1. Introduction
Underline Books ("we", "our", "us") is a personal quote library service. This policy explains what data we collect, how we use it, and your rights regarding that data.
2. Data We Collect
- Account data: Your email address, used to authenticate you and send transactional emails (e.g. password resets).
- Reading library data: Book titles, authors, and reading shelf data you import from Goodreads or StoryGraph CSV exports, plus the quotes you save and the collections you create.
- Goodreads connection: If you connect Goodreads, we store your public Goodreads user ID. Roughly once an hour we read your public "read" shelf from Goodreads to import newly finished books. We never ask for your Goodreads password and cannot see private shelves or profiles. Disconnecting in Settings deletes the stored ID and stops the hourly check; books already imported stay in your library.
- Usage data: Standard server logs (IP address, browser type, pages visited) retained for up to 30 days for security and debugging purposes.
- Payment data: Handled entirely by Stripe. We do not store card numbers or payment details — only a Stripe customer ID and subscription status.
3. How We Use Your Data
- To provide the Underline Books service (storing and displaying your quotes, and keeping your library in sync with your public Goodreads shelf)
- To process payments and manage subscriptions via Stripe
- To send transactional emails (account confirmation, password reset)
- To diagnose and fix technical issues
We do not sell your data to third parties, use it for advertising, or share it with anyone except as described below.
4. Third-Party Services
- Supabase: Stores your account and library data in a managed PostgreSQL database. Data may be stored in the US or EU depending on project configuration. See supabase.com/privacy.
- Stripe: Handles all payment processing. Your payment details go directly to Stripe and are never stored by us. See stripe.com/privacy.
- Vercel: Hosts the application. See vercel.com/legal/privacy-policy.
- Goodreads: Quote data and (if connected) your public shelf are fetched from goodreads.com. We send Goodreads only the public user ID or book IDs needed to fetch that data — never your email or account details.
5. Data Retention
Your data is retained as long as your account is active. If you cancel your subscription, your account and library data remain accessible until you request deletion. To delete your account and all associated data, email books@ceal.dev.
6. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing books@ceal.dev. We will respond within 30 days.
7. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated by email. Continued use of the service after changes constitutes acceptance of the updated policy.