Shopublish is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our platform.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and password (stored securely using industry-standard hashing). If you sign in with Google, we receive your name and email from Google's OAuth service.
Content You Upload
We store the files you upload (PDFs, EPUBs) and associated metadata such as book titles, cover images, and descriptions. These files are stored securely in our managed object storage.
Usage Data
We automatically collect:
- Page view counts for your published books
- Activity logs (login events, content updates, settings changes)
- Basic analytics such as geographic region of viewers
- Browser type and device information for compatibility purposes
Payment Information
Payment processing is handled entirely by Stripe. We do not store your credit card number, CVC, or full card details on our servers. Stripe provides us with a subscription status and billing email only.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the Shopublish platform
- Process your subscription payments via Stripe
- Display analytics and activity logs on your dashboard
- Send essential account notifications (password resets, billing alerts)
- Improve the platform and fix bugs
- Enforce our Terms of Service
We do not sell your personal information to third parties. We do not use your data for advertising purposes.
3. Data Storage & Security
Your data is processed and stored using secure, globally distributed infrastructure:
| Data Type | Storage | Encryption |
|---|---|---|
| Account data | Managed database | Encrypted at rest |
| Uploaded files | Managed object storage | Encrypted at rest |
| Sessions | Secure session service | JWT-signed tokens |
| Payments | Stripe (PCI DSS Level 1) | End-to-end encrypted |
4. Data Sharing
We share your data only with:
- Infrastructure providers — secure hosting and storage services under data processing agreements
- Stripe — payment processing (PCI DSS compliant)
We may disclose information if required by law or to protect the rights and safety of our users.
5. Your Rights
You have the right to:
- Access your personal data through your dashboard
- Update your account information at any time
- Delete your account and all associated data by contacting us
- Export your data (available on Business plans)
- Withdraw consent for optional data processing
6. Cookies
Shopublish uses minimal cookies:
- Authentication token — a secure JWT stored in a cookie to keep you logged in
- Theme preference — stored in localStorage to remember your light/dark mode choice
We do not use third-party tracking cookies or advertising cookies.
7. Children's Privacy
Shopublish is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us for removal.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the platform. Continued use of Shopublish after changes constitutes acceptance.
9. Contact
For privacy-related inquiries, please reach out at [email protected] or visit our Contact page.