Vellum Regalia is the data controller for information handled through the Vellum app and this website. Questions and privacy requests can be sent to hello@vellumregalia.com.
Information Vellum handles
Your Vellum workspace
Vellum creates a random User identifier so your private workspace can be protected from other Users. The workspace can contain ISBNs and shelves in your library; page progress, ratings, reading dates, timed reading sessions, streak information, time zone, and marginalia such as notes or quotations. Authentication session information is stored on your device and processed by our authentication provider.
Purchases and subscriptions
Apple processes App Store payments. Vellum receives purchase and subscription status, product identifiers, and related transaction information needed to provide Subscriber features and customer support. Vellum does not receive your full payment-card details.
Product usage and diagnostics
Vellum records limited events about onboarding, library actions, reading progress, marginalia creation, subscription screens, and sharing so we can understand whether features work well. These events can include a random installation or User identifier, ISBN, shelf, progress values or ranges, screen and action names, app version, device and operating-system information, referral information, and timestamps. Marginalia text is not sent to product analytics; only its type, page, and a text-length range are recorded.
When something fails, diagnostic reports can include the affected feature or backend route, error details, performance measurements, app and device information, a random User identifier, network address, and request correlation identifiers. Vellum filters authorization credentials and fields likely to contain notes, quotations, email addresses, or other sensitive text from the diagnostic context we configure.
Book searches
When you scan or search for a book, Vellum sends the ISBN or author query needed to retrieve title, author, cover, and other Book Metadata. We do not intentionally send your Vellum User identifier with that query.
Support and website visits
If you contact us, we receive your email address and whatever you include in your message. DigitalOcean may process standard web-request information, such as network address, browser type, requested page, and timestamp, to deliver and secure this website. This website does not use advertising cookies or product-analytics scripts.
How we use your information
- Provide, synchronize, secure, and support your private Vellum workspace.
- Retrieve Book Metadata and provide subscription features.
- Measure feature reliability and improve Vellum based on aggregated usage patterns.
- Diagnose crashes, failed requests, performance problems, fraud, and abuse.
- Meet legal, accounting, security, and App Store obligations.
Where applicable, we rely on performance of our agreement with you to operate Vellum, our legitimate interests in securing and improving the service, consent where required for a particular technology, and compliance with legal obligations. We do not sell your personal information. We do not use your library or marginalia text for targeted advertising.
Service providers
We give providers only the information needed for their role. Their processing is also governed by their own terms and privacy commitments.
- Supabase provides authentication and the hosted database for User-owned workspace records.
- RevenueCat processes Vellum User identifiers and App Store purchase status to manage subscription entitlements.
- PostHog processes product-usage events to help us understand onboarding and feature use.
- AppsFlyer processes installation, referral, deep-link, sharing-campaign, device, network, and Vellum User identifier data for attribution and share links.
- Sentry processes error, log, performance, route, release, device, network, and random User identifier data for diagnostics.
- ISBNdb receives ISBN or author searches and returns Book Metadata.
- DigitalOcean hosts the Backend API and this website and processes infrastructure logs needed to operate and secure them.
- Apple distributes Vellum and processes App Store purchases, subscription management, and related platform data under Apple's own policies.
How long we keep information
Your active Vellum workspace is kept while you use the service. If you remove a Library Book or Marginalia, it may remain in protected operational records until the workspace is deleted or the record is permanently cleared. A deletion request removes User-owned production records unless retention is required for security, dispute resolution, tax, accounting, or another legal obligation.
Encrypted database backups expire on the backup schedule for our hosting plan. Product analytics, attribution information, diagnostics, security logs, and provider records are kept only for the period configured for their operational purpose, then deleted or de-identified. Support correspondence is kept while the request is active and afterward only as long as reasonably needed to document its resolution or meet a legal obligation. We review retention settings as Vellum evolves and will update this policy if the categories or purposes materially change.
International processing and security
Our providers may process information in countries other than your own, including the United States. Where required, we use contractual and other lawful safeguards for international transfers. We use encrypted transport, access controls, scoped credentials, and User-level authorization to protect information. No service can guarantee absolute security.
Your privacy choices
Depending on where you live, you may ask to access, correct, export, delete, restrict, or object to processing of your personal information, or withdraw consent where processing relies on consent. You may also have the right to complain to your local data-protection authority.
Send a privacy request to hello@vellumregalia.com. We may need to verify that you control the relevant Vellum workspace before acting on it.
You can manage or cancel a subscription through your Apple account. Deleting Vellum data does not automatically cancel an App Store subscription. Removing the app from your device also does not by itself delete server records.
Children
Vellum is not directed to children under 13, or the higher minimum age required in their country. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and delete it.
Policy changes
We may update this policy when Vellum's features, providers, or legal obligations change. We will post the revised policy here with a new effective date and provide additional notice when a change materially affects your choices.
Contact
Vellum Regalia
hello@vellumregalia.com