Privacy Policy
Updated: 24 October 2026. This document covers Booknaria's current service scope. Operational retention and backup procedures must be independently checked against production configuration.
Data controller
WEBMAY SASU, Bureau 3, 6 bis boulevard Berthelot, 34000 Montpellier, France (SIREN 950 827 097). Privacy and rights requests: support@webmay.fr.
Categories of personal data
As applicable: author pen name, email address, optional first/last name and telephone, hashed password, language preference, login and security records, manuscripts and chapters, covers, audio files, book metadata, encrypted Gemini credentials needed for background jobs, technical job records and support requests. Some verification or synchronisation tokens are stored as hashes.
Purposes and lawful bases
- Account, Studio and Library operations: performance of the Terms of Use and requested services.
- Security and abuse prevention: legitimate interests in securing the platform, or legal obligations where applicable.
- Privacy requests and complaints: compliance with legal obligations and management of requests.
- Gemini narration: provision of the requested functionality with prior notice about submitting text to Google and separate consent where required for particular data.
- Optional marketing messages: consent where required; essential account messages remain separate.
Service providers and recipients
Booknaria is hosted by o2switch. Text excerpts and required instructions are transmitted to Google Gemini when the author requests narration. Google's handling and retention depend on the applicable service terms and configuration. Account emails use WEBMAY's configured SMTP service. Opening an external Amazon, Spotify or other service redirects to the provider's own privacy practices.
Manuscript privacy
Complete private manuscripts and chapters are not publicly listed. Only voluntarily submitted and approved metadata or excerpts are shown publicly. Users must have the appropriate rights to process any third-party personal information contained in their work.
Retention
Account and project data are generally kept while the account is active, until the user deletes the relevant material or a valid closure request is handled. Some records may be retained in restricted form when justified by law. Exact operational retention for security logs, backups and rotations still needs to be confirmed before broad public release rather than publishing deadlines that the system does not currently enforce.
Your rights
Subject to the GDPR you may request access, correction, erasure, restriction, objection or portability, as applicable. Email support@webmay.fr from your account email address and describe the request. Proportionate verification may be necessary. Requests are normally answered within one month, with extension where allowed. You may also lodge a complaint with the French CNIL.
Security and international transfers
The service uses HTTPS, hashed passwords, private access controls and encryption of API keys stored for background processing. Sending text to Google may entail processing or transfers outside the EEA depending on the Google account and applicable contractual safeguards; the specific arrangements must be reviewed for the production setup.
Cookies
A session cookie keeps the account session active. See our Cookie Policy. Any future non-essential trackers must be subject to any legally required prior consent.