Privacy Policy

Last Updated: May 16, 2026

1. Who We Are

BooksAndGuidesPro ("we," "us," or "our") operates the website at booksandguidespro.com and serves as the authentication and subscription hub for associated applications, including BoingyBooks, Author Pages, FarmsFlo, and ShiftSync. This Privacy Policy describes how we collect, use, and protect your personal information across these services.

2. Information We Collect

2.1 Account Registration

When you create an account, we collect:

• Name — to identify your account
• Email address — for login, notifications, and account communications
• Password — stored as a hashed value; we never store plaintext passwords

2.2 Billing and Subscription Data

If you subscribe to a paid plan, billing is processed by Stripe. We collect:

• Subscription tier and billing history
• Last four digits of the payment card and expiry date (provided by Stripe; we do not store full card numbers)
• Billing address (where required by Stripe for fraud prevention)

Your full payment card details are handled exclusively by Stripe and are never stored on our servers. See Stripe's Privacy Policy.

2.3 Usage and Log Data

We automatically collect standard server logs when you use the service:

• IP address, browser type, and operating system
• Pages visited and timestamps
• Referring URLs

Log data is used for security monitoring, debugging, and improving service performance. Logs are retained for up to 90 days.

2.4 Single Sign-On (SSO) for Sub-Applications

BooksAndGuidesPro functions as an authentication hub. When you access associated apps (BoingyBooks, Author Pages, FarmsFlo, ShiftSync), your account credentials and subscription status are shared with those applications solely to authenticate you and enforce access controls. No additional personal data is shared beyond what is necessary for authentication.

3. How We Use Your Information

• To create and manage your account
• To process subscription payments via Stripe
• To authenticate your identity across connected sub-applications
• To send transactional emails (account confirmation, password resets, billing receipts)
• To detect, prevent, and address security issues or abuse
• To comply with legal obligations

We do not use your information for behavioral advertising, and we do not build advertising profiles.

4. Third-Party Services

4.1 Stripe (Payment Processing)

Stripe processes all subscription payments. When you enter payment information, you are interacting directly with Stripe's secure infrastructure. Stripe is PCI-DSS compliant. See stripe.com/privacy.

4.2 MemberPress (Subscription Management)

We use MemberPress to manage membership tiers, access rules, and subscription lifecycles. MemberPress stores your subscription status and plan information within our own database.

4.3 Zoho Mail (Email Delivery)

Transactional emails (password resets, billing notifications) are sent via Zoho Mail. See zoho.com/privacy.html.

5. Cookies

We use the following essential cookies:

• Session cookie (PHP session): Maintains your login state. Deleted when you close your browser.
• WordPress authentication cookies: Set by WordPress/MemberPress to keep you logged in. Expire per your session settings.

We do not use advertising cookies, third-party tracking cookies, or analytics pixels.

6. Data Storage and Security

Your data is stored on a DigitalOcean virtual private server located in the United States. We implement the following security measures:

• HTTPS/TLS encryption for all data in transit
• Hashed and salted password storage (bcrypt via WordPress)
• Access restricted to authorized personnel only
• Regular server security patches and updates

No method of data storage is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

7. Data Sharing

We do not sell, rent, or trade your personal information to third parties.

We may share your information only in the following circumstances:

• Service providers: Stripe and Zoho Mail, solely to operate the service (as described above)
• Legal requirements: If required by law, court order, or governmental regulation
• Safety: To protect the rights, property, or safety of BooksAndGuidesPro, our users, or the public
• Business transfers: In connection with a merger or acquisition; users will be notified of any such transfer

8. Data Retention

We retain your account data for as long as your account is active. If you cancel your account, we will delete or anonymize your personal data within 30 days, unless we are required to retain it for legal, accounting, or regulatory purposes (e.g., billing records may be retained for up to 7 years).

9. Your Rights

Regardless of where you are located, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated personal data
• Data portability: Request an export of your data
• Opt out of communications: Unsubscribe from non-transactional emails at any time

9.1 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Right to Opt Out of Sale: We do not sell personal information; this right is therefore not applicable

To exercise any CCPA rights, contact us at johnshoufler@booksandguidespro.com. We will respond within 45 days.

10. Children's Privacy

BooksAndGuidesPro is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The "Last Updated" date at the top of this page will reflect the most recent revision. Continued use of the service after changes are posted constitutes acceptance of the updated policy.