Privacy Policy

Data we collect

• Account data: your email address, an optional display name and bio, and a hashed password.
• Reading data: the books you add, reading positions, reading segments, statistics, and challenges.
• Uploaded files: PDF and EPUB files you choose to add to your library.

How it's stored

Your data is stored in a database hosted with a cloud infrastructure provider. Sessions are managed with signed tokens that expire automatically.

Third-party services

WeaveReads relies on a small number of third-party services:

• Cloudinary — image CDN for covers and screenshots.
• Sentry — error monitoring. Authorization headers, cookies, and token / password / secret fields are scrubbed before any error report is sent.
• Dropbox — optional cloud file storage that you connect yourself via OAuth. Used only if you enable it.
• Resend — sends transactional email, such as account verification.
• Anthropic (Claude) — powers AI book recommendations. When you use this opt-in feature, book metadata is sent to generate recommendations.
• Paddle — merchant of record for paid plans: Paddle sells the subscription, processes the payment, and handles sales tax and VAT. Your card details are handled directly by Paddle and are never stored by WeaveReads.

What we don't do

• We don't show ads.
• We don't sell your data.
• We don't run product analytics or third-party trackers.

Your rights

You can access your data and delete your account at any time from Settings. Deletion is permanent: your account and its reading data are removed from our live database immediately. Any Plus subscription is cancelled first; the rest of the current billing period is not refunded. Uploaded PDF and EPUB files are then removed from our file storage; if a removal fails, we clean it up manually. For any request or question, use the contact below.

What deletion keeps

• A keyed hash of your email address, kept for 12 months solely to prevent repeat claims of the free AI allowance, then removed at the next daily cleanup. It cannot be turned back into your address.
• Your Calibre libraries and the files in your Dropbox WeaveReads app folder are not deleted: they live on your own systems. We also ask Dropbox to revoke WeaveReads' access to your account.
• Backups: deleted data, including the email hash, can remain in our daily database backups for up to 14 days before they rotate out.

Contact

Reach us at support@weavereads.xyz.