Privacy Policy

Last updated: August 2026

This notice explains how Flipbook Studio Pro handles personal data for account, publishing, analytics, support, and security purposes, with Malaysia PDPA principles in mind.

1. Information we collect

• Account information — your name, email address, and password (stored only as a secure hash).
• Content you upload — the PDFs and media you convert into flipbooks, plus any titles, descriptions, and settings.
• Usage data — flipbook views, anonymized IP ranges, approximate device type, referrer host, and timestamps used for analytics.
• Technical and security data — login attempts, session records, audit logs, browser security reports, and upload scan results needed to operate and protect the service.
• Connected services — if you connect Google Drive, we store the connected account email and encrypted OAuth tokens so the service can import or export files you request.

2. How we use information

We use personal data only for clear service purposes: creating and hosting flipbooks, controlling access, showing owner analytics, processing support requests, preventing abuse, scanning uploads, sending account or newsletter email, and maintaining audit records. We do not sell personal data and we do not display third-party advertising in the product.

3. Disclosure to service providers

We share data only where needed to run the platform: hosting and storage providers, email providers, Google Drive when you connect it, and malware-scanning providers if configured. Geolocation lookup is disabled by default; if an administrator enables it, anonymized IP ranges may be sent to an HTTPS geolocation provider for approximate location analytics. We may also disclose information when required by law.

4. Public and shared content

Flipbooks marked public or unlisted are accessible by link. Private flipbooks require the owner account, and password-protected flipbooks require the password before viewing. If you embed a flipbook on another website or add external links/media, visitors may interact with that third-party site directly.

5. Data retention

We keep personal data only as long as needed for the service, legal, security, or abuse-prevention purpose. Current default retention is:

• Account and flipbook content: while your account or flipbook remains active, subject to your plan's auto-delete rules.
• Flipbook analytics and geolocation cache: 180 days by default.
• Audit logs: 365 days by default.
• Login attempts and rate-limit records: 90 days by default.
• Expired password reset and email verification tokens: 7 days by default.
• Expired remember-me sessions: 30 days by default.

You can delete flipbooks at any time. Deleting a flipbook removes its files and associated view rows through database cascading, subject to backups and limited legal/security records.

6. Your rights

You may request access to your personal data, ask us to correct inaccurate data, withdraw consent where processing is based on consent, unsubscribe from marketing email, or ask for deletion where applicable. To exercise these rights, contact us.

7. Cookies

We use essential cookies to keep you signed in, support optional remember-me login, and protect forms against cross-site request forgery. We do not use advertising cookies.

8. Security

We use access controls, CSRF protection, secure password hashing, encrypted OAuth token storage, upload validation, audit logging, and browser security headers to protect personal data. No online service can guarantee absolute security, but we aim to apply practical safeguards for the sensitivity of the data we process.

9. Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

10. Contact

Questions about this policy? Reach us through our contact page.