Privacy Policy

Kindlefish is a KDP research and report-generation tool for self-publishing authors. This policy explains what we collect, why we collect it, how long we keep it, who helps us process it, and the choices you have.

Who we are

Kindlefish is the trading and service name used for this website and tool. The service is operated by HMD Publishing in the United Kingdom. For privacy questions, data requests, or complaints, contact hello@kindlefish.io.

Information we collect

• Account and sign-in data: email address, account ID, display name, avatar if you add one, plan status, subscription status, saved keywords, saved reports, and basic Google profile details if you choose Google sign-in. We do not receive your Google password.
• Research and report inputs: keywords, categories, ASINs, titles, subtitles, marketplace selections, genre, synopsis, manuscript files, and other book details you provide.
• Generated content: Fee reports, PDF/download metadata, report status, report ownership, and the input/output data needed to deliver, recover, and audit a paid report.
• Usage and security data: searches you run, modules used, timestamps, request metadata, device/browser data, IP address or IP-derived identifiers, rate-limit events, fraud-prevention logs, and error logs.
• Payment and billing data: Stripe customer, subscription, checkout, invoice, and payment status identifiers. Stripe handles card details; Kindlefish does not store full card numbers.
• Communications: support messages, refund requests, account requests, transactional emails, unsubscribe preferences, and product email preferences.

Manuscripts and sensitive content

Manuscripts are treated as private author material. Uploads are stored in a private bucket, used to extract a book brief and generate your report, and are not sold or used to train a public model by Kindlefish. Please do not upload manuscripts or notes containing unnecessary special category data, private third-party information, financial information, medical information, or secrets unless you have the right to provide that information and it is genuinely needed for the report.

How we use it

• To provide the service: create and manage accounts, run searches, generate reports, deliver PDFs and emails, show account history, apply fair-use limits, and process subscriptions or one-off purchases.
• To protect the service: detect abuse, prevent fraud, enforce rate limits, secure downloads, investigate errors, and keep audit records for paid orders.
• To communicate with you: send login, account, payment, report-delivery, support, legal, and service emails.
• To improve Kindlefish: review aggregate usage, diagnose bugs, improve reliability, and refine product workflows.
• For marketing: send product updates only where we have a lawful basis and you have not opted out.

Lawful bases

Where UK GDPR or similar privacy law applies, we rely on the following lawful bases: contract, to provide the tool and fulfil purchases; legitimate interests, to secure the service, prevent abuse, improve the product, and support customers; consent, for optional marketing or non-essential cookies where required; and legal obligation, for tax, accounting, compliance, and dispute records.

Who we share it with

We share data only with providers needed to operate Kindlefish: authentication and database providers, hosting and security providers, payment processors, email providers, support and monitoring tools, Amazon-related market-data providers, and AI model providers used to generate reports. Each provider receives only what it needs for its role. We may also share information if required by law, to enforce our terms, to protect rights and safety, or as part of a business transfer involving Kindlefish.

Kindlefish does not sell your personal information. We do not ask for or access your private Amazon, KDP, or seller account credentials. Kindle, KDP, and Amazon are third-party trademarks, and Kindlefish is not affiliated with or endorsed by Amazon.

International processing

Some providers may process data outside the United Kingdom or your home country. Where required, we use appropriate safeguards such as contractual protections, provider security commitments, and lawful transfer mechanisms.

Retention

• Search history is kept for up to 90 days.
• Lead tokens used for report generation expire after about 1 hour.
• Manuscript uploads and parsed manuscript rows are retained for up to 30 days. Abandoned upload records may be deleted sooner, including after about 24 hours if parsing was never completed.
• Generated Fee reports, report inputs, and report-download data are retained for up to 30 days unless a longer period is needed for account records, support, chargeback, fraud, tax, legal, or dispute purposes.
• Payment, invoice, subscription, tax, security, and dispute records may be kept longer where needed for legal, accounting, fraud-prevention, or enforcement reasons.
• Saved keywords, profile details, and account settings remain until you delete them, close your account, or ask us to delete them, subject to legal retention requirements.

Cookies and similar technologies

We use essential cookies and local storage for sign-in, security, checkout, account sessions, preferences, and basic service operation. If we use optional analytics or marketing cookies, we will handle them according to applicable consent requirements.

Security

We use technical and organisational measures designed to protect data, including private storage for manuscripts, access controls, rate limiting, secure payment processing through Stripe, download tokens, and monitoring for abuse. No online service can guarantee absolute security, so you are responsible for using a secure email account, protecting your login method, and avoiding unnecessary sensitive uploads.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export your personal data. You can also unsubscribe from marketing emails using the link in those emails. To make a request, email hello@kindlefish.io. We may need to verify your identity before acting on a request.

Children

Kindlefish is not directed to children, and you must not use the service if you are not old enough to enter a binding contract or use the service with appropriate permission.

Changes to this policy

We may update this policy as Kindlefish changes. The date above shows when this version took effect. Material changes will be reflected on this page or communicated where required.