Privacy Policy | Instant Book Club

1. Introduction

Instant Book Club ("we," "us," or "the Service") operates at instantbookclub.com. This Privacy Policy explains how we collect, use, and protect your information when you use our AI-powered book club kit generator.

2. Information We Collect

Account Information

When you create an account, we collect your email address and an encrypted password. Authentication is handled by Supabase, our authentication provider.

Usage Data

We track website usage and product analytics through the following tools:

Google Analytics 4 — Website traffic and user behavior analysis
PostHog — Product analytics and feature usage tracking
Plausible Analytics — Privacy-focused, cookieless website analytics

These tools help us understand how people use the Service and improve the user experience.

Kit Generation Data

When you generate a book club kit, we process the book title and author to create your kit content. Generated kits may be cached on our servers to improve performance for future requests of the same book.

Local Storage

Saved kits and usage counts are stored in your browser's local storage. This data stays on your device and is not transmitted to our servers.

Payment Information

We do not directly collect or store payment information. Premium subscriptions are processed by Lemon Squeezy, our payment processor. Please review Lemon Squeezy's Privacy Policy for details on how they handle payment data.

3. How We Use Your Information

To provide and operate the Service
To authenticate your account and manage your subscription
To track usage limits (free tier: 5 kits in month one, then 1 kit/month)
To improve the Service through anonymous, aggregated analytics
To communicate with you about your account or the Service if necessary

4. Third-Party Services

We use the following third-party services:

Supabase — Authentication and user management
Lemon Squeezy — Payment processing for Premium subscriptions
Google Books API — Book search and metadata
Google Analytics 4 — Website usage analytics
PostHog — Product analytics and session replay
Plausible Analytics — Privacy-focused, cookieless website analytics
OpenAI — AI-powered content generation for book club kits

Each third-party service has its own privacy policy governing the data they process.

5. Cookies

We use minimal cookies for essential functionality. Google Analytics may set cookies to track your session. PostHog uses local storage. Plausible Analytics is cookieless by design. Essential cookies may be set by our authentication provider (Supabase) to maintain your login session.

6. Data Retention

Account data is retained for as long as your account is active. Cached book club kits are retained to improve service performance. You may request deletion of your account and associated data at any time by contacting us.

7. Data Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS), secure password hashing through Supabase, and limited access to production systems. However, no method of transmission or storage is 100% secure.

8. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Withdraw consent for data processing (which may limit your ability to use the Service)

To exercise any of these rights, please contact us at the email below.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, please contact us at [email protected].