Last Updated: December 6, 2024
1. Introduction
Booklio ('we,' 'our,' or 'us') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
2.1 Personal Information
We collect personal information that you voluntarily provide when registering for an account:
- Name and email address
- Account credentials (encrypted passwords)
- Profile information and preferences
2.2 Payment Information
Payment Data Collection:
- Credit/debit card information (collected securely via Stripe)
- Billing address and contact details
- Transaction history and payment records
- Subscription status and renewal dates
We use Stripe as our payment processor. Stripe is PCI DSS Level 1 certified and handles payment data in accordance with industry security standards.
2.3 Automatically Collected Information
- Device Information: IP address, browser type, operating system
- Location Data: General geographic location based on IP address
- Cookies and Tracking Technologies: Session data, preferences, analytics cookies
2.4 Usage and Behavioral Data
Performance Tracking and Engagement Analytics:
We actively track and analyze your behavior on our platform to optimize user engagement and improve our Service:
- Reading Activity: Books read, pages viewed, time spent reading
- Navigation Patterns: Click paths, page visits, feature usage
- Engagement Metrics: Session duration, frequency of visits
- Interaction Data: Buttons clicked, features used
- Progress Tracking: Reading progress, bookmarks
3. How We Use Your Information
- Service Delivery: Provide access to AI-generated books
- Payment Processing: Process subscription payments, manage billing
- Account Management: Create and maintain your account
- Personalization: Customize content recommendations
- Analytics: Analyze usage patterns to improve engagement
- Marketing: Send promotional emails (with your consent)
- Security: Detect and prevent fraud
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area, we process your data based on:
- Contract Performance: Processing necessary to provide the Service
- Legitimate Interests: Analytics, fraud prevention
- Consent: Marketing communications, non-essential cookies
- Legal Obligations: Tax reporting
5. Information Sharing and Disclosure
We share your information with:
- Service Providers: Stripe (payments), Supabase (hosting)
- Legal Requirements: Law enforcement when required by law
- Business Transfers: In connection with mergers or asset sales
We DO NOT sell your personal information to third parties.
6. Cookies and Tracking Technologies
We use cookies, web beacons, and similar technologies to track user activity. For detailed information, please see our Cookie Policy.
7. Data Retention
We retain your information for as long as necessary to:
- Provide the Service and maintain your account
- Comply with legal obligations (e.g., tax records for 7 years)
- Resolve disputes
- Maintain backup systems (90 days)
8. Your Privacy Rights
8.1 GDPR Rights (EEA Users)
- Access: Request copies of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ('right to be forgotten')
- Restriction: Limit processing of your data
- Portability: Receive your data in a structured format
- Objection: Object to processing
8.2 CCPA Rights (California Users)
- Know: Request disclosure of data collected and shared
- Delete: Request deletion of personal information
- Opt-Out: Opt out of sale of personal information (we don't sell data)
To exercise these rights, contact us at: privacy@booklio.com
9. Security Measures
We implement industry-standard security measures to protect your data:
- TLS/SSL encryption for data in transit
- Encryption of sensitive data at rest
- Regular security audits
- Access controls and authentication requirements
10. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
11. International Data Transfers
Your information may be transferred to and maintained on servers located outside your country. For EEA users, we ensure adequate safeguards through Standard Contractual Clauses approved by the European Commission.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy with an updated date.
13. Contact Us
For questions about this Privacy Policy or to exercise your privacy rights:
Email: privacy@booklio.com
Data Protection Officer: dpo@booklio.com