Privacy policy

Raeven Reader ("Raeven", "we", "us") is operated by Raeven Company Ltd. This policy explains what we collect when you use our website, mobile and desktop apps, and admin dashboard, why we collect it, and what choices you have. We aim for the minimum data needed to run the product safely.

1. Data we collect

Account data

• Email address (for sign-in and password recovery).
• Optional display name and avatar URL you set in settings.
• Authentication tokens (managed by Supabase, our auth provider).

Content you create

• Documents you upload (PDF, DOCX, Markdown, plain text), the extracted text, sanitiser findings, and metadata you add (titles, tags).
• Meeting and voice-note transcripts, summaries, decisions and action items you choose to save. Speech recognition runs on your device; Raeven does not upload or retain the raw microphone audio used for dictation.
• Grove learning progress, quiz answers, rewards, and community content you choose to post.
• Reader and theme preferences you save.

In-app product analytics

• For signed-in users, we record the app screen viewed, time spent, app version, platform, and a random per-launch session identifier.
• We use this information only to operate, secure, and improve Raeven Reader.
• We do not use this information for advertising, combine it with third-party data for advertising, share it with data brokers, or track you across other companies' apps or websites.

Site analytics

• For each page view we record path, referrer, user-agent, approximate location (country / region / city derived from your IP at our edge), and a one-way SHA-256 hash of your IP for unique-visitor counts. Your full IP is retained for a short window for abuse follow-up only.
• We do not use third-party trackers or advertising cookies.
• We honour the Do-Not-Track header — if your browser sends it, we skip the analytics ping entirely.

Contact form

• Name, email, subject, message, IP and user-agent at the time of submission. We use this only to reply to you and to identify abusive submissions.

2. How we use your data

• To provide the Raeven Reader product (parse documents, transcribe meetings, sync your settings across devices).
• To authenticate you and enforce row-level access control so users only see their own content.
• To monitor service health, prevent abuse, and improve the product.
• To respond to messages you send via the contact form.

3. AI providers

Some Raeven features (web extraction, meeting summarisation, audio transcription) call third-party AI providers configured by the Raeven admin. The current providers and the data sent to each are listed in the admin dashboard. We do not share your raw documents with any AI provider beyond what is strictly required to perform the feature you invoked.

4. Where data is stored

• Account data, content, and analytics live in our Supabase project (PostgreSQL + Storage), region eu-north-1.
• Server-side functions run on Vercel (region: auto-selected closest to the user).
• Audio and document files are encrypted at rest by Supabase Storage and access-controlled by per-user paths.

5. Sharing

We do not sell personal data. We share data only with infrastructure providers (Supabase, Vercel) and with the AI providers configured for the features you use. We comply with valid legal requests where legally required to do so.

6. Your rights

• Access the data we hold about you by emailing privacy@raevenreader.com.
• Delete your account and associated content at any time in Raeven Reader under Settings → Account → Delete account, on our account deletion page, or by emailing the same address.
• Export your content (documents, transcripts) via the in-app export controls.
• Object to or restrict processing — contact us and we will action your request within 30 days.

7. Cookies

We use one strictly-necessary cookie set by Supabase to keep you signed in. Site analytics use a short-lived sessionStorage entry (not a cookie) to deduplicate page views within a session.

8. Retention

• Account and content data: retained while your account is active and permanently removed when you complete the in-app or signed-in web deletion flow. Email-assisted requests are completed within 30 days.
• Visit logs: full IP retained 30 days, hashed IP retained 13 months.
• Contact submissions: retained 24 months unless you request earlier deletion.

9. Children

Raeven Reader is not directed at children under 13. We do not knowingly collect personal data from children.

10. Changes

We may update this policy as the product evolves. Material changes will be announced inside the app at least 14 days before they take effect.

11. Contact

Questions about this policy? Email privacy@raevenreader.com or use the contact form.