Bookworm for Notion

1. Who we are and what this policy covers

Bookworm for Notion ("Bookworm", "we", "our", or "us") is based in British Columbia, Canada. We provide tools for managing a reading list, syncing Kindle highlights and reading progress with Notion, and sending Notion pages to Kindle. We are responsible for the personal information we process to operate these services. Our privacy officer can be reached at support@bookworm-for-notion.com for privacy questions, requests, or complaints.

This policy describes our practices; it does not replace a request for consent where consent is required. Your use of Amazon, Notion, and other connected services is also subject to their own privacy policies.

2. Information we process

Account information: email address, account identifiers, profile details supplied by your sign-in provider, authentication sessions, integration credentials, and your preferences.
Reading and Notion data: books, authors, covers, identifiers, highlights, notes, reading progress and activity, goals, review history, and the Notion workspace, database, and page identifiers and content needed for the features you use. This comes from you and the accounts and pages you connect, including Amazon and Notion. Book information can also come from Amazon or Goodreads pages where you use the extension.
Page exports: when you send a Notion page to Kindle, the extension processes its text, images, and attachments to create an EPUB and uploads it to Amazon for delivery.
Billing information: subscription, trial, customer, invoice, payment status, and transaction identifiers. Stripe processes payment details; Bookworm does not receive your full card number.
Technical and usage information: IP address, browser and device information, page visits, feature and sync events, timestamps, errors, performance information, and diagnostic session recordings. Sentry recordings are configured to mask text and block media, but technical diagnostics can still contain personal data.
Communications: support requests, feedback, and email delivery and engagement events, including detected opens and clicks.

3. How and why we use information

We use information to authenticate you, run the features you request, sync your data, manage subscriptions, deliver reading digests and service messages, respond to support requests, prevent abuse, troubleshoot failures, and understand and improve the service.

Where the EU or UK GDPR applies, our legal bases are performance of our contract with you for account, sync, search, and subscription services; legitimate interests in securing, maintaining, and improving the service and responding to support requests, subject to your rights; compliance with legal obligations, including applicable financial recordkeeping; and consent where required, including for nonessential tracking. You can withdraw consent without affecting earlier lawful processing.

Account and integration information is necessary for the corresponding features to work. If you do not provide it, those features may be unavailable. We do not use your information to make solely automated decisions that have legal or similarly significant effects on you.

We disclose information as needed to provide the service:

Connected services: Notion receives data you sync to your workspace. Amazon receives pages and files you send to Kindle. Access depends on the permissions you grant and the features you use.
Infrastructure providers: hosting, database, authentication, storage, background job, and caching providers process information to run Bookworm, including Supabase, Inngest, and Upstash.
Payments and email: Stripe handles billing, and UseSend and email delivery providers process addresses, message content, and delivery and engagement information.
Analytics and diagnostics: PostHog processes usage events and account identifiers. Its automatic interaction capture and session recording are disabled in our web configuration. Sentry processes errors, performance data, and masked diagnostic recordings.
AI-powered search: we send highlight text with book titles and authors, and your highlight search queries, to the OpenAI API to generate numerical representations (embeddings) for semantic search. Embeddings are stored with your highlights. This processing also occurs when synced highlights are indexed, not only when you search.

We may also disclose information when legally required, to protect rights and security, to professional advisers under confidentiality obligations, or as part of a business transfer subject to applicable privacy protections. We do not sell personal information or share it for cross-context behavioral advertising.

5. Browser permissions, cookies, and local storage

The extension uses access to supported Amazon, Goodreads, and Notion pages for book saving, syncing, and export features. It uses existing browser sessions and cookies to make authenticated requests; you sign in to Amazon and Notion directly. Browser storage holds settings, authentication state, and sync information. Background tasks, alarms, idle detection, and notifications support scheduling and status updates. Additional access to image or attachment hosts may be requested for a page export. You can revoke permissions or remove the extension in your browser, which may stop the associated features.

The website uses cookies and browser storage for sign-in and session continuity, and analytics tools may store identifiers to recognize visits. You can clear or block storage in your browser; doing so may sign you out or affect features. Browser settings are separate from any consent required for nonessential tracking.

Our use of information obtained through the extension is subject to the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this information to provide or improve user-facing features, not for personalized advertising.

6. Retention, deletion, and security

We retain account and reading data while needed to provide your account and requested features. Other records are retained according to their purpose: resolving support issues, diagnosing failures, preventing fraud, meeting tax and accounting obligations, and establishing or defending legal claims. Retention depends on the type of record, the ongoing need for it, and applicable legal requirements.

You can request deletion through your account settings or by contacting us. Account deletion removes your Bookworm account and associated application records; backup copies and records held for legal, billing, security, or dispute purposes may remain for their applicable retention periods. Deleting Bookworm does not delete copies already in your Notion workspace or Kindle library, and uninstalling the extension does not delete your Bookworm account or cancel a subscription.

We use access controls and other technical and organizational measures to protect information. No online service or storage system is completely secure. Contact us if you suspect unauthorized access.

7. International processing

Bookworm and its providers may process information outside your country, including in the United States, where privacy laws may differ. Where applicable law requires safeguards for international transfers, those transfers must be covered by an appropriate legal mechanism, such as an adequacy decision or approved contractual safeguards. Contact us for information about the destinations and safeguards relevant to your data.

8. Your choices and privacy rights

Under British Columbia’s Personal Information Protection Act and other applicable Canadian privacy laws, you may request access to your personal information, information about its use and disclosure, and correction of inaccurate information, subject to legal exceptions. You may withdraw consent on reasonable notice, subject to legal or contractual restrictions. We will explain any consequences, such as being unable to provide a feature that needs that information.

For concerns about our handling of personal information in British Columbia, first contact our privacy officer at support@bookworm-for-notion.com so we can investigate and respond. If your concern is unresolved, you may contact the Office of the Information and Privacy Commissioner for British Columbia.

Depending on your location and applicable law, you may request access, correction, deletion, or a portable copy of your personal information; restrict or object to processing; and withdraw consent. You may also have rights to opt out of sale, targeted advertising, or certain profiling, and to appeal a denied request. We do not sell data or use it for targeted advertising. We will not discriminate against you for exercising applicable privacy rights.

Send requests to support@bookworm-for-notion.com from your account email where possible. We may verify your identity or an authorized agent’s authority and will respond within the timeframe required by applicable law. You may complain to your local privacy regulator, including your EEA supervisory authority or the UK Information Commissioner’s Office.

You can revoke Bookworm’s integration access in Notion and remove browser permissions to stop future access. Manage reading emails in your preferences or use an available unsubscribe link. Essential account, security, and billing messages may still be sent.

9. Children’s privacy

Bookworm is not directed to children under 13 or the higher minimum age required by local law. We do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

10. Updates and contact

We will update this page when our practices change and revise the date above. For material changes, we will provide additional notice as required by law and obtain consent where necessary before introducing a new use that requires it. Contact support@bookworm-for-notion.com with questions. Our Terms of Use explain the rules for using Bookworm.