Privacy Policy

1. Who We Are

JW Book Publication Network operates the self-publishing platform at jwbpn.org. We assist authors in manuscript preparation, editorial review, ISBN/DOI registration, ebook conversion, print-on-demand, and global distribution.

Data Controller: JW Book Publication Network, India.
For data requests and privacy queries, contact us at [email protected].

2. Data We Collect

2.1 Account & Profile Data

When you register: full name, email address, mobile number, country, and state. Google OAuth sign-ins also provide your profile picture and Google account ID.

2.2 Book & Manuscript Data

Book titles, genres, descriptions, chapter content, cover designs, page layouts, ISBN/DOI details, and all files you upload (DOCX, PDFs, images). This content is required to deliver our publication services.

2.3 Payment & Order Data

Order numbers, amounts, payment proof images (screenshots/receipts), partial/full payment status, and invoice details. We do not store full card numbers or UPI credentials — payments are confirmed via proof submission and manual verification.

2.4 Legal Form Data

When you sign the Copyright Transfer Form or Undertaking / Declaration Form: your full name, email, phone number, IP address, digital signature data, and the timestamp of signing.

2.5 Print Order Data

Number of copies, delivery address, tracking carrier, tracking numbers, and dispatch timestamps when you order physical print copies.

2.6 Communications

Support tickets, contact form submissions, and any messages you send us. Email logs are retained for audit and resend purposes.

2.7 Technical Data

IP addresses (collected during form signing and login), browser type, device information, and session data via cookies and Laravel session management.

3. How We Use Your Data

• Providing and managing our publication services (manuscript review, ISBN/DOI, print, ebook)
• Processing your orders and verifying payments
• Sending transactional emails (approvals, rejections, payment confirmations, form signing requests, dispatch notifications)
• Assigning print jobs to partner printers and communicating job details
• Sending reminder emails if your manuscript is inactive (marketing purpose — you may unsubscribe)
• Generating publication certificates and legal form PDFs
• Responding to your support inquiries
• Fraud detection and platform security
• Improving our platform through aggregated, anonymised analytics
• Complying with legal obligations (tax records, IP law, digital signature compliance)

4. Legal Basis for ProcessingGDPR

5. Who We Share Data With

5.1 Partner Printers

When you order physical copies, we share your book title, print specifications, and order details with our registered printing partners. Printers do not receive your email address, payment data, or manuscript content beyond what is necessary to fulfil the print job.

5.2 Service Providers

We use third-party services to deliver our platform: SMTP email providers (for transactional and notification emails), cloud hosting providers, and PDF generation tools. These providers act as data processors under our instructions.

5.3 Legal Requirements

We may disclose your data when required by law, court order, or to protect the legal rights, safety, or property of JWBPN, our users, or the public.

5.4 No Sale of Data

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

6. Data Retention

7. Your RightsGDPR

If you are located in the EU, UK, or another jurisdiction with data protection laws, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data where we have no legal obligation to retain it.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interest (including marketing emails).
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies

We use cookies and similar technologies to:

• Maintain your login session (essential — cannot be disabled)
• Remember your preferences and form progress
• Protect against CSRF attacks (security cookies — essential)
• Analyse platform usage via anonymised aggregated data

We do not use third-party advertising cookies. You can control non-essential cookies via your browser settings, though this may affect platform functionality.

9. Email CommunicationsCAN-SPAM / GDPR

9.1 Transactional Emails

We send transactional emails related to your account and publication activity: account confirmation, book status updates (approval, rejection), payment confirmations, form signing requests, print dispatch notifications, and support responses. These emails are sent on the basis of contract performance (GDPR Art. 6(1)(b)) and cannot be opted out of while you use our services, as they are essential to delivering your publication.

9.2 Marketing & Reminder Emails

We may send reminder emails if your manuscript has been inactive for an extended period. These are sent on the basis of our legitimate interest in supporting your publication journey. You can opt out of these at any time using the Unsubscribe link in any email footer, or by emailing [email protected].

9.3 CAN-SPAM Compliance

In accordance with the US CAN-SPAM Act: all commercial emails include our physical mailing address, a clear "From" identification, honest subject lines, and an unsubscribe mechanism. We honour unsubscribe requests for non-transactional emails promptly.

10. Security

We implement industry-standard security measures to protect your data, including: HTTPS encryption in transit, bcrypt password hashing, signed URLs for sensitive actions (form signing, unsubscribe), session-based CSRF protection, and role-based access control. Despite these measures, no system is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

11. International Data Transfers

JWBPN operates from India. If you access our services from outside India — including from the EU or UK — your data may be transferred to and processed in India. Where required by GDPR, we ensure appropriate safeguards are in place for such transfers. Our email delivery service providers may process data in their respective server locations in accordance with their own privacy policies.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a person under 18, please contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify registered users of material changes by email or via a notice on our platform. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of our services after a change constitutes your acceptance of the updated policy.

14. Contact & Data Requests

For any privacy-related enquiries, data access requests, or to exercise your rights under GDPR or applicable law: