Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, use our services, or contact us, you may provide:

• Account Information: Name, email address, username, password, phone number
• Profile Information: Biography, profile picture, location, social media links, writing preferences
• Content: Manuscripts, stories, reviews, comments, discussion posts, and other creative works
• Payment Information: Billing address, payment card details (processed securely by Stripe)
• Communications: Support tickets, feedback, survey responses, and correspondence with us
• Preferences: Language settings, notification preferences, theme choices

1.2 Information Collected Automatically

When you access our platform, we automatically collect:

• Device Information: Device type, operating system, browser type and version, screen resolution
• Log Data: IP address, access times, pages viewed, referring URL, clickstream data
• Usage Analytics: Features used, time spent on pages, writing statistics, interaction patterns
• Location Data: General geographic location based on IP address (country/region level)
• Cookies & Similar Technologies: Session cookies, authentication tokens, preference cookies

1.3 Information from Third Parties

• Social Login: If you sign in via Google, Apple, or other providers, we receive basic profile information
• Payment Processors: Transaction confirmations and limited billing information from Stripe
• Analytics Partners: Aggregated, anonymized usage data to improve our services

2. How We Use Your Information

2.1 Core Service Delivery

• Create and manage your account
• Provide access to writing tools, manuscript management, and community features
• Process payments and manage subscriptions
• Enable collaboration features and manuscript sharing
• Deliver personalized content recommendations

2.2 Communication

• Send service-related notifications (security alerts, updates, confirmations)
• Respond to support requests and inquiries
• Send newsletters and promotional content (with your consent)
• Notify you about community activity and discussions

2.3 Improvement & Analytics

• Analyze usage patterns to improve features and user experience
• Conduct research and develop new features
• Monitor and enhance platform security
• Generate aggregated statistics and reports

2.4 Legal & Safety

• Comply with legal obligations and regulatory requirements
• Enforce our Terms of Service and community guidelines
• Detect, prevent, and address fraud, abuse, and security issues
• Protect the rights, property, and safety of Belbri and our users

3. Information Sharing & Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 With Your Consent

• Public profile information visible to other users
• Manuscripts and content you choose to share or publish
• Discussion posts and community contributions

3.2 Service Providers

We work with trusted third-party service providers who assist us in operating our platform:

• Payment Processing: Stripe (PCI-DSS compliant)
• Cloud Infrastructure: Vercel, Supabase
• Email Services: For transactional and marketing communications
• Analytics: To understand and improve our services
• Content Moderation: Google Perspective API for community safety

3.3 Legal Requirements

We may disclose information when required by law or in response to:

• Valid legal processes (court orders, subpoenas, government requests)
• Protection of our legal rights or defense of legal claims
• Prevention of fraud, security threats, or illegal activity
• Protection of the safety of any person

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

4. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: All data transmitted is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256.
• Access Controls: Strict role-based access controls and authentication requirements for staff
• Infrastructure Security: Hosted on SOC 2 compliant cloud infrastructure with regular security audits
• Monitoring: Continuous monitoring for suspicious activity and potential breaches
• Incident Response: Documented procedures for responding to security incidents
• Password Security: Passwords are hashed using bcrypt with appropriate work factors

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We encourage you to use strong passwords and enable two-factor authentication where available.

5. Your Rights & Choices

You have the following rights regarding your personal information:

5.1 Access & Portability

• Request a copy of your personal data
• Export your manuscripts and content in standard formats
• Download your account data through Settings > Data & Privacy

5.2 Correction & Update

• Update your account information through your profile settings
• Request correction of inaccurate personal data

5.3 Deletion

• Delete specific content you've created
• Request account deletion (Settings > Account > Delete Account)
• Note: Some information may be retained for legal or legitimate business purposes

5.4 Communication Preferences

• Opt out of marketing emails via unsubscribe links or Settings
• Manage notification preferences for community activity
• Note: Service-related communications cannot be fully opted out of while maintaining an active account

5.5 Cookies & Tracking

• Manage cookie preferences through our cookie consent banner
• Use browser settings to block or delete cookies
• Enable "Do Not Track" in your browser (we honor DNT signals)

6. Children's Privacy

Belbri is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal information from a child under the applicable age, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@belbri.co.uk.

7. International Data Transfers

Belbri is based in the United Kingdom and processes data in the UK and EEA. If you access our services from outside these regions, your information may be transferred to, stored, and processed in countries with different data protection laws.

For transfers outside the UK/EEA, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the UK ICO and European Commission
• Adequacy decisions where applicable
• Additional technical and organizational measures

8. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (e.g., tax records, legal holds)
• Resolve disputes and enforce our agreements
• Support business operations and analytics

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes.

9. UK GDPR & Data Protection Rights

If you are in the United Kingdom or European Economic Area, you have additional rights under the UK GDPR and EU GDPR:

• Right to be Informed: This privacy policy fulfills this requirement
• Right of Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Decision-Making: We do not use automated decision-making that significantly affects you

To exercise these rights, contact us at privacy@belbri.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or prominent notice on our platform
• Obtain your consent where required by law

We encourage you to review this policy periodically to stay informed about how we protect your information.