1. Introduction
Underline Books ("we", "our", "us") is a personal quote library service. This policy explains what data we collect, how we use it, and your rights regarding that data.
2. Data We Collect
- Account data: Your email address, used to authenticate you and send transactional emails (e.g. password resets).
- Reading library data: Book titles, authors, and reading shelf data you import from Goodreads or StoryGraph CSV exports.
- Usage data: Standard server logs (IP address, browser type, pages visited) retained for up to 30 days for security and debugging purposes.
- Payment data: Handled entirely by Stripe. We do not store card numbers or payment details — only a Stripe customer ID and subscription status.
3. How We Use Your Data
- To provide the Underline Books service (storing and displaying your quotes)
- To process payments and manage subscriptions via Stripe
- To send transactional emails (account confirmation, password reset)
- To diagnose and fix technical issues
We do not sell your data to third parties, use it for advertising, or share it with anyone except as described below.
4. Third-Party Services
- Supabase: Stores your account and library data in a managed PostgreSQL database. Data may be stored in the US or EU depending on project configuration. See supabase.com/privacy.
- Stripe: Handles all payment processing. Your payment details go directly to Stripe and are never stored by us. See stripe.com/privacy.
- Vercel: Hosts the application. See vercel.com/legal/privacy-policy.
5. Data Retention
Your data is retained as long as your account is active. If you cancel your subscription, your account and library data remain accessible until you request deletion. To delete your account and all associated data, email books@ceal.dev.
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing books@ceal.dev. We will respond within 30 days.
7. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated by email. Continued use of the service after changes constitutes acceptance of the updated policy.