Back to Shelfy

Privacy Policy

Last updated: January 2025

1. Introduction

Welcome to Shelfy. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

When you create an account and use our Service, we collect:

  • Account information: name, email address, password
  • Profile information: avatar, bio, preferences
  • Content you create: bookmarks, collections, tags, notes, uploaded files
  • Team information: team name, member invitations
  • Payment information: processed securely through Stripe (we do not store full credit card details)

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

  • Usage data: features used, actions taken, time spent
  • Device information: browser type, operating system, device identifiers
  • Log data: IP address, access times, pages viewed
  • Cookies and similar technologies: for authentication and preferences

2.3 Information from Third Parties

If you sign in using third-party authentication (e.g., Google), we receive:

  • Basic profile information (name, email, profile picture)
  • Authentication token to verify your identity

3. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process your bookmarks and content with AI features
  • Authenticate your account and maintain security
  • Send you service-related notifications and updates
  • Process payments and manage subscriptions
  • Improve and optimize the Service
  • Provide customer support
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

  • Cloud hosting providers (for data storage and processing)
  • Payment processors (Stripe for subscription management)
  • Analytics services (to understand usage patterns)
  • AI service providers (for content processing features)
  • Email service providers (for transactional emails)
  • Error tracking services (Sentry for bug detection)

4.2 Team Members

If you're part of a team, your content and activity may be visible to other team members according to the team's collaboration settings.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

5. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (HTTPS/TLS)
  • Encrypted data storage
  • Secure authentication with httpOnly cookies
  • Regular security audits and updates
  • Access controls and monitoring

Your data is stored on secure servers located in the United States. While we strive to protect your information, no method of transmission over the Internet is 100% secure.

6. Cookies and Tracking

We use cookies and similar technologies for:

  • Authentication: to keep you logged in securely
  • Preferences: to remember your settings
  • Analytics: to understand how you use the Service
  • Security: to protect against fraud and abuse

You can control cookies through your browser settings, but some features may not work properly without them.

7. Your Rights and Choices

You have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Delete your account and data
  • Export your data
  • Opt out of marketing communications
  • Withdraw consent for data processing

To exercise these rights, please contact us through your account settings or our support channels.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account:

  • Your personal data and content are permanently deleted within 30 days
  • Some data may be retained in backups for up to 90 days
  • We may retain certain data longer if required by law

9. AI and Content Processing

Our Service uses AI to process and enhance your content:

  • Content is analyzed to provide features like auto-categorization and smart search
  • AI processing happens securely within our infrastructure or trusted service providers
  • Your content is not used to train public AI models
  • You can opt out of certain AI features in your settings

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top reflects the most recent changes.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us through our support channels or email us at your designated privacy contact email.