Back to Home

Privacy Policy

Last updated: December 2024

Your Privacy Matters

1. Information We Collect

Account Information

When you create an account through OAuth (Google or GitHub), we collect:

  • Email address
  • Profile name and avatar (if provided by OAuth provider)
  • OAuth provider ID for authentication

Usage Information

We automatically collect information about how you use our service:

  • Download requests and book URLs processed
  • Rate limiting and usage metrics
  • Security events and access logs
  • Browser type, IP address, and device information

Payment Information

Payment processing is handled securely by Stripe. We do not store your credit card information. Stripe may share transaction details and subscription status with us.

2. How We Use Your Information

We use the collected information for the following purposes:

  • Service Provision: To provide PDF download and preview services
  • Account Management: To manage your account, authentication, and subscription status
  • Rate Limiting: To enforce usage limits and prevent abuse
  • Security: To detect and prevent fraudulent or malicious activity
  • Communication: To send important service updates and subscription notifications
  • Compliance: To comply with legal obligations and enforce our Terms of Service
  • Service Improvement: To analyze usage patterns and improve our service

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in these limited circumstances:

  • Service Providers: With trusted third-party services (OAuth providers, Stripe, MongoDB Atlas) necessary for service operation
  • Legal Requirements: When required by law, court order, or to protect our rights and safety
  • Security: To investigate security incidents or prevent harm to our service or users
  • Business Transfer: In connection with a merger, acquisition, or sale of assets (with user notification)

4. Data Security and Storage

Security Measures

We implement industry-standard security measures including:

  • Encrypted data transmission (HTTPS)
  • Secure database storage with MongoDB Atlas
  • OAuth-based authentication (no password storage)
  • Rate limiting and abuse prevention systems
  • Regular security monitoring and logging

Data Retention

We retain your information as follows:

  • Account data: Until account deletion or 1 year of inactivity
  • Generated PDFs: 30 days for paid users, immediately deleted for free users
  • Usage logs: 90 days for security and rate limiting purposes
  • Payment records: As required by Stripe and tax regulations

5. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Portability: Request export of your data in a portable format
  • Withdrawal: Withdraw consent for data processing (may limit service availability)
  • Subscription Management: Cancel or modify your subscription at any time

To exercise these rights, please contact us through your account dashboard or email us directly.

6. Cookies and Tracking

We use cookies and similar technologies for:

  • Session management and authentication
  • Security and fraud prevention
  • Rate limiting enforcement
  • Service functionality and performance

Most browsers allow you to control cookies through their settings. However, disabling cookies may affect service functionality.

7. Third-Party Services

Our service integrates with third-party providers:

  • Google OAuth: For authentication (subject to Google's Privacy Policy)
  • GitHub OAuth: For authentication (subject to GitHub's Privacy Policy)
  • Stripe: For payment processing (subject to Stripe's Privacy Policy)
  • MongoDB Atlas: For data storage (subject to MongoDB's Privacy Policy)
  • Calameo: For book content access (subject to Calameo's terms)

We recommend reviewing the privacy policies of these third-party services.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

  • Using service providers with adequate data protection measures
  • Implementing contractual data protection clauses
  • Ensuring compliance with applicable data protection laws

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Sending email notifications for significant changes
  • Providing in-app notifications when you next use our service

Your continued use of our service after policy changes constitutes acceptance of the updated policy.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Privacy Contact

Email: privacy@calameo-downloader.com

Response Time: Within 72 hours

For data protection inquiries specifically, please include "Privacy Request" in your subject line and provide sufficient detail about your request.

This Privacy Policy is effective as of December 2024 and governs your use of Calameo PDF Downloader.