Privacy

Privacy Policy

Last updated: May 29, 2026

We don't sell your data

Your personal information is never sold to third parties, advertisers, or data brokers.

Encrypted in transit & at rest

All data is encrypted using TLS 1.3 in transit and AES-256 at rest.

Minimal data collection

We only collect what we need to operate the Service. Nothing more.

You control your data

Export or delete your account and all associated data at any time.

1. Overview

Librava.ai ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

This policy applies to all users of Librava.ai, including visitors, registered users, and paying subscribers. By using the Service, you consent to the practices described here.

2. Data We Collect

Account data

  • Name and email address (provided at sign-up or via Google OAuth)
  • Profile information you choose to add
  • Billing name and address (for paid plans)

Usage data

  • Pages visited, features used, and interactions within the Service
  • Device type, browser version, operating system, and IP address
  • Session duration and frequency of use

Content data

  • Prompts, topics, and settings you enter into generation tools
  • Generated content stored for export history and re-download
  • Uploaded assets (logos, images) if you use cover or interior tools

Payment data

  • Payment method details are handled by Stripe and never stored on our servers
  • We retain transaction records (amount, date, plan) for accounting purposes

3. How We Use Your Data

We use your data to provide and improve the Service, process payments, send transactional emails (receipts, magic links, export confirmations), and respond to support requests.

We may use aggregated, anonymised usage data to improve our AI models and product features. This data cannot identify you individually.

We do not use your data to train third-party AI models. Your content inputs are processed in-session for generation purposes and are not shared with external AI providers beyond what is required to operate our tools.

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information. We share data only with trusted service providers who help us operate the Service, under strict data-processing agreements.

ProviderPurposeData shared
StripePayment processingBilling name, email, card details
Google (OAuth)Sign-in authenticationEmail, name, profile picture
AWS / CloudflareHosting & CDNEncrypted content data
ResendTransactional emailEmail address, message content
PostHogProduct analyticsAnonymised usage events

5. Cookies & Tracking

We use strictly necessary cookies to maintain your login session and preferences. We use analytics cookies (PostHog) to understand how users navigate the Service — these are anonymised and do not contain personal information.

We do not use advertising cookies or tracking pixels from third-party ad networks. You can disable non-essential cookies in your browser settings at any time without affecting core Service functionality.

6. Data Retention

We retain your account and content data for as long as your account is active. If you delete your account, all associated personal data and generated content is permanently deleted within 30 days.

Anonymised usage data and aggregated analytics may be retained indefinitely as they cannot be traced back to an individual.

Billing records are retained for 7 years as required by financial regulations.

7. Your Rights

Depending on your location, you may have the following rights under applicable data protection laws (including GDPR, CCPA, and UK GDPR):

  • Right to access — request a copy of the personal data we hold about you
  • Right to rectification — correct inaccurate or incomplete data
  • Right to erasure — request deletion of your personal data
  • Right to portability — receive your data in a machine-readable format
  • Right to restrict processing — limit how we use your data
  • Right to object — object to processing based on legitimate interests
  • Right to withdraw consent — withdraw consent for any processing based on consent

To exercise any of these rights, email privacy@librava.ai. We will respond within 30 days.

8. Security

We implement industry-standard technical and organisational measures to protect your data, including TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits.

Despite our efforts, no method of transmission over the internet is 100% secure. We encourage you to use strong, unique passwords and enable two-factor authentication.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected such data, we will delete it promptly.

Librava.ai may be used by teachers and parents to create educational materials for children, but children themselves should not create accounts or submit data directly.

10. International Transfers

Your data may be processed and stored in the United States and other countries. For users in the European Economic Area or United Kingdom, we ensure appropriate safeguards (Standard Contractual Clauses) are in place for any international data transfers.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified by email or prominent notice within the Service at least 14 days before they take effect. Your continued use of the Service after changes constitutes acceptance.

12. Contact

For privacy-related enquiries, data subject requests, or to report a concern, contact our Data Protection contact at privacy@librava.ai.

Privacy questions?

Email privacy@librava.ai or visit our Contact page.