Privacy Policy
1. Introduction
This Privacy Policy explains how ARCReaderHub ("Platform", "we", "our", or "us"), an independent Software-as-a-Service (SaaS) platform operated by its individual creator, collects, uses, stores, and protects your personal information.
By accessing or using ARCReaderHub, you acknowledge the data handling practices described in this Policy. If you do not agree with this Policy, please do not access or use the Platform.
For all privacy questions, data requests, or concerns, contact us at: support@arcreaderhub.com.
2. Information We Collect
We collect information directly from you, automatically through your use of the Platform, and through our authorized third-party service providers:
Information You Provide Directly
- Account Information: Display name, email address, password hash, and avatar image.
- Profile Information: Bio, country, preferred language, role preference (reader or author), and optional Kindle delivery email address (
@kindle.comor personal). - Author Content: Book titles, blurbs, publication dates, external retailer links (Amazon, Goodreads), cover images (JPEG/PNG), and manuscript files (EPUB/PDF).
- Reviewer Activity: Reviews, star ratings, recommendation votes, reading status, bookmarks, and private reader notes.
- Reader Applications: Responses to author-created screening questionnaires submitted when requesting access to private ARC campaigns.
- Feedback Submissions: Bug reports and feedback titles/descriptions submitted via our feedback tool. Feedback submissions are treated as private correspondence with our support team by default.
Automatically Collected Information
- Reading Analytics: Current page reached, percentage completed, and active reading duration (calculated via in-browser heartbeat timer).
- Technical & Network Data: IP address, browser type, operating system, device characteristics, language preferences, referring URLs, and session timestamps.
- Security & Watermarking Telemetry: When a manuscript is downloaded or sent to Kindle, we record the recipient user ID, book ID, timestamp, client IP address, and browser user-agent in our anti-piracy audit logs.
3. How We Use Information & Legal Bases
We process your personal information under the following legal bases:
- Account & Platform Operation: Authenticating users, managing book campaigns, providing in-browser reading, and managing account profiles (Contractual Necessity).
- Manuscript Watermarking & Anti-Piracy: Embedding reviewer names and emails into ARC files and recording delivery IP audit logs (Legitimate Interests in deterring book leaks).
- Send-to-Kindle Delivery: Dispatching review copies to your Kindle or personal e-reader device via Resend (Contractual Necessity / Consent).
- Author Analytics: Displaying reading progress, completion percentages, and review submissions to campaign authors (Contractual Necessity / Legitimate Interests).
- Payments & Invoicing: Facilitating Author Pro subscription upgrades and coupon redemption via Lemon Squeezy (Contractual Necessity / Legal Obligation).
- Weekly Digest & Communications: Sending our weekly new books digest and essential transactional emails (Legitimate Interests / Consent; opt-out available anytime).
4. Digital Watermarking Transparency
To protect authors from digital piracy, ARCReaderHub dynamically watermarks advance manuscripts distributed through the Platform:
- When you download an EPUB/PDF or send it to Kindle, your display name, email address, and a distribution timestamp are visibly stamped onto pages and encoded in file metadata.
- We log the delivery event alongside your IP address and browser user-agent in an internal security audit log (
watermark_audit_logs). - In the event a watermarked manuscript is leaked to unauthorized third parties, these audit records may be shared with the copyright holder for legal enforcement.
5. Third-Party Service Providers (Sub-processors)
We do not sell, rent, or trade your personal information. We share data only with trusted third-party infrastructure providers subject to appropriate data processing and security agreements:
| Provider | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database hosting, user authentication, and avatar storage | USA / EU |
| Cloudflare Inc. (R2) | Secure cloud object storage for manuscripts and book covers | Global / USA |
| Lemon Squeezy, LLC | Merchant of Record for subscription billing and tax/VAT collection | USA |
| Resend Inc. | Transactional emails and Send-to-Kindle file dispatch | USA |
| Microsoft Corp. (Clarity) | Session behavior, heatmaps, and usability diagnostics (consent-governed) | USA |
| Google LLC (Analytics) | Aggregated platform traffic telemetry (consent-governed) | USA |
6. Cookies and Local Storage
We use cookies and browser LocalStorage keys for service functionality and optional analytics:
- Strictly Necessary Storage (Always Active): Includes authentication session tokens and
arcreaderhub_cookie_consentto remember your privacy choices. - Optional Analytics (Consent-Governed): Includes pseudonymous session identifiers (
arc_visitor_id,_clck,_ga) used to understand site navigation and optimize performance.
You can manage or withdraw your consent for optional analytics at any time through our Cookie Preferences banner.
7. Weekly Digest & Marketing Opt-Out
When you create an account, you may receive our weekly digest highlighting newly added ARC campaigns and platform updates.
How to Opt Out: You can unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any digest email or by toggling off the Weekly Digest in your Account Settings. Essential transactional emails (such as access approvals, security notices, and password resets) cannot be opted out of while maintaining an active account.
8. Data Retention, Account Deletion & Anonymization
- Manuscript Retention: Finished campaign manuscripts are retained for a 90-day grace period, after which files are permanently deleted from Cloudflare R2 storage.
- Account Deletion & Anonymization: You can delete your account at any time via Profile Settings. When initiated, avatar files are permanently erased from storage buckets; your name, email address, password hash, and profile bio are permanently replaced with an irreversible random identifier (
deleted-xxxxxx@arcreaderhub.com, "Deleted User"); and submitted reviews, star ratings, and campaign aggregate metrics are retained in anonymous form to protect the integrity of historical ARC campaign statistics for authors. - Legal Retention: We retain minimal financial and transaction reference records where required to resolve billing disputes or comply with tax obligations.
9. Your Rights
Depending on your jurisdiction (including rights under the EU GDPR and applicable Indian privacy laws), you have the right to:
- Access your personal information.
- Correct inaccurate or incomplete profile information.
- Delete or anonymize your personal account data.
- Object to or restrict certain processing activities, including marketing communications.
- Request an electronic export of your account data.
To exercise any of these rights, contact us at support@arcreaderhub.com. We respond to verified requests within thirty (30) days.
10. Children's Privacy
ARCReaderHub is intended strictly for individuals aged 18 and older. We do not knowingly solicit or collect personal information from minors. If we discover that an individual under 18 has registered an account, we will promptly delete their personal information.
11. Security Measures
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal data against accidental, unlawful, or unauthorized destruction, loss, alteration, access, or disclosure. Cloud manuscripts are stored in private storage buckets, and payment processing is handled exclusively by PCI-DSS-certified providers (Lemon Squeezy). However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
12. Updates to this Privacy Policy
We may update this Privacy Policy periodically. We will post the revised Privacy Policy on this page with an updated "Last Updated" date. We encourage you to review this Policy periodically to stay informed about our data practices.
13. Contact
For privacy-related questions, data requests, or complaints, contact:
Email: support@arcreaderhub.com
Website: https://arcreaderhub.com