Privacy Policy

This policy explains how VirtualBooks ("we", "us") collects, uses and protects information when you (a) create a VirtualBooks account to build and publish flipbooks, or (b) view a flipbook that a VirtualBooks customer has shared or embedded on their own site.

• Account details: name, email address, and a securely hashed password (or, if you sign in with Google, the name/email/profile image Google shares with us).
• Billing information: your subscription plan and status. Payment is processed entirely by PayPal — we never see or store your card or bank details, only the subscription ID and plan PayPal reports back to us.
• Content you upload: PDFs, thumbnails, and any images, video or audio you add as rich-media overlays to your flipbooks.
• Configuration you set: flipbook titles, descriptions, branding, lead-form field definitions, and the notification email address for leads.

When someone views a flipbook (via a share link or an embed on a third-party site), we collect limited, non-persistent usage data to power the analytics we show the flipbook's owner:

• A randomly generated session identifier, created fresh for that browser tab and stored only in that tab's session storage — it is not a cookie, and it disappears when the tab is closed.
• Which pages were viewed, how long was spent on each, the referring page, and (when our hosting provider supplies it) a coarse country signal. We do not log IP addresses ourselves.
• If the flipbook has a lead capture form and you choose to submit it, whatever fields the flipbook's owner configured (typically name, email, and similar contact details). That submission is stored and forwarded by email to the flipbook's owner — it is their data to manage, not ours to use for any other purpose.

• To provide, maintain and secure the service (hosting your flipbooks, authenticating you, processing billing).
• To show flipbook owners aggregate analytics about how their flipbooks are being viewed.
• To deliver lead-form submissions to the flipbook owner who configured that form.
• To communicate with you about your account, such as billing or security notices.
• To detect and prevent abuse, spam, and fraudulent sign-ups (see Google reCAPTCHA below).

• Google — if you choose "Sign in with Google", and for Google reCAPTCHA v3, which we use on registration and lead-capture forms to filter out automated abuse. Google processes a verification token and standard browser/device signals for this purpose.
• PayPal — processes all subscription payments and holds your payment method; we only receive your subscription status and plan back from PayPal.
• Resend — our transactional email provider, used solely to deliver lead-form notification emails to flipbook owners.
• Cloud storage — uploaded PDFs and media are stored either on our own server or with an S3-compatible cloud storage provider, depending on our current infrastructure configuration.
• If a flipbook owner adds their own Google Analytics measurement ID to a flipbook, viewer data for that flipbook is also shared with the owner's Google Analytics property. That is the owner's integration, governed by their own analytics account and policies, not ours.

We do not sell personal information to anyone.

We use a small number of strictly necessary cookies to keep you signed in and to remember that you've unlocked a password-protected flipbook. See our Cookie Policy for full details.

We keep account data and uploaded content for as long as your account is active. Lead submissions are kept so flipbook owners can refer back to them; owners are responsible for deleting leads they no longer need. If you close your account, or ask us to delete it, we remove your account, flipbooks, and associated files.

You can review and update most of your account details from your dashboard. We don't currently offer a self-service "delete my account" button — to request deletion or export of your data, contact us using the details below and we'll action it manually. Depending on where you live, you may have additional rights (such as access, correction, or objection to certain processing) under applicable privacy law; contact us to exercise them.

VirtualBooks is not directed at children, and we do not knowingly collect personal information from children.

Because we rely on service providers such as Google, PayPal and Resend, some information may be processed or stored outside your country. Those providers maintain their own safeguards for cross-border data transfers.

We may update this policy from time to time. We'll change the "Last updated" date above when we do; material changes will be communicated to account holders.

Questions about this policy, or requests about your data, can be sent to office@cecengraving.com.au.