Privacy Policy
Effective date: Pending — review by counsel before publication
Draft — this document must be reviewed by qualified legal counsel before it is presented to users as a binding privacy policy. The sections below are starting-point summaries of how the platform currently behaves; the final policy must reflect applicable law in every jurisdiction where ConsignWrite operates (currently the United States only).
What we collect
- Account information — name, email address, role (author or bookseller), profile fields (bio, hometown, store name, location, genre tags), and avatar/logo image.
- Catalog and inventory data — books, ISBNs, retail prices, cover images, inventory counts, sales records, settlement statements, comments between participants on consignment records.
- Payment information — handled exclusively by Stripe (subscriptions and Connect payouts). We store Stripe customer / subscription / account identifiers, not raw card numbers, bank account numbers, or tax IDs.
- Technical data — session cookies for authentication, basic logs of API and webhook events for debugging and security.
How we use it
We use account and catalog data to operate ConsignWrite — connecting authors with booksellers, tracking sales, generating settlement statements, and processing payouts. We share information with Stripe (payments), Supabase (database hosting), Resend (transactional email), and Vercel (application hosting) only to the extent necessary to provide the service.
What we share
Authors and booksellers see each other's public profile information when they have an active consignment relationship or when one party has opted into discovery. Sales and settlement data is visible only to the two parties to that record. We do not sell personal data to third parties.
Your choices
- Toggle discoverability and stocking-request acceptance from your profile settings.
- Request account deletion by contacting support. We will preserve financial and settlement records as required for tax and audit purposes.
Contact
Questions about this policy: contact support at the email address listed in the app.
Counsel review required. This stub does not constitute a privacy policy. Verify GDPR / CCPA / state-specific disclosures, data-broker registration requirements, retention periods, breach notification obligations, and minor-user provisions before publishing.