Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using the Service:

• Account Information: Name, email address, and profile details when you create an account.
• Payment Information: Billing details processed securely through Stripe, Inc. We do not store your full credit card number on our servers.
• Reading Data: Books you add, reading sessions, pages read, notes, highlights, and reading goals.
• Social Content: Posts, comments, likes, and messages you share through the Service.
• Communications: Messages you send to us, including support requests and founder messaging (Elite tier).

1.2 Information Collected Automatically

When you use the Service, we automatically collect certain technical information:

• Device Information: Device type, operating system, browser type, and unique device identifiers.
• Usage Data: Pages visited, features used, session duration, and interaction patterns.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: We use cookies, local storage, and similar technologies to maintain your session and improve the Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Data Used
Provide the Service	Account info, reading data, social content
Process Payments	Payment information (via Stripe)
Personalize Experience	Reading data, usage patterns, preferences
Send Communications	Email address (account updates, reading reminders)
Improve the Service	Usage data, feedback, error logs
Ensure Security	Device info, log data, IP addresses
Comply with Law	Any data as required by legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service Providers: We share data with trusted third-party providers who help us operate the Service, including Stripe (payments), cloud hosting providers, and analytics services. These providers are contractually obligated to protect your data.
• Community Features: Information you share through social features (posts, reading lists, profile) is visible to other users as intended by the feature's design.
• Legal Requirements: We may disclose information if required by law, legal process, or government request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share information for other purposes with your explicit consent.

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication via OAuth protocols.
• Regular security assessments and monitoring.
• Access controls limiting employee access to personal data.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms).

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request a portable copy of your data in a structured format.
• Opt-Out: Unsubscribe from marketing communications at any time.
• Restrict Processing: Request that we limit how we use your data.

To exercise any of these rights, contact us at privacy@theivyreader.com. We will respond within 30 days.

7. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Service to function (authentication, security). Cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the Service to improve performance and features.
• Preference Cookies: Remember your settings and preferences (theme, reading display options).

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@theivyreader.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to such transfers. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your data include:

• Contract Performance: Processing necessary to provide the Service you requested.
• Legitimate Interests: Processing for our legitimate business interests (improving the Service, security).
• Consent: Processing based on your explicit consent (marketing communications).
• Legal Obligation: Processing required to comply with applicable laws.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service and update the "Last Updated" date at the top of this page. Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us