Privacy Policy

2. Information We Collect

We collect the following categories of information:

• Account information: Email address and password (hashed) when you create an account.
• Uploaded content: EPUB and PDF files you upload, including metadata (title, author) extracted from the files.
• Chat and AI usage: Prompts you send, selected passages, AI responses, and related context used to generate answers.
• Reading data: Reading position, bookmarks, and library preferences.
• Payment information: Managed by Stripe; we do not store card details. We store subscription status and billing history.
• Technical data: IP address, browser type, device information, and usage logs (e.g., via Vercel Analytics).

3. How We Use Your Information

We use your information to:

• Provide and improve the reading and AI assistant features.
• Store and serve your books, chat history, and reading positions.
• Process payments and manage subscriptions.
• Send transactional emails (e.g., password reset, account confirmation).
• Analyze usage to improve our service (aggregated analytics).
• Comply with legal obligations and enforce our terms.

4. Service Providers

We use the following third parties to operate our service:

• Supabase: Authentication, database, file storage, and vector search. Data is stored in their infrastructure.
• OpenAI: AI chat and embeddings. Your prompts and book excerpts may be sent to OpenAI to generate responses. OpenAI's data usage policies apply.
• Vercel: Hosting and analytics.
• Stripe: Payment processing. Card details are held by Stripe, not by us.
• Tavily: Web search in Deep mode.

These providers act as data processors. We encourage you to review their privacy policies.

5. Cookies

We use the following cookies:

• Session and authentication: Required to keep you logged in. Set by Supabase.
• Preferences: Such as theme (light/dark mode) and layout preferences, stored in your browser.
• Analytics: Vercel Analytics may set cookies or similar technology to measure usage (e.g., page views) in aggregate. This helps us improve the service.

You can disable or block cookies in your browser settings. Some features (such as staying logged in) may not work if you disable essential cookies.

6. AI and Model Training

We send your prompts and selected book content to AI providers (e.g., OpenAI) to generate responses. As of this policy, we do not use your content to train AI models. Please refer to the relevant provider's policies for their data retention and usage practices.

7. Data Retention

We retain your data for as long as your account exists. You may delete your account and associated data at any time. Deleted books, chats, and usage records are removed from our systems according to our retention procedures.

8. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data.
• Request a copy of your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact us (see contact details below).

9. California Privacy Rights (CCPA/CPRA)

California residents may have additional rights under the CCPA/CPRA, including the right to know what personal information is collected, to opt out of the "sale" or "sharing" of personal information, and to non-discrimination. We do not sell or share your personal information for cross-context behavioral advertising.

10. International Transfers

Your data may be processed in countries outside your residence, including the United States and the European Union. We rely on appropriate safeguards (e.g., Standard Contractual Clauses) where required by law.

11. Children

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it.

12. Security

We use industry-standard measures to protect your data, including encryption in transit and at rest, access controls, and secure authentication. No system is completely secure; we encourage you to use strong passwords and protect your account.

13. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

14. Contact

For privacy-related questions or to exercise your rights, contact us at the email or address provided in your account settings or on our website.