readinbox

Privacy Policy

Last updated: March 19, 2026

1. Introduction

This Privacy Policy describes how readinbox, operated by Dima Labs Inc. ("we", "us", "our"), collects, uses, stores, and protects your personal information when you use our Service. By using readinbox, you acknowledge and agree to the practices described in this policy.

2. Data Controller

Dima Labs Inc., an Ontario corporation based in Canada, is the data controller for the personal information collected through readinbox. We are committed to protecting your privacy in accordance with Canadian privacy legislation, including PIPEDA and other applicable laws. Contact us at [email protected].

3. Information We Collect

We collect the following types of information:

  • Account information: Email address, name, and authentication details provided during sign-up
  • Newsletter content: Email newsletters you forward to your readinbox address, including sender information, subject lines, and email body content
  • Delivery data: Records of conversions and deliveries to your e-reader destinations (Kindle, Kobo via Dropbox/Google Drive)
  • Technical data: IP addresses, browser and device information, and access logs
  • Billing data: Subscription tier and payment status (payment details are handled directly by Polar.sh)

4. How We Use Your Information

We process your personal information to:

  • Receive, convert, and deliver newsletters to your e-reader
  • Manage your account, sources, and delivery destinations
  • Process payments and manage subscriptions
  • Send service-related notifications (delivery confirmations, account alerts)
  • Provide technical support
  • Analyze usage to improve the Service
  • Comply with legal obligations

5. Data Storage and Security

Your data is stored on servers located in Canada and the United States. We implement appropriate security measures including:

  • Encryption in transit (TLS/SSL)
  • Access controls limiting data access to authorized personnel
  • Regular data backups
  • Security monitoring and auditing

6. Data Retention

We retain your personal data only as long as necessary:

  • Account data: Deleted within 90 days of account deletion, unless longer retention is legally required
  • Newsletter content and EPUB files: Retained for up to 6 months after delivery, then automatically deleted
  • Delivery logs: Retained for up to 12 months
  • Analytics data:In accordance with our analytics provider's policies

7. Third-Party Services

We do not sell your personal information. We share data with third parties only as necessary to provide the Service:

  • Polar.sh:Payment processing (subject to Polar.sh's privacy policy)
  • Amazon (Kindle): EPUB delivery via Send-to-Kindle email
  • Dropbox / Google Drive: EPUB delivery for Kobo users via cloud sync
  • Analytics providers: Usage statistics collection (anonymized where possible)

We may also share data when required by law or in response to valid legal requests from government authorities.

8. Cookies and Tracking

readinbox uses cookies and similar technologies for:

  • Essential cookies: Authentication and session management
  • Analytics cookies: Usage statistics to help us improve the Service

9. Your Rights

Subject to applicable laws in your jurisdiction, you may exercise the following rights:

  • Right to access your personal information
  • Right to correct inaccurate personal information
  • Right to request deletion of your data
  • Right to object to certain processing activities
  • Right to withdraw consent where applicable
  • Right to lodge complaints with supervisory authorities

To exercise any of these rights, contact us at [email protected].

10. International Data Transfers

Your data is primarily stored in Canada. Third-party service providers (such as Amazon, Dropbox, Google, and Polar.sh) may process data in other countries, including the United States. We rely on these providers' data protection commitments and standard contractual clauses where applicable.

11. Children's Privacy

readinbox is designed for adult users aged 18 and older. We do not knowingly collect information from children under 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version with the update date will always be available on this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at [email protected]. We will respond within a reasonable timeframe in accordance with applicable law.