← Back to BookScout

BOOKSCOUT BOT

Privacy

BookScout uses its own email-and-password accounts to keep your saved instructions, provider selection, research and outreach separate from other accounts. Protected requests check ownership on every record.

Your account

Account records contain your name, email address, a salted password hash and a hashed recovery key. Passwords are never stored as readable text. The browser holds a protected session cookie; session tokens are stored as hashes on the server. Sessions expire and are revoked when you log out or reset your password. Recovery uses the private key shown at signup. Account-attempt limits temporarily store hashed identifiers to reduce automated guessing. Your email is an account identifier; signup does not claim that mailbox ownership has been verified.

AI connections

Personal Gemini and OpenAI API credentials are validated against the provider, encrypted on the server and never returned in account data or saved in browser storage. Your selected provider receives the scouting brief, public book and author evidence, and your saved outreach identity when you start or regenerate research. Provider billing, retention and use follow that provider’s policies. Gmail message content is not sent to the AI provider.

Gmail

Connecting Gmail grants permission to check for an existing conversation with a researched public author contact and create an outreach draft after your approval. The bot does not send emails automatically. OAuth tokens are encrypted per account. Disconnect Gmail in Connections to request token revocation and remove the tokens after Google confirms it.

Research and retention

Research uses public sources. Contact records contain publicly listed professional addresses and their source pages. A public listing does not prove deliverability. Saved work stays in your account until deleted. Export your shortlist in CSV from Books & evidence. Delete saved work in Connections; this retains your account credentials so you can log in again. You can also revoke Gmail access in your Google account.

Owner contact

For privacy questions or account closure, contact PageCraft Studio through pagecraftstudio.biz.

Last updated October 11, 2026.