Privacy Policy

• Account: your email address (for sign-in links and order emails), the username you choose, and your sign-in times.
• Library and registry: the editions you add, what you paid and your notes (private), and photographs of copies you register, with capture timestamps.
• Vault: your listings, offers, orders, and — for purchases — the delivery name and address you enter at checkout. Sellers' identity and bank details are collected by Stripe directly, not by Lore; we store only your Stripe account identifier.
• Delivery: tracking numbers and the carrier's status updates for parcels sent through the Vault.
• Optional imports: if you import a library export from Goodreads, StoryGraph, Fable or another reading app, we read the file once to match titles to marketplace entries; the file itself is not kept.
• Email preferences: whether you receive the monthly library recap (on by default; one-click unsubscribe in every recap).
• Technical: standard server logs and privacy-preserving, cookie-less page analytics (aggregate visits and pages, no cross-site tracking).

We do not collect card numbers, government identifiers, or precise location. Camera metadata embedded in registry photos, including any GPS location, is stripped when the photo is stored. The only cookies we set are the ones that keep you signed in.

• To run your account, library and registry entries.
• To review copies against the marketplace and issue certificates (reviewers see your protocol photos, not your name).
• To run the Vault: show your listing, take payment, tell the seller where to send the parcel, watch the carrier, hold and release funds, decide disputes, and email both parties at each step.
• To keep the price guide honest and the marketplace safe (fraud and abuse prevention).
• To meet legal obligations, including tax and record-keeping.

We do not use your information for advertising and do not sell or rent it.

• Other members: your username and, if you opt in, your public library. On a listing, buyers see a seller card with your username (or a pseudonym), tier, sale count and shipping record — never your email or address. After a sale, the seller sees the buyer's delivery name and address; the buyer sees the seller's username.
• The Lore team: reviewers and admins see registry photos, disputes and order details as needed to do the job.
• Service providers, under contract, only to provide their service: Supabase (database, authentication and file storage — hosted in Sydney, Australia), Vercel (web hosting and analytics; our functions run in Sydney), Stripe (payments and seller identity, in Australia and the United States), Resend (transactional email, United States), and AfterShip (parcel tracking, United States/Hong Kong).
• Authorities, where the law requires it.

Some of these providers process data outside Australia. We choose providers with strong security practices and contractual privacy commitments, but by using the Vault you acknowledge that overseas disclosure to them occurs.

Data is encrypted in transit and at rest; access inside Lore is role-based; registry photos are stored in a private bucket and served only through short-lived signed links. Every write to the registry is logged.

We keep account data while your account is open. Order and payment records are kept for seven years for tax and dispute purposes. Registry entries and provenance history are permanent by design; they identify a copy, and your name is not published on them.

You can ask to see, correct or (where we are not required to keep it) delete your personal information, or to close your account, by emailing hello@lorevault.au. We respond within 30 days. If you are unhappy with our answer you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

We will post any material change here and update the date above. Contact: hello@lorevault.au · Leeandra van Zyl (ABN 78 129 293 789), trading as Wisteria Road and Lore · 7 Goodwood Way, Canning Vale WA 6155.

These terms were drafted by Lore and have not yet been independently reviewed by a lawyer. A review is in progress; this page will be updated when it is complete.