This page explains what information is collected when you visit this site or buy one of our digital products, and why.
Payments are processed entirely by Stripe (stripe.com). Your card details are received and protected by Stripe; this site never sees or stores them. When you complete a purchase, we receive your email and name from Stripe in order to deliver the product and provide support.
We use the Meta (Facebook/Instagram) Pixel to measure how our ads perform. The pixel may set cookies (_fbc, _fbp), and we store the ad-click identifier (fbclid) in your browser for up to 28 days. We also store a random identifier of our own, sent to Meta alongside those events, used solely so that visits and a purchase from the same person aren't counted as different people. It contains no name, email, or anything you typed, and is cleared if you clear this site's browser data. If you buy, we additionally send Meta your email, name and billing details in irreversibly hashed form — never as readable text. Meta processes this data under its own policy: facebook.com/privacy/policy.
Using our own technology, on our own server, we collect statistics on how this page is used: reading time, how far you scroll, which sections you pause on, which buttons you click, and your time zone (so we know what local time our pages are being used in). This first-party data:
The legal basis for this processing is our legitimate interest in improving our pages and offers. Separately from this, we also use a third-party session recording tool — see section 4, which describes data that does leave us.
We use Microsoft Clarity to see how visitors actually use our pages. Clarity records your interaction with the page — mouse movement, clicks, scrolling and the layout of what was on screen — and replays it to us as a session recording and as aggregated heatmaps. We use it to find broken and confusing parts of our pages.
_clck (kept up to 1 year) and _clsk (kept 1 day).You can stop this recording at any time by turning on “Do Not Track” or an equivalent privacy setting in your browser, or by blocking clarity.ms; the rest of the page keeps working normally. If you would like us to delete a recording, contact us using the details in section 8 — note that Microsoft does not allow deletion of an individual visitor's recordings, so in practice this means we stop recording you going forward.
We use your email to deliver access to the product you purchased, send purchase receipts and support messages, and — if you accept priority WhatsApp support or the Shelf Signals trial — to manage that separate purchase or subscription. We do not sell or rent your email to third parties.
Your first book uses the Born to Publish UltraPen AI engine, operated for the included first-book allowance. For later books, you may connect an AI provider with your own API key. That key is held in your browser's local storage on your own device; it is not transmitted to us, stored on our servers, or visible to us. Whatever you send through a provider you connect is governed by the agreement between you and that provider. Clearing this site's browser data removes your saved key.
We use a small number of providers to run the service: Stripe (payments and receipts), Supabase (your account and what you have access to), Resend (delivery and support email), Vercel (site hosting and server logs), OpenAI (the model provider used by UltraPen AI for the included first book), Meta (ad measurement, as described above), and Google (Google Analytics, on our main page only: aggregate traffic statistics — which pages are opened, roughly where visitors come from and on what kind of device. It sets its own cookies, _ga and _ga_*, kept for up to 2 years; advertising features and ad personalisation are switched off, and we do not run it on visits we make ourselves from automated tools. Google's handling is described at policies.google.com/privacy). Each processes data under its own terms and only for the purposes described here.
Microsoft is deliberately not in that list: for the session recording described in section 4, Microsoft acts as an independent controller of the data rather than on our behalf, so it is covered there instead of here.
You can request access to, correction of, or deletion of your data, or object to its processing, by writing to support@novodialtd.com. We respond within 30 days.
If this policy changes, the current version will always be available at this same address.
The controller of the data described on this page is NOVO DIA LTD, trading as Born to Publish, at Kemp House, 180 City Road, London, United Kingdom, EC1V 2TR. If you are in the UK or the EU and believe your data has been mishandled, you may also complain to your national supervisory authority (in the UK, the Information Commissioner's Office, ico.org.uk).