Privacy Policy
1. Introduction
Welcome to Subliword ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your information when you use our speed reading web application.
2. Data Controller
The data controller responsible for your personal data is Subliword. For any questions or concerns about this policy or your personal data, please contact us at the email provided at the bottom of this policy.
3. Data We Collect
3.1 Automatically Collected Data
When you access our service, we automatically collect certain technical information for security, analytics, and service improvement purposes:
| Data Type | Purpose | Legal Basis | Retention |
|---|---|---|---|
| IP Address | Security, fraud prevention, abuse detection | Legitimate interest | 30 days |
| Browser/Device Info (User-Agent) | Service optimization, compatibility | Legitimate interest | 30 days |
| Session Identifiers | Service functionality | Contract performance | Session duration + 24 hours |
| Timestamp | Security logging, diagnostics | Legitimate interest | 30 days |
| Language Preferences | Service localization | Legitimate interest | Session only |
3.2 User-Provided Data
When you upload documents for speed reading:
- Uploaded Files: PDF, DOCX, and TXT files you upload are processed server-side to extract text content. The original files are stored temporarily and automatically deleted after processing.
- Reading Progress: Your current position in a document and reading speed preferences are stored in your session to provide continuity.
3.3 Data We Do NOT Collect
- We do not require account registration
- We do not collect names, email addresses, or other personally identifiable information
- We do not use third-party tracking or advertising cookies
- We do not sell or share your data with third parties for marketing purposes
4. How We Use Your Data
We use the collected data for the following purposes:
- Service Delivery: Processing your documents and providing the speed reading functionality
- Security: Detecting and preventing abuse, unauthorized access, and malicious activities
- Diagnostics: Identifying and fixing technical issues
- Service Improvement: Understanding usage patterns to improve the application (aggregated, anonymized data only)
5. Legal Basis for Processing (GDPR Article 6)
We process your personal data based on the following legal grounds:
- Contract Performance (Article 6(1)(b)): Processing necessary to provide you with the speed reading service you requested
- Legitimate Interests (Article 6(1)(f)): Security logging and service improvement, balanced against your privacy rights
6. Data Retention
- Uploaded Documents: Deleted immediately after text extraction, or within 1 hour maximum
- Session Data: Automatically expires and is deleted after 24 hours of inactivity
- Server Logs: Retained for 30 days for security purposes, then automatically deleted
7. Data Security
We implement appropriate technical and organizational measures to protect your data:
- HTTPS encryption for all data in transit
- Secure server infrastructure
- Regular security assessments
- Access controls limiting who can access server logs
- Automatic data deletion mechanisms
8. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access (Article 15): Request a copy of your personal data we hold
- Right to Rectification (Article 16): Request correction of inaccurate data
- Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing (Article 18): Request limitation of processing in certain circumstances
- Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format
- Right to Object (Article 21): Object to processing based on legitimate interests
- Right to Lodge a Complaint: File a complaint with your local data protection supervisory authority
To exercise any of these rights, please contact us using the information provided below.
9. International Data Transfers
Your data is processed on servers located within the jurisdiction specified in our terms of service. If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
11. Third-Party Services
We may use the following third-party services:
- Hosting Provider: Our servers may be hosted by a third-party cloud provider who acts as a data processor under our instructions
- CDN/Proxy Services: We may use services like Cloudflare for security and performance, which may process IP addresses as per their privacy policy
12. Children's Privacy
Our service is not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about our data practices, please contact us:
- Email: [email protected]
For EU residents, you also have the right to lodge a complaint with your local Data Protection Authority if you believe your rights have been violated.