Privacy Policy

This Privacy Policy describes how Nine Box Press LLC (“Nine Box Press,” “Arclaunch,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with the Arclaunch service (the “Service”). The Service is a software-as-a-service platform that helps independent authors and publishers manage Advance Reader Copy (ARC) review campaigns, track reader activity, record reviews, generate share cards, embeddable review widgets, launch-kit materials, and related tools.

This Policy applies to authors who create Accounts and use the Service, and to readers who submit review information through the Service. It should be read together with the End User License Agreement / Terms of Service that govern use of the Service. Capitalized terms used but not defined here have the meanings given in the Terms.

By creating an Account, accessing, or using the Service, or by submitting review information, you acknowledge the practices described in this Policy.

1. DATA COLLECTION. We collect information in the following categories:

A. Account and Author Information. When you create or update an Account we collect information you provide, such as name, email address, username, password, and any additional identifying information required for certain features. We also collect non-personal technical data from your connection to the Service.

B. Reader Review Submissions. When a reader submits review information (Service name/platform, rating, link, and/or review text) through the Service, we collect that content together with a consent flag and timestamp. Consent is opt-in, unchecked by default, and collected per submission. An author cannot consent on a reader’s behalf. Reviews that an author records manually never carry reader consent.

C. Author-Uploaded Content. Book covers, logos, titles, descriptions, branding assets, and other materials you upload (“Author Content”).

D. Usage, Technical, and Monitoring Data. We collect technical logs, device/browser information, IP address, usage data, and other information reasonably necessary to operate the Service, detect automated account creation, bots, scraping, rate-limit evasion, unauthorized access, and other violations of the Terms. We may monitor and/or record communications that occur through the Service. We may also monitor and/or record communications that occur through the Service for security, abuse-prevention, and compliance purposes. You acknowledge that you have no expectation of privacy in such communications when using the Service.

E. AI Processing of Consented Review Text. When an author generates a share card from a review for which the reader has consented, the Service may transmit the review text (and only the review text) to a third-party AI provider solely to suggest a short verbatim pull-quote. No account information, contact details, or other personal data accompany that transmission. Reviews for which the reader declined consent are never sent.

We do not knowingly collect personal information from children under 13 without verifiable parental consent.

2. PERSONAL DATA USAGE. We use the information we collect to:

Provide, operate, maintain, and improve the Service (including campaign management, review recording, CSV export with consent flags, generation of share cards, embeddable widgets, and launch-kit materials);

Process and display consented reader review text to the inviting author and generate authorized materials that incorporate that text or a verbatim excerpt, subject to the limited license described in the Terms;

Transmit consented review text to a third-party AI provider solely for the purpose of suggesting a short verbatim pull-quote;

Authenticate Accounts, enforce the Terms, detect and prevent fraud, abuse, and security incidents;

Communicate with you about your Account, the Service, and (where permitted) promotional offers;

Comply with legal obligations, respond to lawful requests, and protect the rights, safety, and property of Nine Box Press, our users, and others;

Analyze performance used in the Service, and conduct research using aggregated or de-identified data.

We do not use reader review text for public surfaces or AI processing unless the reader has affirmatively consented.

3. DATA SHARING. We share personal information only as described below:

With service providers and vendors who process data on our behalf (including hosting, payment processing, and the limited AI processing of consented review text described above), under contractual obligations to protect the data;

When required by law, legal process, or governmental request, or to protect rights, safety, or security;

In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to the protections in this Policy;

With your consent or at your direction (for example, when you generate and download materials that incorporate consented review text).

We do not sell personal information. We do not share personal information with third parties for their own independent marketing purposes without consent.

4. CONSENT. Consent for public-surface use of review text is collected per submission, is opt-in, and is unchecked by default. Where the consent flag is “Yes,” the limited license described in the Terms applies. Where the consent flag is “No” (or the row was author-entered), no public-surface license exists; the data may be retained only for the author’s internal campaign records.

A reader may withdraw consent at any time by resubmitting the form with the consent box unchecked or by contacting us at the address in this Policy. Upon a valid withdrawal we will stop generating new public materials that incorporate the review and will remove the review from any live embed widget under our control within a commercially reasonable time. Already-distributed share cards and materials the author has independently copied outside the Service cannot be recalled.

Any CSV export of campaign or reader data includes the per-row consent flag and timestamp. You agree not to strip, obscure, or misrepresent the consent flag.

This Privacy Policy does not expand the limited licenses granted by readers or authors under the Terms. Public-surface use of review text and generation of share cards, widgets, or launch-kit materials remain strictly subject to the consent and license terms set out in the End User License Agreement.

5. DATA RETENTION. We retain personal information only as long as necessary to fulfill the purposes described in this Policy, provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Consented review text and related data are retained in accordance with the limited license and withdrawal rights described above. When no longer required we securely delete or anonymize the data.

6. DATA SECURITY. We implement administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, loss, misuse, or alteration. While we use commercially reasonable measures, no system can guarantee total security. As such, your usage of this site is fully at your own risk.

7. COOKIES. Cookies are small text files placed on your device to store data that can be recalled by a web server in the domain that placed the cookie. Cookies and analogue devices are used for storing and providing your preferences and settings, enabling you to sign in, combating fraud, analyzing how our products sell, and fulfilling other legal purposes.

Browser and third-party localized programs may be used for the purposes of blocking cookies at the user’s discretion. Such blocking may inhibit overall functionality and usage of the Site to the point where contracts/business initiated by the user is impossible.

8. LIMITATIONS. We collect only the personal information reasonably necessary to operate our services, and we use it solely for the purposes disclosed in this Privacy Policy. We do not use your personal information for unrelated purposes without your consent.

9. TELEMETRY. We may use anonymized or aggregated data for research, analytics, and business purposes. Such data does not identify individual users and is not considered personal information.

10. ACCOUNT. You may sign in to the Service with an Arclaunch Account. Personal data associated with your Account includes credentials, name and contact data, payment-related data processed by third-party processors, device and usage data, and information about your use of the Service (including campaign and review activity). Signing in enables access to the Service features described in the Terms, personalization within the Service, and related account management functions.

11. TRANSACTION DATA. All payment information is processed in compliance with the Payment Card Industry Data Security Standards (PCI DSS) and conducted in full by third parties. We do not store full credit or debit card numbers on our servers. Payment processors may collect and store data under their own privacy policies.

12. EMAIL & DIRECT MARKETING. All marketing emails will include accurate sender information, a clear subject line, and a functional unsubscribe mechanism. If you unsubscribe, we will honor your request within ten (10) business days. We do not sell or transfer your email address to third parties for their marketing use without your consent.

13. THIRD PARTY SERVICES. Our site may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies before providing personal information.

14. DATA MERGER. If we undergo a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of the transaction, subject to the protections described in this Privacy Policy.

15. INTERNATIONAL DATA TRANSFERS. Our services are intended for users located in the United States. If you access the services from outside the U.S., you warrant that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction/territory.

16. CHILDREN’S PRIVACY / COPPA. The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. Authors agree not to target, market, or knowingly direct invitations or calls-to-action for reviews or Account creation to children under 13, and not to collect or solicit personal information from children under 13 in connection with the Service. If we learn we have collected personal information from a child under 13 without the required consent, we will delete it promptly. Parents or guardians may contact us to review, delete, or refuse further collection of a child’s information.

17. FDUTPA COMPLIANCE. We will not engage in deceptive, unfair, or misleading practices in connection with the collection, use, or disclosure of your personal information. All statements in this Privacy Policy are intended to comply with the Florida Deceptive and Unfair Trade Practices Act.

18. NOTICE. In the event of a data breach involving your personal information, we will notify you and any applicable regulators in accordance with applicable state and federal laws, including Florida Statutes § 501.171.

19. POLICY CHANGE. We may update this Privacy Policy from time to time. Material changes will be communicated by posting an updated version. Continued use of the services after changes have been posted constitutes acceptance of the revised Privacy Policy.

20. PROFILING. We may use automated tools to analyze user behavior, generate draft recommendations, or determine eligibility for certain offers. These tools do not involve solely automated decisions that produce legal or similarly significant effects without human involvement.

21. SECURITY MONITORING. We may use your information to detect, prevent, and investigate fraudulent transactions, unauthorized access, abuse, or other activities that violate our Terms of Service or applicable law.

22. LIABILITY LIMITATIONS. To the maximum extent permitted by law, we shall not be liable for any indirect, incidental, consequential, or punitive damages arising from or related to the use or disclosure of your personal information in accordance with this Privacy Policy.

23. USER VERIFICATION. For your protection, we may require you to verify your identity before responding to any request to access, correct, or delete your personal information.

24. SURVIVABILITY. Certain provisions of this Privacy Policy, including those relating to data retention, dispute resolution, and liability limitations, shall survive the termination or expiration of your account or use of the services.

25. GENERAL RIGHTS.

A. Confirmation. You may request to confirm whether your data in whole or in part is held and/or processed by Arclaunch.

B. Data Removal. You may have a right to request the deletion of some of your personal information Arclaunch holds about you. Arclaunch is required by law to retain certain personal information.

C. Protest. You may protest to the processing of your personal information if you believe Arclaunch doesn’t have the appropriate rights to engage in that processing or if you wish to ask Arclaunch not to process your personal information for direct marketing purposes.

D. Cancellation/Opt-Out. To unsubscribe from communications from the Site or affiliates, unsubscribe directly through the methods in those emails or privacy policies.

E. Correction. You can correct your personal information if you observe it to be inaccurate.

Requests to exercise the rights described above, or any privacy-related inquiry, may be submitted by mail to:

Nine Box Press LLC d/b/a Arclaunch 336 E. College Ave., Suite 301 Tallahassee, FL 32301