Privacy Policy

1. What Information Do We Collect?

Personal Information You Provide

We collect personal information that you voluntarily provide when you register, make purchases, or contact us:

• Names and email addresses
• Usernames and passwords
• Payment information (processed securely by Stripe)

Information Automatically Collected

We automatically collect certain technical information:

• Log Data: IP address, browser type, pages viewed, timestamps
• Device Data: Device type, operating system, screen resolution
• Location Data: Approximate location based on IP address

Reading Activity

When you read while signed in, on the website or in our apps, we record:

• Which books you open, where you are in each, and how far you have read
• When you read and for how long, and how many pages you turn
• Your notes, favorites and reviews
• The questions you ask our AI features, and where in the book you asked them

We use this to keep your place across devices, to show your library, and to understand how our books and features are used. When we describe this to others, such as publishers or partners, we share only combined statistics (for example, “readers of this book spend six hours with it on average”) that do not identify you.

2. How Do We Process Your Information?

We process your information to:

• Provide and manage your account and Services
• Process payments and subscriptions
• Send service updates and respond to inquiries
• Improve our Services and user experience
• Prevent fraud and ensure security
• Comply with legal obligations

3. What Legal Bases Do We Rely On?

We process your information based on:

• Consent: You've given us permission to process your information
• Contract: Processing is necessary to provide our Services
• Legitimate Interests: To improve and secure our Services
• Legal Obligations: To comply with applicable laws

4. When Do We Share Your Information?

We may share your information with:

• Service Providers: Stripe (payments), Vercel (hosting), Google Cloud (storage)
• AI Providers: OpenAI, Anthropic, Google Cloud AI (for AI features)
• Authentication: Clerk (user authentication)
• Analytics: Google Analytics (usage analytics)
• Publishers and Partners: combined, de-identified reading statistics only, never your personal information or your individual reading activity

We do NOT sell your personal information to third parties.

5. Do We Use Cookies?

Yes, we use cookies and similar tracking technologies for:

• Authentication and session management
• Remembering your preferences
• Analytics (Google Analytics)
• Security and fraud prevention

You can control cookies through your browser settings. Opt out of Google Analytics: https://tools.google.com/dlpage/gaoptout

6. Do We Offer AI-Based Products?

Yes. EchoLit uses AI to provide:

• Text explanations and summaries
• Translations and analysis
• Reading comprehension assistance
• Personalized book recommendations

We use third-party AI providers (OpenAI, Anthropic, Google Cloud AI). Your input and output are processed according to their privacy policies and our agreement with them.

7. How Do We Handle Social Logins?

If you log in via social media, we receive basic profile information (name, email, profile picture) from that provider.

8. International Transfers

Our servers are located in the United States. By using our Services, you consent to the transfer of your information to the US.

9. How Long Do We Keep Your Information?

We keep your information for as long as you have an account with us, unless required by law to retain it longer.

10. Do We Collect Information From Minors?

No. Our Services are not intended for users under 18. If you're under 18, you need parental consent to use EchoLit.

11. What Are Your Privacy Rights?

Depending on your location, you may have the right to:

• Access your personal information
• Correct inaccuracies
• Request deletion of your data
• Object to processing
• Data portability
• Withdraw consent

To exercise these rights, email us at support@echolit.ai

12. Do-Not-Track Features

We do not currently respond to Do-Not-Track signals as there is no uniform standard.

13. US Residents' Privacy Rights

If you're a resident of California, Colorado, Connecticut, or other states with privacy laws, you have additional rights including:

• Right to know what personal information we collect
• Right to delete your information
• Right to opt-out of sale (we don't sell your data)
• Right to non-discrimination

14. Updates to This Notice

We may update this Privacy Notice from time to time. The updated version will have a new "Last updated" date. We encourage you to review it periodically.

15. Contact Us

16. Review, Update, or Delete Your Data

You can manage your personal information by:

• Logging into your account settings
• Deleting your account at echolit.ai/delete-account, or in the app under Account
• Emailing us at support@echolit.ai

We will respond to your request within 30 days.