Privacy

We use your EPUB only to validate its structure and produce a supported repair. We do not sell manuscripts, train models on them, or use third-party AI services to process them.

Files are processed on our hosting server. The original is removed after processing. Access to repaired files and reports expires within 24 hours of upload. Expired files, reports, and their job and payment links are deleted automatically while the service is running. An outage or storage error may delay deletion; cleanup retries when service resumes. The Delete files control requests earlier deletion and ends download access. A failed deletion is reported and retried. During an active check, temporary in-memory processing may finish after deletion. Keep your own original and download your repair promptly.

A necessary HttpOnly browser cookie connects you to your reports for 24 hours. We do not use advertising trackers or third-party analytics. Rate limits use a salted hash of the connection IP; request bodies and manuscript text are not intentionally written to application logs. Infrastructure providers may retain connection logs under their policies.

When service measurement is enabled, we keep counts by UTC day to understand page views, checks and their outcomes, checkout links issued, confirmed payments, download requests, and refund notifications applied to active jobs. These are counts, not unique visitor records. You may optionally choose one reason for not buying; we count that reason without free text.

Daily counts are retained for 90 days and contain no filenames, manuscript content, email addresses, IP addresses, or job or order identifiers. Temporary links prevent the same job event from being counted twice; these expire within the job’s 24-hour lifetime and are deleted with the job, subject to the outage and deletion process above. Operational rate-limit counters are separate. Measurement adds no browser cookie or persistent tracking identifier.

We skip page measurement and exclude new uploads from measurement when your browser sends Do Not Track or Global Privacy Control, or when you use EpubMend with measurement off. The optional feedback form is also hidden in this mode. The link keeps this choice in the page address; opening a separate link without it does not preserve that choice unless your browser privacy signal is still enabled.

When enabled, Lemon Squeezy hosts checkout and processes billing details under its own privacy policy. We receive signed order notifications and retain only the job linkage, order ID and entitlement for the lifetime of the job, subject to the deletion process described above. Payment records retained by the merchant of record are separate from uploaded files.

Deleting browser cookies removes your ability to access existing reports; a receipt link still requires the original browser session. Contact us for privacy requests.

Operator: Bin
Contact: epubmend.support@gmail.com

Effective September 8, 2026.