Skip to main content

Privacy Policy

Last updated: August 10, 2026

1. Information We Collect

When you create an account or use BookClub, we may collect:

  • Account information: email address, display name, and password (hashed)
  • Profile information: bio, trading style, and website (optional, provided by you)
  • Usage data: reading progress, bookmarks, chapter completions, and reading streaks
  • Community content: chat messages, questions, and reactions you post
  • Payment information: processed securely by Stripe; we do not store card numbers
  • Purchase and gift records: Stripe transaction identifiers, entitlement history, gift delivery addresses, and redemption status
  • Communications: email delivery, bounce, complaint, and unsubscribe records
  • Technical data: IP address, browser type, and device information collected automatically
  • Optional analytics: page, referral, campaign, experiment, and Readiness Score response data collected only after you accept optional cookies

2. How We Use Your Information

  • Provide and maintain the BookClub service
  • Process membership payments via Stripe
  • Track your reading progress and display it to you
  • Send transactional emails (account confirmation, password reset, new chapter notifications)
  • Display your public profile to other members (display name, avatar, bio)
  • Moderate community content for safety
  • Improve the service through consented analytics and aggregate reporting
  • Prevent fraud, investigate abuse, reconcile payments, refunds, and disputes, and protect account security

3. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS) with row-level security policies. Authentication is handled by Supabase Auth with encrypted password storage. All connections use HTTPS/TLS encryption in transit.

Payment processing is handled by Stripe. We store limited Stripe customer and transaction identifiers for purchase fulfillment, refunds, disputes, and reconciliation, but never have access to your full card details.

If you choose to save chapters for offline reading, those watermarked chapters and queued reading progress are stored in browser storage under your account. BookClub clears this local paid and personal data when the browser signs out or changes accounts.

4. Cookies

BookClub uses cookies for:

  • Authentication: Session cookies to keep you logged in (essential)
  • Preferences: Reader theme and font size settings (functional)
  • Optional analytics: A pseudonymous first-party visitor identifier, referral attribution, pricing experiment assignment, and a short-lived signup-intent marker for Readiness Score funnel attribution that can link assessment responses to signup and paid status only after you accept optional cookies

We do not use third-party advertising cookies. Declining optional cookies prevents new optional analytics identifiers and removes existing optional visitor, referral, experiment, and readiness attribution identifiers from your browser.

5. Third-Party Services

We share data with the following services only as needed to operate BookClub:

  • Supabase: Database hosting and authentication
  • Stripe: Payment processing
  • Vercel: Application hosting
  • Resend: Transactional email delivery

We do not sell your personal data to any third party.

6. Your Rights

You have the right to:

  • Access: View your personal data through your account page
  • Export: Download a portable, paginated copy of locally held account data from your account page
  • Correct: Update your profile information at any time
  • Delete: Request account erasure from the account settings page after recent reauthentication
  • Object: Contact us to opt out of non-essential data processing

Account deletion is irreversible. We first verify and cancel any active Stripe billing relationship, then erase or anonymize account-linked product data. A minimal one-way deletion tombstone is retained without your profile, email address, or display name. Separate transaction and delivery records, which can include purchaser or recipient email addresses, may be retained only where needed for fraud prevention, chargebacks, accounting, delivery support, or legal obligations.

The self-service JSON export excludes authentication and notification credentials, other members' content, uploaded file bytes, and live copies of records hosted by Stripe or Resend. Contact support for an authenticated assisted request when those provider or file boundaries apply.

7. Data Retention

We retain product data while your account is active. After a verified deletion request, active product data is erased or anonymized as the deletion workflow completes. Stripe, email-delivery, security, and minimized transaction records may be retained for the period reasonably necessary to resolve disputes and satisfy applicable accounting, fraud-prevention, and legal requirements. De-identified aggregate statistics may be retained.

8. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or an in-app notification. Continued use of BookClub after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions or requests, contact us at support@kjbook.club.