Privacy Policy

1. Who We Are

PhotoBook ("we", "us", "our") is an online service that helps book sellers photograph, catalogue, and list books on third-party marketplaces including eBay, AbeBooks, and Etsy. We are committed to protecting your personal information and being transparent about how we use it.

If you have questions about this policy, contact us at contact@example.com.

2. Information We Collect

Account Information

When you create an account we collect your username and a hashed (non-reversible) version of your password. We do not store your password in plain text.

Book and Inventory Data

We store the bibliographic details you enter or that are extracted automatically from your photos: title, author, publisher, year, ISBN, edition, condition, asking price, postage, storage location, and notes. This data is yours and is stored solely to provide the service.

Photos

Photos you upload are stored on our servers and used to display your inventory and to list items on connected marketplaces. When AI extraction is used, photos are sent to Anthropic's API (see Section 5) and then deleted from their servers in accordance with Anthropic's data policy. We do not share your photos with any other third parties except the marketplace you choose to list on.

Marketplace Credentials

If you connect eBay, Etsy, or AbeBooks, we store OAuth tokens or API keys securely in our database so we can act on your behalf. We do not share these credentials with any party other than the respective marketplace API.

Usage Data

We may log standard server access logs (IP address, browser type, pages visited, timestamps) for security and performance purposes. These logs are not sold or shared and are retained for a maximum of 90 days.

3. How We Use Your Information

• To provide, operate, and improve the PhotoBook service
• To create and manage listings on connected marketplaces on your instruction
• To use AI (Anthropic Claude) to extract bibliographic details from your book photos
• To authenticate your account and keep it secure
• To respond to support enquiries
• To send service-related notices (e.g. account changes, policy updates) — we do not send marketing emails without your consent

We do not sell your personal data. We do not use your data for advertising.

4. Legal Basis for Processing (GDPR)

Where applicable, we rely on the following legal bases:

• Contract — processing necessary to deliver the service you signed up for
• Legitimate interests — security logging, fraud prevention, service improvement
• Consent — where we ask for it (e.g. optional communications)

5. Third-Party Services

We integrate with the following third parties. Their own privacy policies govern how they handle data we share with them:

6. Data Retention

We retain your account and inventory data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it by law (e.g. for tax records).

Photos are deleted when the associated book record is deleted.

7. Data Security

We take reasonable technical and organisational measures to protect your data, including:

• Passwords stored as bcrypt hashes (never in plain text)
• Marketplace tokens stored in a private database not exposed publicly
• HTTPS enforced for all connections
• Access restricted to authorised personnel only

No method of transmission over the internet is 100% secure. We will notify affected users promptly in the event of a data breach where required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate data (most data can be edited directly in your account)
• Erasure — request deletion of your account and associated data
• Portability — receive your data in a machine-readable format
• Objection — object to certain types of processing

To exercise any of these rights, contact us at contact@example.com. We will respond within 30 days.

9. Cookies

We use a single session cookie to keep you logged in. This cookie is strictly necessary for the service to function and does not track you across other websites. We do not use advertising or analytics cookies.

10. Children's Privacy

PhotoBook is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email or by displaying a notice in the app. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For any privacy-related questions or requests:

PhotoBook
Email: contact@example.com