Privacy Policy

1. Overview & Data Protection Roles

This Privacy Policy applies to personal information processed by Editorial3D Inc. ("Editorial3D", "we", "us") in connection with our website, dashboard, and 3D flipbook viewer services.

2. Information We Collect

A. Account & Identity Data

When you create an Editorial3D publisher account or purchase a lifetime tier, we collect your name, email address, password hash (managed securely via Clerk authentication), company name, and billing address. We do not store raw credit card numbers or security codes; all payment transactions are processed directly by Stripe.

B. Publication & Content Data

We process the PDF files you upload, including embedded images, text layers, publication titles, metadata, custom branding assets (logos, favicons), and configuration settings.

C. Reader & Interaction Telemetry

When visitors open an Editorial3D flipbook, we collect minimal technical telemetry to calculate view allowances, reader engagement depth, and performance metrics. This includes anonymous IP hash, user agent, viewport size, referring URL, timestamp, and page-turn events. We do not sell reader data or build cross-site advertising profiles.

3. Reader Data Captured via Lead Gates

Publishers may configure Lead Capture Gates on any flipbook (e.g., requiring an email address or name to read past page 3). When a reader submits information through a lead gate:

• The submitted data is stored in the publisher's encrypted account database and made available for export via CSV or webhook dispatch.
• Editorial3D processes this data solely on the instructions of the publisher customer and does not use lead gate submissions for our own marketing purposes.
• Readers seeking to access, correct, or delete information submitted through a publisher's flipbook lead gate should contact the respective publisher directly.

4. Authorized Subprocessors

We work with trusted third-party service providers who assist in operating our infrastructure. All subprocessors are bound by data processing agreements (DPAs) with strict security and confidentiality obligations:

• Cloudflare R2 & CDN: Distributed object storage for publication page textures and global content delivery network edge caching.
• Stripe Inc.: PCI-DSS Level 1 compliant payment processing and checkout session management.
• Clerk Inc.: User authentication, session token management, and multi-factor security.
• Railway Corporation: Application container hosting and managed PostgreSQL database hosting.
• Resend / Customer SMTP: Transactional email delivery for password resets and publisher-configured lead notifications.

5. How We Use Collected Data

We use personal data strictly for lawful business purposes, including to:

• Provide, operate, and maintain the 3D flipbook viewer and publishing platform;
• Process payments, issue receipts, and manage account licensing tiers;
• Enforce view quotas, overage notifications, and storage limits;
• Detect, prevent, and mitigate security threats, abuse, copyright infringement, and fraudulent activity;
• Respond to customer support inquiries and provide technical assistance.

6. Data Retention & Deletion

We retain your account information for as long as your account remains active or as needed to comply with our legal and tax accounting obligations. When you delete a publication, all associated PDF files, generated page-texture tiles, and reader view logs are purged from primary storage within 30 days.

If you request complete account deletion, all personal data is permanently deleted from our active databases within 30 days, except where retention is legally mandated.

7. International Data Transfers

Editorial3D stores and processes data primarily in the United States. If you access the Service from the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure adequate data protection safeguards through standard contractual clauses (SCCs) approved by the European Commission.

8. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your geographic location, you may have the following rights under applicable data protection laws:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal information.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to Opt-Out: We do not sell your personal data or share it for cross-context behavioral advertising.
• Non-Discrimination: We will not discriminate against you in pricing or service quality for exercising your privacy rights.

To exercise any of these rights, submit a request to privacy@editorial3d.com.

9. Data Security Measures

We implement industry-standard technical and organizational security controls to protect your data, including:

• End-to-end encryption in transit via TLS 1.3 / HTTPS for all web traffic;
• Encryption at rest (AES-256) for all uploaded publications and database records;
• Role-based access controls and principle of least privilege for engineering staff;
• Continuous vulnerability scanning and automated security patch management.

10. Children's Privacy

The Service is designed for business professionals and adults. We do not knowingly collect personal information from children under 16 years of age. If we learn that we have inadvertently collected data from a minor, we will promptly delete it.

11. Contact Us & Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at:

Editorial3D Inc. — Privacy & Legal Operations
Email: privacy@editorial3d.com
General Support: support@editorial3d.com