Privacy Policy

1. Introduction

VeldtInk LLC ("Veldt," "we," "us," or "our") operates the veldt.ink website and related services (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Platform. Please read it carefully. If you do not agree with the terms of this Privacy Policy, please do not use the Platform.

We may change this Privacy Policy from time to time. We will notify you of any material changes by posting the revised policy on this page and updating the "Last Updated" date. Your continued use of the Platform after any change constitutes your acceptance of the revised Privacy Policy.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: display name, username, email address, and password (hashed)
• Author profile information: pen name, publisher, website, biography
• Payment information: processed via Stripe. We do not store card numbers; Stripe handles payment data in accordance with PCI-DSS
• Content you upload: book manuscripts, cover images, metadata, and marketing copy
• Reviews, Discussion Board posts, and other user-generated content
• Communications with our support team

2.2 Reading and Behavioral Data

To operate our Proof-of-Read system and calculate review rewards, we automatically collect:

• Reading progress (current page, CFI position, percentage complete)
• Session data (start time, end time, duration, number of sessions)
• Interaction events (highlights, bookmarks, annotations, page turns)
• DNF (Did Not Finish) status and timestamps
• Estimated completion dates and reading speed calculations

2.3 Technical Information

• Device type, browser type, and version
• Operating system
• IP address and approximate geographic location (derived from IP)
• Access times and referring URLs
• Cookies and session data (see §5)

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Process book purchases and rentals
• Operate the Proof-of-Read system and calculate review rewards
• Detect and prevent fraudulent reviews and abuse
• Display your reviews, DNF shelf, and reading activity on your public profile
• Send transactional emails (email verification, purchase confirmations, rental expiry notices, password resets)
• Send marketing and promotional emails (only with your consent; you may opt out at any time)
• Operate Discussion Boards and moderate user-generated content
• Process royalty payments to authors via Stripe Connect
• Enforce our Terms of Service, including geographic sanctions compliance
• Respond to legal requests (subpoenas, court orders, DMCA takedown notices)
• Improve and debug the Platform

4. Reading Data and Proof-of-Read

Reading data is central to how Veldt works. When you purchase a book and read it on the Platform, we track your progress, session activity, and interactions to determine whether you have read enough to submit a verified review and earn rewards.

This data is stored indefinitely on our servers. You may request deletion of your reading data by emailing support@veldt.ink. Please note: requesting deletion of reading data forfeits any pending unreviewed book rewards associated with the deleted data.

Your DNF (Did Not Finish) shelf is always public and visible on your reader profile. You cannot hide or privatize your DNF history. We treat DNF transparency as a reputation signal indicating reading commitment.

5. Cookies and Tracking

We use cookies and similar tracking technologies for:

• Session management (keeping you logged in)
• Analytics (Google Analytics or similar — aggregate, non-personally-identifying data)
• Fraud detection
• Advertising (if and when enabled)

You may disable cookies in your browser. Disabling cookies may impair Platform functionality, including the ability to stay logged in.

6. Third-Party Disclosure

We do not sell your personal information, reading data, or behavioral data to advertisers, data brokers, or third parties.

We may share your information with:

• Stripe — for payment processing. Stripe's privacy policy governs their data handling: stripe.com/privacy
• Resend — for transactional email delivery. Resend's privacy policy: resend.com/privacy
• Vercel — hosting and infrastructure. Vercel's privacy policy: vercel.com/legal/privacy-policy
• ISBNdb — for book metadata lookup. We send ISBN queries to ISBNdb; no personally-identifying information is transmitted.
• Law enforcement and regulators — when required by law, subpoena, court order, or to enforce our Terms of Service

7. Data Retention

• Account data — retained until account deletion and the close of the 30-day Final Redemption Window
• Reading data — retained indefinitely unless you request deletion; deletion forfeits pending review rewards
• Reviews and Discussion Board posts — retained after account deletion for discussion continuity; may be anonymized at our discretion per our Terms of Service §6.2
• Payment records — retained per applicable financial regulations (minimum 7 years)

8. Data Security

We use industry-standard security measures including TLS/SSL encryption in transit, bcrypt password hashing, and role-based access controls on our servers. No security measure is 100% foolproof, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

In the event of a data breach that affects your personal information, we will notify you via the email address registered to your account within 72 hours of becoming aware of the breach, as required by applicable law.

9. Your Rights

9.1 GDPR (European Union Users)

If you are located in the EU, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten"), subject to our retention obligations
• Object to or restrict processing of your data
• Data portability
• Lodge a complaint with your local data protection authority

9.2 CCPA (California Residents)

California residents have the right to know what personal information we collect, how it is used, and with whom it is shared. You have the right to request deletion of your personal information and to opt out of the sale of personal information. We do not sell personal information.

9.3 Exercise Your Rights

To exercise any of these rights, contact us at privacy@veldt.ink. We will respond within 30 days.

10. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect personal information from children under 13 (or under 16 in certain jurisdictions). If we learn that we have collected information from a child under the applicable age without verified parental consent, we will take steps to delete that information promptly.

11. International Transfers

Veldt is operated from the United States. If you are accessing the Platform from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country. By using the Platform, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to the address registered to your account. Non-material changes (such as formatting, corrections, or clarifications) will be posted on this page with an updated "Last Updated" date. Your continued use of the Platform after any change constitutes acceptance of the revised Privacy Policy.

13. Contact

For questions about this Privacy Policy or to exercise your rights, contact:

Privacy inquiries: privacy@veldt.ink
General support: support@veldt.ink

VeldtInk LLC
PO Box 160
3 Mount Ebo Road
Brewster, NY 10509
USA