Privacy Policy

• Information you provide: your name and email address at registration, your reading topics and goals, and any details you include when contacting us.
• Verification data: one-time passcodes (OTPs) sent to your email to confirm your identity.
• Account & usage data: books you open, streaks, bookmarks, reading history, and which weekly allowance you have used.
• Technical data: IP address, browser and device type, operating system, language, time zone, and approximate location derived from IP, collected automatically when you use the service.
• Author submissions: if you submit a book as an author, the contact and book details you choose to share with us.

• To provide the service — registering your account, verifying you, and serving summaries and audio.
• To personalize your experience — recommendations, topics, streaks, and your weekly allowance.
• To send service-related messages — account, security, and transactional emails (for example, OTP and password-reset).
• To provide customer support and respond to your requests.
• To analyze and improve the service — understanding usage patterns and fixing issues.
• To send marketing communications where you have opted in; you can unsubscribe at any time.
• To prevent fraud and abuse and to enforce our Terms.
• To meet legal obligations where required.

Where you are in a jurisdiction that requires a legal basis for processing, we rely on:

• Performance of a contract — to run your account and deliver the service.
• Consent — for marketing emails and certain analytics or personalization, which you can withdraw.
• Legitimate interests — for security, fraud prevention, and service improvement, balanced against your rights.
• Legal obligation — where processing is required by law.

We use a small set of cookies and similar technologies to keep you logged in, remember your preferences, and measure how the service is used through privacy-conscious analytics. We do not use cookies to sell your personal data or to build cross-site advertising profiles. You can control cookies through your browser settings; disabling them may affect some features.

We share data only as needed to operate the service:

• Service providers — hosting, email delivery, and analytics vendors that process data on our behalf under appropriate safeguards.
• Payment providers — when paid plans are live, third-party processors (such as Razorpay) handle payment details; we do not store full card numbers.
• Retailers — when you click a buy-link (for example, to Amazon), you leave ReadOrion and the retailer's terms and privacy policy apply.
• Legal compliance — where required by law or to protect rights, safety, or property.
• Business transfers — in connection with a merger, acquisition, or sale of our business.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

Because ReadOrion is available globally and uses cloud providers that may store or process data outside your country, your data may be transferred internationally. Where this involves regions with different data protection levels, we use appropriate safeguards (such as standard contractual clauses or other lawful transfer mechanisms) and limit the data transferred to what is necessary.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data (subject to legal retention needs).
• Object to or restrict certain processing.
• Withdraw consent for processing that relied on it (without affecting processing already done).
• Receive your data in a portable, machine-readable format where applicable.
• Lodge a complaint with your local data-protection authority.

To exercise any right, email admin@readorion.com. We may need to verify your identity before acting on a request.

• India (DPDP Act, 2023): ReadOrion is the data fiduciary. You have rights to access, correct, and erasure, and to nominate another individual to exercise your rights. We process data for lawful purposes and retain it only as long as necessary.
• EEA & UK (GDPR / UK GDPR): the legal bases in Section 3 apply, and you have the full set of rights above, including the right to complain to your supervisory authority.
• California & other US states: you may have rights to know, delete, correct, and opt out of the “sale” or “sharing” of personal data. We do not sell or share personal data as those terms are defined.

ReadOrion is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a minor has provided us data, contact us and we will delete it.

We keep your data for as long as your account is active and for a reasonable period afterward to meet legal, accounting, or reporting requirements. You can delete your account from your profile settings or by emailing us; deletion may take up to 30 days. Note that a paid subscription (when live) must be cancelled separately before account deletion to avoid further charges.

We use reasonable technical and organizational measures to protect your data, including encrypted password storage and single-device session enforcement. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

We may update this policy from time to time and will reflect the change in the “Last updated” date. Material changes will be communicated through the service. Continued use after changes take effect constitutes acceptance.

ReadOrion is the controller of your personal data, operated from India. For privacy questions or requests, email admin@readorion.com.