Privacy Notice

ShelfLoop is a community book sharing and exchange platform. Users can list, discover, borrow, buy, give away, wishlist, waitlist, and review books.

If you sign in with Google, ShelfLoop may receive basic Google account information such as your name, email address, profile image, and Google account identifier, depending on the permissions you grant.

This data is used only to create or log in to your ShelfLoop account, display profile information, and secure the account. ShelfLoop does not sell Google user data, does not use Google user data for advertising, and does not transfer Google user data to third parties except as necessary to provide the app, comply with law, prevent abuse, or with your consent.

ShelfLoop's use and transfer of Google user data should comply with the Google API Services User Data Policy, including Limited Use requirements. If Google permissions are limited to basic profile/email authentication, the app does not access Gmail, Google Drive, Google Calendar, or other Google content unless separately implemented and disclosed.

• Account creation and login
• Email verification
• Trust and safety
• Book discovery and search
• Nearby distance calculation
• Request, approval, and OTP workflows
• Borrow, sale, and giveaway completion
• Waitlist and wishlist matching
• Ratings and reviews
• Notifications and reminders
• Admin support and misuse prevention
• Legal or compliance obligations
• Improving the platform

Depending on where you live and which laws apply, ShelfLoop may rely on consent, service necessity, legitimate interests, and legal obligations to process personal data.

• Consent: optional profile fields, notification preferences, optional verification data, optional location details, and marketing or promotional emails if enabled.
• Contract or service necessity: account creation, book requests, OTPs, exchanges, bills, and service notifications.
• Legitimate interests and platform safety: fraud prevention, abuse detection, support, audit logs, and community trust.
• Legal obligation: lawful requests, dispute handling, or other requirements under applicable law.

ShelfLoop does not sell personal data or share it for third-party advertising.

Limited data may be shared with:

• Other users, only where needed for book exchange coordination, public profile or trust details, listings, ratings, and messages.
• Service providers such as Supabase for backend, authentication, and storage, and Resend for transactional emails.
• Google, when you use Google login, as part of the authentication flow.
• Admins or moderators for support, safety, and platform operations.
• Authorities if legally required.

Depending on your privacy settings and workflow, other users may see:

• Display name or private-user label
• Profile photo or avatar if provided
• Book listings
• Approximate area, society, or locality if shown by the app
• Ratings, reputation, badges, and reviews if published
• Request-related coordination details once an exchange is active
• Messages you send in the platform

Private details such as full email, phone, exact address, or government ID should not be shown to other users unless a specific feature clearly discloses it.

• Account and profile data is retained while your account is active.
• Exchange and transaction records may be retained for service history, audit, dispute handling, billing, and legal purposes.
• Messages, support tickets, and admin logs may be retained for safety and support.
• Email logs may be retained for delivery tracking and audit.
• Deleted or deactivated accounts may still have some data retained where required for legal, security, fraud prevention, audit, or completed transaction history.
• You can request deletion or correction by contacting support@shelfloop.com.

• Request access to or a copy of your data.
• Correct or update profile data.
• Request deletion of your account or personal data.
• Withdraw consent for optional processing where applicable.
• Change notification preferences and disable marketing or promotional emails if enabled.
• Manage public/private profile settings where available.
• Raise grievances regarding personal data processing.
• Where GDPR applies, you may have rights to access, rectify, erase, restrict, object, and portability.

ShelfLoop may be used by families and students. Where a user is a minor, the platform is intended to be used under parent or guardian supervision. Minors should not provide personal data without parent or guardian consent.

Parents or guardians can contact support@shelfloop.com to request review, correction, or deletion of a minor's data. ShelfLoop should not collect unnecessary data from children. A minimum age can be defined later by the platform owner.

ShelfLoop aims to follow security practices aligned with common information security principles, including access control, auditability, least privilege, and data minimization.

• The app uses authentication, role-based access, database security policies, and access controls.
• Sensitive workflows such as pickup and return use OTP verification.
• Admin activity may be logged for accountability.
• Access to production data should be limited to authorized admins.
• No system is 100% secure. Users should protect their login credentials.

ShelfLoop may use cloud service providers whose systems may process or store data in different regions. Where required, transfers will be handled according to applicable law and service provider safeguards.

The app may use cookies, local storage, or session storage for login sessions, preferences, security, and app functionality. If analytics or advertising cookies are added later, this notice should be updated.

In case of a security incident affecting personal data, ShelfLoop will take reasonable steps to investigate, mitigate, and notify affected users or authorities where legally required.

This notice may be updated from time to time. Users should review this page periodically.

Also see our Terms of Use.

Data Protection / Privacy Contact: support@shelfloop.com

Website: shelfloop.com