Privacy Policy
Last updated: April 03, 2025
1. Information We Collect
1.1 Personal Information
- Account information (username, email address)
- Reading history and book preferences
- User-generated content (reviews, notes, reading lists)
1.2 Usage Data
- Log data (IP address, browser type, pages visited)
- Device information (device type, operating system)
- Reading activity statistics
1.3 Cookies
We use essential cookies to:
- Maintain your session
- Remember your preferences
- Protect against unauthorized access
2. How We Use Your Information
2.1 Primary Uses
- Provide and maintain the ReadKeeper service
- Process and manage your reading lists
- Send essential service notifications
- Respond to your requests and support needs
2.2 Service Improvement
- Analyze usage patterns to improve features
- Debug technical issues
- Prevent fraud and abuse
3. Data Retention
We retain your data for the following periods:
- Account information: Until account deletion
- Reading history: Until account deletion or manual removal
- Usage logs: 90 days
- Backup data: 7 days
You can request data deletion at any time through your profile settings.
4. Third-party Services
4.1 Service Providers
- Google Books API: Used to fetch book information and cover images. Only book-related queries are shared.
- Gmail API: Used solely for sending account-related emails. No email content is stored.
4.2 Data Processing Agreements
All third-party services we use have signed data processing agreements ensuring GDPR compliance.
5. Data Security
We protect your data through:
- Encrypted data transmission (HTTPS)
- Secure password hashing using industry-standard algorithms
- Regular security audits and penetration testing
- Access controls and authentication mechanisms
- Daily encrypted backups with 7-day retention
6. Your Privacy Rights
Under GDPR and other privacy laws, you have the following rights:
- Access: View all your personal data from your profile
- Rectification: Update your information through profile settings
- Erasure: Delete your account and associated data
- Portability: Export your data in CSV or JSON format
- Objection: Opt-out of non-essential processing
- Restriction: Limit how we use your data
7. International Data Transfers
Your data is stored in the European Union. Any international transfers comply with GDPR requirements through:
- Standard Contractual Clauses
- Adequacy decisions
- Appropriate safeguards
8. Children's Privacy
ReadKeeper is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately.
9. Data Breach Procedures
In case of a data breach, we will:
- Notify affected users within 72 hours
- Provide details about the breach and data affected
- Take immediate steps to secure the system
- Work with authorities as required
10. Changes to Privacy Policy
We may update this policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email and/or service notification.
11. Contact Information
For any privacy-related inquiries or to exercise your rights, contact us at:
- Email: privacy@readkeeper.com