Privacy Policy

1. Who we are

Flipso is operated by WaspThemes, a business based in Türkiye. We are the data controller for the personal data described here, except for the answers to lead forms, which section 5 covers.

For anything about your data, write to support@flipbook.so.

2. What we collect

Account. Your email address. If you sign in with Google, also the name and profile photo Google shares with us.

Flipbooks. The PDFs and Canva designs you upload, the page images, thumbnails and text we make from them, the links found in them, and what you set in the editor, such as the title, description, tags, links, logo, lead form and password. A flipbook is public unless you make it private or add a password. Public flipbooks saved to an account can appear on Discover, on your publisher profile and in search engines. Password and private settings limit who can find and open a flipbook; page images are served from links that are not password-protected.

Publisher profile. If you create one, its address, name, bio, photo or logo, website, location, contact email and social links. These are public on your profile.

Follows. The publishers you follow. A profile shows only how many people follow it, not who they are.

Canva. When you publish from the Flipso app in Canva, the design's pages and the Canva user and design IDs Canva sends with them.

Payments. Paddle takes the payment, so we never see your card. We receive your email address, your plan and the status of your subscription.

Support. Your name, email address, subject and message when you use the support form or write to us, and the IP address the form was sent from, which we use to limit abuse.

Reports. When you report content, your email address, your name for a copyright or illegal content notice, what you report and the IP address the report was sent from. For a copyright notice, we send a copy, with your name and contact details, to the person who uploaded the content.

Usage. Pages you visit, your device and browser, your country worked out from your IP address, and how you use the site. A session recording tool records clicks, scrolling and mouse movement so we can see where the site is hard to use.

Errors. When something goes wrong on Flipso, a report about the error so we can fix it. Error reports do not include your name, your email address, what you type or the files you upload.

3. Why we use it and our legal basis

To provide the service you asked for: sign you in, turn your files into flipbooks and host them, show public flipbooks on Discover and your profile, take payments and answer support requests. Legal basis: performance of our contract with you (GDPR Article 6(1)(b)).

To send the emails the service needs: sign-in codes and, if your flipbook has a lead form, an email about new leads, at most once every few hours. You can turn lead emails off with the link in each one or in the flipbook's lead settings. Legal basis: performance of our contract.

To keep Flipso safe and working: stop abuse, check public flipbooks before they appear on Discover and fix errors. Legal basis: our legitimate interest in running a safe service (Article 6(1)(f)).

To find and fix errors, using an error monitoring provider. Legal basis: our legitimate interest in running a service that works (Article 6(1)(f)).

To handle reports about content: review them, act on them and keep a record of what we decided. Legal basis: our legal obligations under copyright law and the EU Digital Services Act (Article 6(1)(c)), and our legitimate interest in keeping unlawful content off Flipso.

To show the plans and prices that apply in your country, using the country from your IP address. Legal basis: our legitimate interest.

To understand how the site is used and improve it, with an analytics provider and a session recording tool. They set the analytics cookies described in our cookie policy, in every country. When you buy a plan, we pass your analytics visitor ID, if there is one, to Paddle so the purchase is counted once. Legal basis: our legitimate interest in improving the site.

We do not sell your personal data and do not use it for advertising.

4. AI processing

When a flipbook is public and has no password, text from its first 12 pages is sent to an AI model provider. The model writes the flipbook's title, category and search keywords and flags content that should not be listed on Discover. The title is used on Discover and as the flipbook's page title in search engines and link previews.

The text of private and password-protected flipbooks is never sent. Tags you type on any flipbook are sent, so each tag gets a standard name. This processing decides only how a flipbook appears on Flipso and in search engines; it makes no decision about you.

We send this text only to AI model providers that do not store it or use it for training. Your flipbooks and your data are not used to train AI models.

5. Readers of flipbooks

Reading a flipbook needs no account. We count views, pages read and link clicks without identifying the reader, and show these totals to the flipbook's owner. Our analytics provider and session recording tool also run on flipbook and embed pages; the recordings hide the pages and what readers type. For a visit to a publisher profile we keep only where the visitor came from.

Error reports from flipbook, embed and profile pages carry no account ID, no lead form answers and nothing readers type.

If you fill in a flipbook's lead form, your answers go to the flipbook's owner, who can see them, download them and get them by email. For those answers the owner is the controller and we process them on the owner's behalf. To have them deleted, contact the owner or write to us.

6. Who receives your data

Our cloud hosting and database provider: sign-in, database, file storage and the servers that run Flipso and our support inbox.

An analytics provider: statistics about how the site is used. It does not receive your name, your email address or what you type.

A session recording tool: recordings of clicks, scrolling and mouse movement that show us where the site is hard to use.

An error monitoring provider, to find and fix problems. Error reports do not include your name, your email address, what you type, lead form answers or the files you upload.

Paddle: payments, invoices, tax and refunds. Paddle is the merchant of record and handles your payment details under its own privacy policy.

An email delivery provider: sends our emails (sign-in codes and lead emails).

AI model providers: the text of public flipbooks and the tags you type, as described in section 4.

A location lookup service: turns your IP address into a country.

Canva: if you use the Flipso app in Canva, Canva sends us your design. Canva's own policy covers your Canva account.

Anyone on the internet: public flipbooks, publisher profiles and what they show.

We also disclose data when the law requires it, and to a company that takes over Flipso.

7. International transfers

Our database, files and servers are in the United States, and most of the providers above are based there. When data leaves the EU, the UK or Türkiye, the transfer relies on the provider's Standard Contractual Clauses or, where the provider is certified, the EU-US Data Privacy Framework.

8. How long we keep it

Account data: as long as your account exists. Deleting your account from Account in the site menu permanently removes your flipbooks with their leads and statistics, your publisher profile and its addresses, the logos and photos you uploaded, your subscription record and your sign-in account. Deleting your account also removes the publishers you follow and the people who follow you. An account with an active subscription cannot be deleted, so cancel the subscription in Paddle first. Paddle's billing records and our server logs are not part of this deletion.

Flipbooks: until you delete them. Deleting a flipbook removes its pages, its text, its leads and its statistics right away. A flipbook made without an account stays until it is deleted; send us its link to have it removed.

Uploaded PDFs: we delete the PDF file once its pages are made. A PDF that could not be converted is deleted automatically, usually within 7 days. Flipbooks made before this practice may still keep their PDF until they are deleted.

Sign-in codes expire after 10 minutes. The sign-in cookie lasts 14 days.

Support messages: as long as we need them to help you.

Reports: as long as we need them to handle the report and keep a record of what we decided.

Analytics and session recording data: for the retention period set with those providers.

Error reports: at most 90 days.

Payment records: Paddle keeps them for as long as tax law requires.

9. Your rights

You can ask us to give you a copy of your data, correct it, delete it, send it to you in a portable format, or restrict how we use it. You can object to any use based on our legitimate interest. Write to support@flipbook.so and we will answer within one month. A copy of your data is free of charge, whatever your plan.

You can also complain to the data protection authority where you live or work. In Türkiye this is the Personal Data Protection Authority (KVKK).

10. Cookies

We use a few cookies and browser storage to keep you signed in, remember your language and country, show more of the topics you open on Discover, and measure how the site is used. We show no cookie banner; analytics runs the same in every country. Our cookie policy at flipbook.so/legal/cookies describes each kind and how to block it.

11. Children

Flipso is not meant for anyone under 16, or older if your country requires it, and we do not knowingly collect their data. If you think a child has given us personal data, write to support@flipbook.so and we will delete it.

12. Changes

When we change this policy, we update the date at the top of this page.

13. Contact

Questions and requests about your data: support@flipbook.so or the form on our support page.