Privacy Policy

Who this policy covers

This policy covers Personal accounts and Business owners, authorized employees and customers whose information is processed through SpineValue. Personal enrollment currently serves United States residents age 18 or older. Public Business enrollment is coming soon.

Information we process

We process sign-in identifiers and email, book lists and ISBNs, individual-copy condition and notes, saved estimates, research-credit usage, policy acknowledgements, optional email preferences, and feedback or support messages. Security and operational information can include IP addresses, browser information, timestamps and error records.

For Business accounts, we also process business and location details, subscription references, inventory and pricing records, employee identifiers and permissions, badge/PIN verification information, terminal enrollment and transaction records. Enabled commerce functions may process customer contact, order and shipping details. Private employee credentials, private notes and acquisition costs are not public catalogue fields.

Stripe collects payment details on its checkout pages. SpineValue stores payment references, amounts and fulfillment records; it does not collect or store full card numbers or card security codes. Your payment-contact email may differ from your SpineValue email.

How information is used

We use information to authenticate accounts, save and display books, provide requested book information and estimates, administer credits and subscriptions, fulfill enabled services, respond to feedback, maintain security and resolve payment issues. Authorized staff may access information needed for those purposes. Personal shelves and private notes are not published as store inventory.

Verification, receipts, security and account notices are service emails. Promotional emails personalized to shelf interests require separate, optional consent. Account creation is not marketing consent. Withdraw permission in Account Settings or through an unsubscribe option in a promotional email.

Providers and disclosures

Stack Chum LLC operates the application and sign-in infrastructure. Service providers currently include Cloudflare for public routing/security, Amazon Web Services for email delivery, Stripe for payments, Anthropic for requested book-information processing and feedback review, and Internet Archive/Open Library for book information and covers. Browser software libraries may load from jsDelivr. Providers receive information needed for their functions; loading remote covers or libraries can disclose connection information to their providers. Camera barcode and printed-ISBN recognition runs on your device; camera images are not uploaded for these scanning functions.

The application is operated in the United States. Third-party providers may process information in the United States or other countries under their own service arrangements; this policy does not promise exclusively US processing. We may disclose information when legally required, to respond to security incidents or misuse, or in a lawful business transfer subject to applicable protections and notice.

Anonymous statistics and marketing

We do not sell account holders' personal information, account identifiers or individual shelf records. We may use combined anonymous book/category and sales statistics from multiple users for marketing and data products. Such statistics must not identify an individual or expose their shelf. Private notes, feedback and identifying employee/customer records are excluded. Removing names alone is not sufficient; identifying small groups or combinations must be excluded before external release.

Browser storage and public Business information

Browser storage maintains authentication, preferences and supported application functions. Use a trusted device and sign out on shared devices. Camera access is optional and requires device permission; you can type an ISBN or use a compatible scanner instead.

A Business owner's enabled catalogue publishes selected book details, condition descriptions and asking prices. Owners are responsible for accurate publication choices and appropriate employee/customer notices. Badge credentials, PINs, private notes and private financial records remain restricted. Public links stop showing inventory when Business access ends.

Retention and deletion

After 24 months of Personal inactivity, we send an email notice at least 60 days before library cleanup. Signing in cancels cleanup. If unused purchased credits remain, the library may be removed but the account and those credits are preserved. Accounts without remaining purchased credits may be deleted after that process.

A Business subscription in good standing protects its inventory from inactivity cleanup. After Business access ends, the inactivity clock starts from the later of access ending or last sign-in. Later sign-ins restart it. The same 24-month and delivered 60-day notice process applies. Existing unresolved financial obligations can prevent cleanup.

Account Settings provides deletion after reauthentication and explicit confirmation. Deletion removes the library and disables account access while sign-in identity removal completes. Unused purchased credits are forfeited without discretionary refunds, except where required by law. Pending research, checkouts, current paid Business access or unresolved orders/returns must be resolved first. Removing a book from a list is different from deleting an account and may retain its saved history.

Routine application/error records are subject to a 90-day retention limit. Deleted library data may remain in restricted application backups for up to 90 days. Limited payment, tax, fraud-prevention, audit, policy-acceptance and dispute records remain restricted where needed for legal obligations or active disputes and are deleted when no longer needed. Support and feedback information may be retained while needed to resolve requests and improve the service; contact us to request removal of identifying information. Non-identifying historical book-sale facts may be retained; sold data products contain only combined anonymous statistics.

Your choices and requests

Contact [email protected] to request access, a copy, correction or deletion of personal information, withdraw optional consent, or ask about applicable privacy rights. We verify ownership before disclosing or deleting information. Depending on your residence and applicable law, additional objection, restriction, appeal or opt-out rights may apply; you may contact us to exercise them without retaliation. We respond within applicable legal requirements. Business owners must cooperate with employee/customer requests and cannot access another store's information.

We use safeguards to protect information, but no service guarantees absolute security. Do not put passwords, payment details or unnecessary sensitive information in notes or feedback. We publish material policy changes and provide additional notice or renewed consent where required. Nothing in this policy removes rights provided by law.