Privacy Policy

Campbooks is an email and document workspace operated by Not A Camp (“we”, “us”). This policy explains what personal data we collect, why we collect it, where it lives, and the rights you have over it. We’ve tried to keep it short and readable.

In one line: your data is hosted in the European Union, we never sell it, and we never share it with third parties for their own purposes.

The data controller for your personal data is Not A Camp LDA, registered at Rua de S. Pedro 24, Branca CCH, 2100-607 Santarém, Portugal. If you have any question about this policy or your data, contact us at inbox@not-a-camp.com.

• Account information — your name, email address, and password (stored only as a salted hash), plus workspace settings you configure.
• Email and documents you connect — when you link a mailbox, we ingest the emails and attachments you choose to bring into Campbooks so we can organize, classify, and display them to you. This content belongs to you.
• Integration credentials — OAuth refresh tokens for connected mail providers (Zoho, Google, Microsoft) and the API key for any AI provider you connect, all stored encrypted at rest. We never see or store your provider password.
• Usage and technical data — basic logs (IP address, browser type, timestamps) needed to operate the service, keep it secure, and debug problems.

We use your data only to provide and improve Campbooks, specifically to:

• operate your account and workspace;
• ingest, classify, and surface your emails and documents;
• run the AI analysis and workflows you ask for;
• keep the service secure and reliable; and
• communicate with you about your account and service updates.

We do not use your email or document content to train AI models, and we do not use it for advertising.

If you are in the European Economic Area or the UK, we process your data on the basis of contract (to deliver the service you signed up for), legitimate interests (to keep the service secure and working), and your consent where required (for example, when you connect a mailbox). You can withdraw consent at any time by disconnecting an integration or closing your account.

All customer data is hosted in the European Union, on infrastructure provided by Hetzner Online GmbH (Germany). We don’t transfer your data outside the EU ourselves. Data only leaves the EU if you choose to connect a service located elsewhere (for example, a US-based AI provider) — see Services you connect below.

We do not sell your data, and we do not share it with anyone for their own purposes. To run the service, we rely on a single infrastructure sub-processor, who acts only on our instructions:

• Hetzner Online GmbH (Germany, EU) — hosting and infrastructure. Your data stays within the EU.

We may also disclose data if required by law, to protect our legal rights, or as part of a business transfer (in which case this policy continues to apply).

Campbooks lets you connect outside services that you choose and control. We only send your data to these when you’ve connected them, and only to do what you asked:

• Your AI provider — AI features are optional and configured by you. You choose the provider (such as OpenAI, Anthropic, DeepSeek, or Gemini) and supply your own API key. When you use an AI feature, the relevant email or document content is sent to the provider you selected, under your own account and that provider’s terms. We don’t pick the provider for you, and we never send your content to an AI service you haven’t set up.
• Your mailbox — when you connect Zoho, Google, or Microsoft over OAuth, we access only the mailbox you linked, on your instruction, to bring its messages into Campbooks.

For the data you send them, these providers act as independent controllers under their own terms — we encourage you to review their privacy policies.

We keep your data for as long as your account is active. When you delete content or close your account, we delete the associated personal data within a reasonable period, except where we must retain limited records to meet legal obligations.

You have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data (“right to be forgotten”);
• export your data in a portable format;
• object to or restrict certain processing; and
• withdraw consent at any time.

To exercise any of these, email inbox@not-a-camp.com. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

We protect your data with encryption in transit (HTTPS) and encryption at rest for sensitive fields such as integration tokens. Access to production systems is restricted and logged. No system is perfectly secure, but we work to keep your data safe and to notify you promptly if a breach affects you.

The Campbooks app uses a single essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies. This marketing site does not set tracking cookies.

Campbooks is a business tool and is not directed at children under 16. We do not knowingly collect data from children.

We may update this policy from time to time. When we make material changes, we’ll update the date at the top of this page and, where appropriate, notify you in the app or by email.

Questions about your privacy? Email inbox@not-a-camp.com and we’ll get back to you.