1. Account Data
We process information such as your name or nickname, verified email, hashed password, language, country, preferences and data required to secure the account.
We also retain your declaration that you are 18 or older, its date, and the version of the age rule and terms accepted. This declaration is used to apply the adult-only registration rule. It is not independent verification of your actual age. This checkbox collects neither a date of birth nor an identity document.
Sign-up and recovery codes are temporary and expire automatically.
2. Reading and Listening Data
We store books saved to My Library, reading progress, last page, chapter, reading dates and ratings. For audio, we also store the edition played, position within the recording, listening progress and date last listened.
This lets users resume reading and listening separately, synchronize progress between devices when connected, calculate ratings and personalize the experience.
3. Country and Technical Data
IP address and country may be processed to select the relevant catalog, language, currency and payment methods.
We also process sessions, browser, device, technical logs and events required for security and diagnostics.
4. Subscriptions, Payments and Purchases
To confirm payments, activate access rights and handle purchase tracking and support requests, we retain transaction references, provider, payment method, amount, currency, status, dates, the associated account, subscription duration and purchased books or formats. The method identifies only the payment type (for example card, PayPal or Mobile Money), when supplied by the provider. These tracking records are not card or bank account details.
Ovotus does not retain any card details, whether complete or partial: no card number, including masked numbers or last digits, no expiry date and no security code (CVV/CVC). Bank account details and payment authentication codes are not retained either.
Complete provider responses are not archived in Ovotus payment records or technical logs. Providers process your payment method details in their own interface under their own privacy policies.
5. Offline Reading, Listening and Local Storage
Texts and audio files prepared for offline use, their covers, access-right information, local reading and listening progress and certain preferences may be stored in protected browser or App storage. Audio parts already received may also be kept to resume interrupted saving.
These copies are specific to the device and remain subject to valid access rights. Ovotus or the user clearing App or browser data may remove them. Progress that has not yet synchronized may be lost when data is cleared.
6. Notifications and Support
With permission, a notification token may be used for new books, transactions, expirations and important account events.
Support tickets contain messages, email, replies and attached images or PDFs. Permanently closing a resolved ticket deletes its conversation and attachments.
7. Sharing and Providers
Ovotus does not sell your personal data.
Data recorded by Ovotus is hosted on a server administered by Ovotus with our hosting provider. The hosting provider supplies storage and operates the infrastructure; this role may involve technical access to the hosted data.
Ovotus uses internal technical tools to manage and store the data needed to operate the service.
Email and notification services process the information needed to deliver messages, such as the email address or notification token and the content of the relevant message.
Payment providers process the information needed to execute and confirm transactions under their own privacy policies. The payment data retained by Ovotus is described in section 4.
Information disclosed to providers is limited to what they need to perform their services and is subject to applicable confidentiality and data protection obligations.
8. Retention and Deletion
Data is retained for the account lifetime or as long as required for service, support, security, legal and accounting duties.
Codes, sessions, temporary exports, old notifications and expired files are cleaned according to their periods. Account deletion removes associated data from active databases, subject to mandatory exceptions.
9. Security
Ovotus uses HTTPS, password hashing, secure cookies, access controls, CSRF tokens, abuse limits and file validation.
No system can guarantee absolute security. Use a strong password and promptly report suspicious activity.
10. Access by Minors
Ovotus is reserved for people aged 18 or older. Minors are not permitted to create accounts. If you believe a minor has an account, use Report a Problem. After review, we may suspend or close the account and delete data in accordance with applicable rules, subject to retention obligations.
11. Your Rights
You can edit information and delete your account in Settings. Depending on applicable law, you may request access, correction, deletion, restriction or objection through Report a Problem.
