Privacy Policy – CentralRead

Last updated: (v1.0)

1. Introduction

CentralRead ("we", "our", "us") is committed to protecting the privacy of your personal information. This policy explains how we collect, use, store, and protect your data when you use our service, which is available internationally.

We comply with the main data protection regulations, including:

  • GDPR (European Union)
  • UK GDPR (United Kingdom)
  • CCPA (California, United States)
  • COPPA (United States, children’s privacy)
  • and similar local laws (e.g., LGPD Brazil, PIPEDA Canada)

2. Information We Collect

2.1 Account Information

  • Email address (for authentication)
  • Username
  • Password (hashed)

2.2 User Content

  • Imported Kindle files
  • Highlights and annotations
  • Manual notes
  • Tags and metadata
  • Reading preferences

2.3 Technical Data

  • IP address
  • Browser and device type
  • Session data and cookies
  • Service usage logs

3. How We Use Your Information

3.1 Service Features

  • Sync your highlights across devices
  • Organize and search your content
  • Manage daily review and your reading/review statistics
  • Provide exports to Notion, Markdown, and other tools
  • Provide personalized recommendations

3.2 Communications

  • Send service updates
  • Customer support
  • Important security notifications

3.3 Service Improvement

  • Analyze usage to improve features
  • Diagnose technical issues
  • Develop new features

4. Information Sharing

4.1 Principles

We never sell your personal data.

4.2 Limited Sharing

  • Service providers: secure hosting (e.g., Supabase), authentication (Google OAuth), payments (Stripe)
  • Legal obligations: if required by law
  • Protection of rights: to protect our legitimate rights
  • Explicit consent: with your prior authorization

5. Data Security

5.1 Technical Measures

  • TLS encryption for all transmissions
  • Encryption at rest for sensitive data
  • Secure authentication
  • Regular, secure backups

5.2 Organizational Measures

  • Restricted access for authorized staff only
  • Regular security training
  • Periodic security audits

6. Data Retention

  • Active account: retained while your account exists
  • Account deletion: deleted within 30 days after your request (see §7.4)
  • Backups: deleted within 90 days maximum
  • Technical logs: retained for up to 12 months

7. Your Rights

7.1 GDPR / UK GDPR Rights

  • Access: request a copy of your data
  • Rectification: correct inaccurate information
  • Erasure: request deletion ("right to be forgotten")
  • Portability: export your data in a standard format
  • Objection: object to certain processing
  • Restriction: restrict processing

7.2 CCPA Rights (California)

  • Disclosure of information collected
  • Deletion of your data
  • Opt-out of the sale of data (we do not sell your data)

7.3 Exercising Your Rights

Contact us at feskpro@gmail.com.

7.4 Account Deletion (v1 flow)

You can delete your account by emailing feskpro@gmail.com with the subject “CentralRead account deletion”. We may ask you to confirm the account email to verify your identity.

  • Processing time: within 30 days after verification
  • Effect: your account and content (Kindle files, highlights, notes, tags) will be deleted from active systems
  • Backups: copies may persist in backups for up to 90 days
  • Legal obligations: minimal data may be retained if required by law (e.g., billing)

8. Cookies and Similar Technologies

8.1 Essential Cookies

  • Authentication and session
  • User preferences
  • Security

8.2 Analytics Cookies (Google Analytics)

  • _ga: distinguishes unique users (expires after 2 years)
  • _gid: distinguishes unique users (expires after 24 hours)
  • _gat: throttles request rate (expires after 1 minute)

You can manage your preferences via the cookie banner or in your account settings. Analytics cookies are only set with your consent.

9. Third-Party Services

  • Authentication: Google OAuth
  • Payments: Stripe (no card data is stored on our servers)
  • Analytics: Google Analytics (data anonymized, retained for up to 26 months)

10. International Data Transfers

Your data may be processed outside the European Economic Area (EEA) and the United Kingdom. Where this occurs, we use the European Commission’s Standard Contractual Clauses (SCCs) or equivalent lawful transfer mechanisms to ensure an adequate level of protection.

11. Children

Our service is not intended for individuals under 16 in the EU/UK, or under 13 in the United States (COPPA). We do not knowingly collect data from children. If you believe a minor has provided us with data, please contact us so we can delete it.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be notified by email or via the app.

13. Contact

  • Email: feskpro@gmail.com
  • CentralRead is operated from France.
  • No postal address is published for privacy reasons, but we will respond to any lawful request via email.

14. Dispute Resolution

  • Data protection authority: you may contact the authority in your country (e.g., CNIL in France, ICO in the United Kingdom)
  • Mediation (France): AME Conso (Association des Médiateurs Européens) – www.mediationconso-ame.com
  • Jurisdiction: Judicial Court of Montpellier, France