Legal
Privacy & Data Protection
Last updated: 11 June 2026
1. Data Controller
Bookensoul (the “Platform”) acts as the data controller for the personal data it processes under applicable data protection law. This notice is intended to inform you about the personal data processed when you create an account and use the service.
2. Personal Data We Process
If you create an account, we process your full name, email address, mobile phone number, your organisation/publisher name if provided, an irreversible hash of your password for account security, and your IP address and transaction timestamps for operational security.
The content of the files you upload is processed only temporarily in order to provide the service; the original file is deleted from the server as soon as it has been converted to text.
3. Purposes and Legal Bases of Processing
- Establishing the membership agreement and delivering the service (performance of a contract),
- Mobile phone verification and account security (legitimate interest),
- Fulfilling legal obligations and billing (compliance with a legal obligation),
- Where you consent, sending commercial electronic messages for campaigns, announcements and information (based on your explicit consent).
4. Email Messages
The verification codes sent to your email address are mandatory notifications relating to the operation of the service; they are not commercial electronic messages and do not require separate consent.
Commercial electronic messages containing campaigns, discounts and promotions are sent only if you give explicit consent during registration. You may withdraw this consent at any time, use the opt-out (unsubscribe) instruction in the messages, or contact us.
5. Transfer of Data
Your data may be transferred, solely to the extent necessary for the relevant purpose, to the email delivery service provider used to send verification messages, to the AI infrastructure service used to provide the chat function, and to legally authorised public authorities. Your data is never sold to third parties for marketing purposes.
6. Retention Period
Your account data is retained for as long as your membership continues; data required by law is retained for the applicable statutory periods. Verification codes are kept briefly and chat records for a limited time, and are deleted regularly.
7. Your Rights
You have the right to learn whether your personal data is being processed, to request its correction or erasure, to object to processing, and to learn the parties to whom it has been transferred. You can send your requests to [email protected].