Legal
Privacy Policy
What personal data we collect from readers, why we use it, which service providers process it, how long we keep it, and the rights you have over it.
1. Who is responsible for your data
[LEGAL ENTITY NAME], registered in [JURISDICTION], is the controller of the personal data described in this policy.
2. Data we collect
Account data: your email address, sign-in credentials (held by our authentication provider, never by our own servers), display name, and language preference.
Order data: the books you buy, prices paid, order and payment status, receipts, and — for printed books — your delivery name, address, and phone number.
Payment data: card and wallet details are entered on our payment provider’s pages and are never stored by StorySpace. We receive a payment reference and the outcome.
Reading data: your library, reading and listening progress, bookmarks, wishlist, and reviews you write.
Technical data: device and browser information, IP address, and records of when purchased content is downloaded or streamed, which we use to protect publishers’ content and prevent abuse.
3. How we use it
To create and secure your account, process and deliver your orders, give you access to the books you own, sync your reading across devices, and send you receipts and service messages.
To prevent fraud and misuse, to understand how StorySpace is used so we can improve it, and to meet our legal, accounting, and tax obligations.
We share the minimum order details a publisher needs to account for its sales. We do not sell your personal data.
4. Service providers
We share data with processors who operate parts of the service on our behalf, including Supabase (authentication and database), [HOSTING PROVIDER] (application hosting), [STORAGE PROVIDER] (file storage), [PAYMENT PROVIDER] (payments), [SHIPPING PROVIDER] (delivery of printed books), [EMAIL PROVIDER] (email), [ANALYTICS PROVIDER] (product analytics), and [ERROR MONITORING PROVIDER] (error reporting).
Some providers process data outside [JURISDICTION]. Where they do, we rely on [TRANSFER SAFEGUARD].
5. Cookies and analytics
We use cookies and similar storage that are needed to keep you signed in, remember your cart and theme, and keep the service secure. Analytics only run if you agree to them, and you can change your choice at any time.
6. Retention
We keep account and reading data for as long as your account is open and for [RETENTION PERIOD] afterwards. Order, payment, and receipt records are kept for as long as tax and accounting law requires.
7. Your rights
You can access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent where processing relies on it. Some data must be kept to meet legal obligations.
You may also complain to [SUPERVISORY AUTHORITY].
8. Contact
Privacy questions and requests: [PRIVACY CONTACT EMAIL].
See also our Terms of Service.