Privacy Policy | Gordon Lake Tech Book App

Controller and Contact

This Privacy Policy describes how the operator of the Gordon Lake Tech Book App ("we", "us") collects, uses, and protects personal data when you use the Service. If you have questions or want to exercise a right described below, contact us through the Support page.

Data We Collect

Account data: your name and email address when you register.
Project content: the lists, rows, attachments, messages, and media you and your project members create or upload.
Usage logs: records of actions (such as uploads and notifications) kept for billing, support, and abuse prevention.

How We Use Your Data and the Lawful Basis

To create and provide your projects and lists — performance of a contract.
To process subscription payments — performance of a contract.
To convert photos you upload into structured lists using an AI service — your consent and performance of a contract.
To send project invitations and notifications — performance of a contract.
To detect and prevent abuse and protect security — our legitimate interests.

AI Photo-to-List Processing

When you choose to convert a photo into a list, the image is sent to a third-party AI service that produces structured list data and returns it to your project. Please do not upload images containing personal data of other people without permission.

Payment Processing (Stripe)

Subscription payments are processed by Stripe. We do not collect or store your full card details — card data is handled directly by Stripe in accordance with its own privacy policy. We receive only the transaction status and identifiers needed to manage your subscription.

Data Retention

When you delete a project, its content is retained for 30 days so you can recover it if the deletion was a mistake, after which it is permanently purged. We retain account data while your account is active and limited usage logs as needed for billing and security.

Your Rights (GDPR)

Depending on where you live, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate data.
Erase your data, subject to the retention periods above.
Port your data to another service.
Object to certain processing.
Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us through the Support page. We will respond within a reasonable time and may verify your identity before acting.

International Data Transfers

Your data may be processed and stored in countries other than your own that may have different data protection laws. By using the Service you consent to such transfers in accordance with this Policy.

Cookies and Local Storage

We use minimal browser storage for authentication and to remember your preferences. We do not use third-party advertising cookies.

Children's Data

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided data, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy. The "Last updated" date at the top of this page reflects the most recent change. Continued use of the Service after a change constitutes acceptance of the updated Policy.