Privacy Policy

Scope and who is responsible

This Privacy Policy applies to the NovelBeacon website and related pages or communications that link to it (the “Service”). The operator of NovelBeacon is responsible for personal information processed through the Service and acts as the controller where data-protection law uses that term.

This Policy does not cover a publisher, author, app store, payment provider, or external reading platform. Those services have their own privacy practices. The operator’s verified legal name and business address should be added to this section before commercial launch; until then, privacy questions can be sent to support@novelbeacon.com.

Information we collect

NovelBeacon does not currently require a reader account and does not intentionally collect government identifiers, precise geolocation, health data, biometric data, or payment-card credentials. Do not send sensitive personal information unless we specifically request it for a legitimate purpose.

How we use information

• Provide, operate, maintain, index, and improve the Service.
• Return search results, remember reader preferences, and maintain optional saved features.
• Understand aggregate use, diagnose errors, measure performance, and improve recommendations.
• Protect the Service against fraud, abuse, malicious traffic, and security threats.
• Respond to support, partnership, privacy, and copyright communications.
• Measure referral performance and administer commercial partner relationships.
• Comply with law, enforce our terms, and establish, exercise, or defend legal claims.

We do not use solely automated processing to make decisions that produce legal or similarly significant effects about ordinary readers.Catalog ranking or recommendation logic may use aggregate engagement signals, but it does not determine a reader’s legal rights.

Legal bases for processing

Where the GDPR, UK GDPR, or similar law applies, we rely on one or more of these bases:

• Legitimate interests: operating and securing a useful discovery service, understanding performance, preventing abuse, and managing business relationships, balanced against your rights.
• Consent: for optional cookies, analytics, or communications when the law requires consent. You may withdraw consent at any time without affecting earlier lawful processing.
• Contract: taking steps you request or fulfilling an agreement with a content or commercial partner.
• Legal obligation: responding to valid legal requests and meeting regulatory, accounting, or compliance duties.

Cookies, local storage, and analytics

Cookies are small files stored by a browser; local storage is a similar browser feature. We may use strictly necessary technologies for security, load balancing, consent records, and requested preferences. Optional analytics may help us understand traffic and page performance. Where required, optional technologies will not be used until you make a choice.

The current public experience does not require an account and is not designed around cross-site behavioral advertising. You can delete browser storage or block cookies using browser controls, although a requested preference may no longer work. If we introduce a materially different analytics or advertising practice, we will update this Policy and provide the controls required by applicable law.

How information is disclosed

We may disclose information to:

• Infrastructure and service providers that host,secure, monitor, analyze, or support the Service under appropriate contractual restrictions.
• Publishers and referral partners for aggregate reporting, attribution, link administration, or resolving a specific listing or rights issue.
• Professional advisers and authorities when reasonably necessary for legal advice, compliance, safety, fraud prevention, or valid legal process.
• A successor organization in connection with a merger, financing, reorganization, sale, or transfer, subject to appropriate safeguards.
• Other recipients at your direction or with your consent.

Following an external link sends your browser to a third party. That party may receive ordinary request information such as your IP address, browser details, and referring page, and may collect additional information under its own policy. NovelBeacon does not currently sell personal information or share it for cross-context behavioral advertising as those terms are defined by the CCPA.

How long we keep information

We retain personal information only for as long as reasonably needed for the stated purpose:

• Routine server, diagnostic, and security logs are generally kept for up to 90 days, unless a longer period is needed to investigate abuse, preserve evidence, or meet a legal duty.
• Support, rights, and privacy correspondence is generally kept for up to 24 months after resolution, with longer retention where needed for disputes, repeat-infringer administration, or legal compliance.
• Browser preferences remain until they expire or you clear them.
• Partner and transaction records are kept for the relationship and any legally required accounting or limitation period.
• Aggregated or de-identified information that cannot reasonably identify you may be retained for longer.

International data transfers

NovelBeacon and its service providers may process information in countries other than the one where you live. Privacy laws may differ. When required, we use an approved transfer mechanism—such as adequacy decisions, standard contractual clauses, or another lawful safeguard—and apply supplementary protections appropriate to the risk.

Your privacy rights and choices

Depending on where you live, you may have rights to access, receive a copy of, correct, delete, or restrict personal information; object to certain processing; withdraw consent; request portability; or complain to a data-protection authority. These rights may be subject to verification, exceptions, and legal limitations.

To make a request, email support@novelbeacon.com with the subject “Privacy Request” and identify the right you wish to exercise. We may ask for information reasonably necessary to verify your identity and authority. Authorized agents may submit requests where local law permits. We will not discriminate against you for exercising an applicable privacy right.

California privacy notice

California residents may have rights to know, access, delete, and correct personal information, to opt out of sale or sharing, to limit certain uses of sensitive personal information, and to receive equal service when exercising those rights. The categories described in “Information we collect” are collected from you, your browser, service providers, and business partners for the purposes described above.

We do not currently sell personal information or share it for cross-context behavioral advertising, and we do not knowingly sell or share the personal information of consumers under 16. We therefore do not currently provide a “Do Not Sell or Share” link. If these practices change, we will update this notice and provide legally required opt-out methods, including recognition of qualifying preference signals where applicable.

Children’s privacy

NovelBeacon is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided personal information, contact us so we can investigate and delete it where required. A higher minimum age or parental-consent requirement may apply in some countries.

Data security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. No transmission or storage system is completely secure, so we cannot guarantee absolute security. Do not send passwords, payment credentials, or unnecessary sensitive information by email.

Policy changes and contact

We may update this Policy as the Service, vendors, or laws change. We will update the date above and provide additional notice of material changes when reasonably appropriate. Your information will be handled under the version in effect when the relevant processing occurs, subject to any consent required for a new purpose.

If GDPR or UK GDPR applies, you may also complain to the supervisory authority where you live, work, or believe an infringement occurred. Contact us first if you would like us to try to resolve the concern directly.