Privacy Policy

Controller: VaultReader — Sole Trader (UK). Address: Flat A, 2A Russell Street, Gloucester, GL1 1NE, United Kingdom.

1. Data We Process

• Account data: name, email, password hash.
• Usage data: device info, IP address, pages viewed, session metadata.
• Billing data: transaction identifiers from payment processors (no full card data stored).
• Publisher content metadata (titles, analytics).

2. How We Use Data

• Provide and secure the Service (authentication, fraud prevention, license enforcement).
• Improve product and support customers.
• Comply with legal obligations.

3. Legal Bases (GDPR)

• Contract performance (account provisioning, content access).
• Legitimate interests (security, analytics, product improvement).
• Consent (cookies/marketing where required).
• Legal obligation (tax, accounting).

4. Cookies and Tracking

We use essential cookies and, with your consent, analytics cookies. See our Cookie Policy. You can manage preferences via the cookie banner.

5. Data Sharing

We share personal data with service providers acting on our behalf (e.g., hosting, analytics, payments) under contracts that protect your information. Payments are processed by Stripe (UK/EU as applicable). We do not store full payment card data.

6. International Transfers

Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Data Retention

We retain personal data only as long as necessary for the purposes above, then delete or anonymize it.

8. Your Rights

• Access, rectification, deletion, and portability.
• Object or restrict processing.
• Withdraw consent at any time (for consent-based processing).
• Lodge a complaint with a supervisory authority.

9. CCPA Notice (California)

We do not sell or share personal information for cross-context behavioral advertising. You have rights to know, delete, correct, and opt-out where applicable.

10. Security

We use encryption, access controls, and monitoring. No method is 100% secure.

11. Children

Our Service is not directed to children under 13 (or the age defined by local law). We do not knowingly collect such data.

12. Data Requests

If you wish to exercise your data protection rights (access, deletion, correction, portability, or objection), please email privacy@vaultreader.app with the subject line “Data Request” and include:

• Your account email address
• The specific right you wish to exercise
• Any relevant context to help us locate your data

We will verify your identity and respond in accordance with applicable law.

13. Contact

Data protection inquiries: privacy@vaultreader.app. Legal inquiries: legal@vaultreader.app.

14. Changes

We may update this policy and will post the revised version with a new date.

15. Content Complaints & Removal Requests

If you believe that content hosted on VaultReader infringes your rights (including intellectual property, privacy, or other legal rights), you may submit a complaint request for review and potential removal.

To submit a complaint, email complaint@vaultreader.com with the following information:

• Your full name and contact information (email address, phone number if applicable)
• Description of the content — provide the URL or title of the ebook/content you are reporting
• Reason for complaint — explain why the content should be removed (e.g., copyright infringement, privacy violation, illegal content, defamatory material)
• Proof of ownership or authority — if reporting copyright infringement, include proof that you own the rights or are authorized to act on behalf of the rights holder (e.g., copyright registration, DMCA notice, power of attorney)
• Declaration — a statement that you have a good faith belief that the use of the content is not authorized, and that the information in your complaint is accurate

We handle all complaints confidentially and in accordance with applicable law, including the EU Digital Services Act (DSA) and DMCA (where applicable).