud.
• Legal obligation (Art. 6(1)(c)): retaining financial records as required by Dutch tax law (fiscale bewaarplicht).

4. How We Use Your Data

We use your personal data to:

• Process your order and deliver the marketing asset package.
• Process payment through Stripe.
• Communicate with you about your order, including delivery and any follow-up.
• Comply with legal and tax obligations.

We do not use your data for marketing purposes unless you explicitly opt in. We do not sell, rent, or share your personal data with third parties for their marketing purposes.

5. Your Uploaded Ebook

Your ebook is uploaded solely for the purpose of generating marketing assets. We handle your manuscript as follows:

• Your ebook is processed through our AI system to generate the deliverables.
• After delivery of your marketing assets, your ebook file is deleted from our systems within 14 days.
• We do not retain, republish, redistribute, or use your ebook content for any purpose other than fulfilling your order.
• Your intellectual property remains entirely yours. The generated marketing assets are also yours to use without restriction.

6. Third-Party Processors

We use the following third-party services to operate BookUnfold:

• Stripe (Stripe, Inc.): payment processing. Stripe's privacy policy: stripe.com/privacy. Stripe is certified under the EU-US Data Privacy Framework.
• Google Workspace (Google LLC): email communication. Google's privacy policy: policies.google.com/privacy. Google is certified under the EU-US Data Privacy Framework.
• Anthropic (Anthropic, PBC): AI processing for generating marketing assets. Your ebook content is processed through Anthropic's API. Anthropic's privacy policy: anthropic.com/privacy.

Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place, including EU-US Data Privacy Framework certification or Standard Contractual Clauses (SCCs).

7. Data Retention

• Ebook files: deleted within 14 days of delivery.
• Order and payment records: retained for 7 years as required by Dutch tax law.
• Email correspondence: retained for the duration of our business relationship plus 2 years.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data, subject to legal retention requirements.
• Restriction: request that we limit the processing of your data.
• Portability: request your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.

To exercise any of these rights, contact us at hello@bookunfold.com. We will respond within 30 days.

9. Cookies

Our website does not use cookies for tracking, advertising, or analytics purposes. If this changes in the future, this policy will be updated and consent will be obtained as required by the ePrivacy Directive and Dutch Telecommunicatiewet.

10. Security

We take appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), secure file handling, and limited access to personal data on a need-to-know basis.

11. Complaints

If you believe we are not handling your personal data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "last updated" date. Significant changes will be communicated via email to existing customers.

13. Contact

For questions about this privacy policy or your personal data, contact us at:
hello@bookunfold.com