Privacy Policy

We use the information we collect to:

• Provide the Service: Store, organize, and sync your bookmarks across devices
• AI Features: Generate summaries, auto-categorize, and provide personalized insights
• Improve the Service: Analyze usage patterns to enhance features and fix issues
• Process Payments: Manage subscriptions and billing through Lemon Squeezy
• Communicate: Send service updates, security alerts, and support responses
• Personalization: Customize your experience based on your preferences and usage
• Security: Detect and prevent fraud, abuse, and unauthorized access
• Legal Compliance: Comply with legal obligations and enforce our Terms

3.1 How AI Works: Our AI features analyze your bookmark content (URLs, titles, descriptions) to provide summaries, automatic categorization, and insights. This processing happens on our secure servers.

3.2 AI Training: We do NOT use your personal bookmarks to train our AI models. Your data remains private and is only used to provide services directly to you.

3.3 Third-Party AI: We may use third-party AI services (such as OpenAI) to power certain features. When used, only the minimum necessary data is shared, and these providers are bound by strict data processing agreements.

3.4 Opt-Out: You can disable AI features in your account settings if you prefer not to have your content processed by AI.

We do NOT sell your personal information. We may share information with:

• Lemon Squeezy: Our payment processor and Merchant of Record, who processes payments, handles taxes, and manages billing on our behalf
• Service Providers: Cloud hosting (for data storage), analytics tools, and email services that help us operate
• AI Providers: Third-party AI services for specific features, with data minimization practices
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (you would be notified)

5.1 Essential Cookies: Required for the Service to function, including authentication and session management. These cannot be disabled.

5.2 Analytics Cookies: Help us understand how users interact with our Service to improve features. You can opt out via your browser settings.

5.3 Preference Cookies: Remember your settings and preferences for a better experience.

5.4 Third-Party Cookies: We may use services like Google Analytics. These providers have their own privacy policies.

5.5 Managing Cookies: You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted at rest (AES-256) and in transit (TLS 1.3)
• Secure Infrastructure: Our servers are hosted on secure, SOC 2 compliant infrastructure
• Access Controls: Strict internal access controls and authentication requirements
• Regular Audits: Periodic security assessments and vulnerability testing
• Password Security: Passwords are hashed using bcrypt and never stored in plain text

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Export: Download your data in a portable format
• Restriction: Request limitation of how we process your data
• Objection: Object to certain types of processing
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with all service providers
• Compliance with applicable data transfer regulations

9.1 Active Accounts: We retain your data for as long as your account is active and as needed to provide the Service.

9.2 Account Deletion: When you delete your account, your personal data and bookmarks are permanently deleted within 30 days.

9.3 Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes (e.g., transaction records for tax purposes).

9.4 Anonymized Data: Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics.

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on: contract performance, legitimate interests, consent, or legal obligations
• Data Protection Officer: Contact our DPO at [email protected]
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell your data)
• Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise your CCPA rights, contact us at [email protected] or call [Phone Number].

Bookmark AI Hub is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete it. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page with an updated "Last updated" date
• Sending an email notification to your registered email address
• Displaying a notice within the Service

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.