This privacy policy describes how Maskil Works LLC (“we”, “us”), doing business as Praxis Books, collects, uses, stores, and shares personal information when you use https://praxis-books.com, sign in with Google, Microsoft, or another identity provider, or install our Shopify app.
Who We Are
Praxis Books is an authoring and reading platform for digital workbooks. Authors write and publish books on the site. Readers work through a book copy—a stored instance of a book that holds reading position and exercise answers for that copy. Merchants can install our Shopify app so a paid order grants access to a book.
This service is operated by Maskil Works LLC, an Indiana limited liability company in the United States, doing business as Praxis Books. We are a remote-only company and do not maintain a public street address. Privacy questions: legal@praxis-books.com.
We currently offer Praxis Books from the United States and do not offer the service to people in the European Economic Area or the United Kingdom. We are not established in those regions, and we have not appointed an EU or UK representative under GDPR Article 27 (or the UK equivalent). If that changes, we will update this policy and appoint a representative when required. You can still contact us at legal@praxis-books.com about privacy.
Information We Collect
Account and Sign-In
If you create an account, WorkOS (our authentication provider) stores the identity record for that account. That typically includes an email address, a display name, and a unique user id, plus whatever the identity provider you chose sends for sign-in.
Our own application database identifies you primarily by that WorkOS user id. We do not use email as the primary key for a Praxis Books account.
We still process email addresses when we need to create or recognize an account, send transactional mail, match a purchase or access grant to a person who does not yet have an account, or answer a support request.
Google User Data
If you choose Sign in with Google, Google (through WorkOS) shares basic profile information used for sign-in: typically your name, email address, and a unique Google account identifier. We use that only to create or recognize your Praxis Books account.
We do not request access to Gmail, Drive, Calendar, Contacts, or other Google user content. We do not sell Google user data, use it for advertising, or use it for any purpose other than authentication and providing the service you asked for. That use is intended to comply with the Google API Services User Data Policy, including the Limited Use requirements.
Shopify
For a Praxis Books account, book content, and reader responses, we decide how that information is used — we are the controller. For purchaser email and order identifiers we receive from a merchant’s Shopify shop, we use that information to grant or revoke book access for that merchant — we are closer to their processor until the buyer creates a Praxis Books account. After that, the Praxis Books account is ours to administer as controller.
If a merchant installs the Praxis Books Shopify app, Shopify sends us data needed to grant and revoke book access:
- Shop domain and app-installation identifiers
- Order identifiers, line items, currency, and financial or fulfillment status
- Purchaser email on a paid order, so we can send an activation link and match the buyer to a Praxis Books account
- Refund information, so we can revoke access
We do not collect payment card numbers. Checkout stays on Shopify. We do not drop advertising cookies or tracking pixels on a merchant’s storefront, and we do not log how buyers browse that store beyond what Shopify sends us for order fulfillment.
From the merchant, we have the shop domain and whatever they send us by email. We may also generate operational logs of how the app is used (for example, webhook receipts and error traces).
Content You Create
We store the content needed to run the product: book manuscripts, versions, translations, settings, uploaded assets, book copies (including reading position and exercise answers on each copy), licenses, and organization or group membership for authors.
Technical and Log Data
We keep operational logs and traces so we can run, secure, and debug the service. Those records commonly include request paths, timing, error details, a WorkOS user id, organization or session identifiers, cookie names, and network identifiers such as IP addresses (for example from forwarding headers).
We try not to put email addresses or names into routine debug traces. That is a practice, not a guarantee. Logs may still include an email address or other personal information when it appears in a request, webhook, or error—for example a Shopify order payload or a support message.
Cookies
We use cookies that are needed to sign you in (WorkOS AuthKit) and to know which books you can read (a book-access token). Those cookies are strictly necessary for the service. We do not use advertising or analytics cookies, and we do not show a cookie-consent banner while that remains true.
How We Use Information
We use personal information to:
- Provide authoring, reading, and licensing
- Authenticate you and keep you signed in
- Fulfill purchases and send transactional email (activation links, access grants)
- Operate, secure, and debug the service
- Respond to support and privacy requests, and comply with law
- Notify account holders of material changes to this policy or our terms
We do not sell personal information, and we do not sell or share it for cross-context behavioral advertising. We do not use it for advertising or interest-based marketing, and we do not profile people for ads.
Lawful Bases
If you are in the European Economic Area or the United Kingdom, we need a lawful basis for each use. These are the bases we rely on for the processing described above:
- Contract — creating and signing you in to an account, hosting the books and answers you create, granting access after a purchase or access grant, and sending transactional mail such as an activation link.
- Legitimate interests — operating, securing, and debugging the service, including operational logs and traces. We treat that interest as running the product safely, not as advertising or profiling. You may object to processing based on legitimate interests; email legal@praxis-books.com.
- Legal obligation — keeping records we must keep for law, tax, or a dispute, including refund and order identifiers that Shopify requires us to handle.
Sign-in with Google or Microsoft is still for the contract of giving you an account. Those providers have their own terms for the data they hold.
When We Share Information
We share information with the processors we need to run the service, and only as needed for their function:
- WorkOS — authentication
- Google — Sign in with Google, if you choose it
- Microsoft — Sign in with Microsoft, if you choose it
- Shopify — order and fulfillment data for shops that install the app
- Neon — database hosting
- Vercel — application hosting
- Uploadthing — file storage for book assets
- Amazon SES — transactional email
- Observability tooling (OpenTelemetry, and Grafana when enabled) — logs and traces
We may also disclose information if required by law, or if needed to protect the service or someone’s safety.
How Long We Keep Information
- Account and content stay while the account or book exists, and for a short period afterward in database backups (typically until those backups expire on their normal schedule).
- A purchaser or access-grant email is stored only while access is still pending. When the link is claimed, revoked, or expires, we delete that email. We keep a record that the link was used so we can send someone who already has the book to it, without storing the original email.
- Shopify purchase records without email are kept so we can handle support and refunds.
- Application and observability logs are kept as long as we reasonably need them for operations, security, and debugging—commonly on the order of weeks to a few months, depending on the provider’s retention settings (for example Vercel and Grafana). We do not currently scrub a single person out of those log archives on demand.
Where Information Is Processed
We process information in the United States, and in other countries where our processors operate. If you are in the European Economic Area, the United Kingdom, or another region with similar transfer rules, this means your information is transferred outside that region.
When EU or UK law requires a transfer tool for personal information sent to the United States, we rely on the mechanisms our processors offer: typically the European Commission’s Standard Contractual Clauses (SCCs) and/or the EU–US Data Privacy Framework (DPF), as each processor documents for its service. We are still completing signed data-processing addenda with some vendors. We are not sending your information so that someone else can advertise to you.
Your Choices and Requests
You can ask us to access, correct, delete, or port personal information we hold, or to restrict or object to how we use it, by emailing legal@praxis-books.com or from your account page when signed in. We will need enough detail to find the right records. We aim to respond within 30 days. We may refuse a request when the law requires us to keep something, or when we cannot verify who is asking.
When we delete or anonymize an account, we remove or anonymize personal information in our application database and with our authentication provider. Operational logs and traces (including those held by hosting and observability providers such as Vercel and Grafana) may still contain residual personal information until those systems’ normal retention periods end. We do not currently have a way to scrub a single person out of those log archives on demand. Database backups may also retain data until they expire.
If you use Sign in with Google or Microsoft, you can also revoke the app’s access from that provider’s account settings. That does not by itself delete your Praxis Books account or book content.
When the Praxis Books app is listed on the Shopify App Store, Shopify will also send mandatory privacy webhooks (customer data request, customer redaction, and shop redaction). We will use those, together with email and in-product requests, to locate and export or delete personal data we hold. Until those webhooks are in place, email legal@praxis-books.com.
If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority. For the EEA, see the EDPB list of authorities. For the UK, contact the ICO.
Children
Accounts on Praxis Books are for adults. A parent, guardian, or school may allow a minor to read or work through a book using access that adult controls (for example a shared signed-in session or a license the adult purchased). The adult is responsible for that use. Exercise answers and reading activity under a shared session are stored under the adult’s account.
We do not knowingly create accounts for children under 13. If you believe a child under 13 has created an account, contact legal@praxis-books.com and we will delete it. Purchases and activation emails are intended for the adult buyer or administrator.
Changes
We may update this policy. The date at the top of the page will change. If we make material changes, we will also notify account holders (for example by email to the address on the account, or by an in-product notice). Continued use after the effective date means you accept the updated policy, except where the law requires a different form of consent. If we change how we use Google user data, we will update this page so it stays accurate.
Contact
Maskil Works LLC
Doing business as Praxis Books
Indiana, United States
legal@praxis-books.com
https://praxis-books.com