Privacy Policy

1. Information We Collect

We collect the following types of information when you use Scrivy:

• Account Information: Your name, email address, and password (stored in hashed form) when you create an account.
• Book Content: PDF files and cover images that you upload to the platform.
• Payment Information: Payment details are collected and processed directly by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. We may receive and store limited information from Stripe, such as the last four digits of your card, card brand, and billing email.
• Usage Data: Basic information about how you interact with the Service, such as pages visited and actions taken, collected through server logs.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process your book review orders and facilitate payments through Stripe.
• Send you transactional emails related to your account and orders (e.g., order confirmations, review notifications).
• Respond to your inquiries and provide customer support.
• Improve and personalize your experience on the Service.
• Detect, prevent, and address technical issues, fraud, or security concerns.

3. Payment Processing

All payments on Scrivy are processed through Stripe. When you make a payment, you are redirected to Stripe Checkout to complete the transaction. Stripe collects and processes your payment information in accordance with their own Privacy Policy. We receive confirmation of successful payments but do not handle or store your full payment card details.

4. Data Storage & Security

We take reasonable administrative, technical, and physical measures to protect your information from unauthorized access, loss, misuse, or alteration.

• Passwords are stored using industry-standard hashing.
• Book files (PDFs) and cover images are stored securely using Vercel Blob storage.
• All data is transmitted over HTTPS encrypted connections.

While we strive to protect your personal information, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services to operate Scrivy. Each service has its own privacy policy governing how it handles your data:

• Stripe — Payment processing. Stripe collects and stores your payment information. See the Stripe Privacy Policy.
• Vercel Blob — Secure file storage for uploaded PDFs and cover images. See the Vercel Privacy Policy.
• Resend — Transactional email delivery (emails sent from noreply@scrivy.co). See the Resend Privacy Policy.

We do not sell, rent, or share your personal information with third parties for their marketing or advertising purposes.

6. Cookies

Scrivy uses only essential cookies required for the Service to function. Specifically, we use a session cookie to keep you signed in via NextAuth. We do not use any cookies for tracking, advertising, or analytics purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal obligations or legitimate business interests.
• Data Portability: Request a machine-readable copy of your data.

To exercise any of these rights, please contact us at hello@scrivy.co. We will respond to your request within 30 days.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal, accounting, or regulatory purposes. Uploaded book files and cover images will be removed from our storage upon account deletion or upon your request.

9. Children's Privacy

Scrivy is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected such information, please contact us at hello@scrivy.co.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: