Skip to content

Privacy Policy

Last updated: March 23, 2026

1. Who we are

Verkli ("we", "us", "our") operates the platform at verkli.com. We connect authors with readers and provide tools for publishing, reading, and discovering books.

2. Data we collect

We collect the following categories of personal data:

  • Account data — email address, display name, profile picture, and role (author or reader) when you create an account.
  • Authentication data — credentials managed via our authentication provider (Supabase Auth) or third-party sign-in (Google).
  • Usage data — pages visited, reading progress, bookmarks, highlights, reviews, and feature interactions.
  • Payment data — billing information processed by Stripe. We do not store credit card numbers.
  • Content — books, chapters, comments, messages, and other content you create on the platform.
  • Device & log data — IP address, browser type, operating system, and request timestamps collected automatically.

3. How we use your data

  • Provide, maintain, and improve the platform.
  • Process payments and manage subscriptions.
  • Send transactional emails (e.g. password reset, receipts).
  • Personalise your reading experience and recommendations.
  • Monitor security and prevent abuse.
  • Analyse usage to improve our product (via Vercel Analytics and Sentry error tracking).

4. Cookies

We use the following cookies:

  • Essential cookies — authentication session, active role preference. These are required for the platform to function.
  • Analytics cookies — Vercel Analytics and Google Analytics to understand how the platform is used. These are only set with your consent.

You can manage your cookie preferences at any time using the cookie banner or your browser settings.

5. Data sharing

We share personal data only with trusted service providers that help us operate the platform:

  • Supabase — database hosting and authentication.
  • Stripe — payment processing.
  • Resend — transactional email delivery.
  • Vercel — hosting and analytics.
  • Sentry — error monitoring.

We do not sell your personal data to third parties.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it.

7. Your rights

Under GDPR and applicable data protection laws, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Request deletion of your data.
  • Object to or restrict certain processing.
  • Export your data in a portable format.

To exercise any of these rights, contact us at privacy@verkli.com.

8. Security

We use industry-standard security measures including encrypted connections (TLS), row-level security policies, rate limiting, and secure authentication to protect your data.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or a notice on the platform.

10. Contact

Questions about this policy? Reach us at privacy@verkli.com.