Privacy policy
Last updated [date this takes effect]
Draft for review, not yet in effect. Highlighted items need the owner's details before publishing.
Book-Line turns a family's papers — photo albums, letters, email, recordings and remembered stories — into a translated, searchable archive of a person. It is operated by Caribou LLC ("we"). This policy says what we keep, why, who else handles it, and how to get it out or delete it.
What we keep
- Your account. Your name, email address and profile picture, from the sign-in service.
- What your family adds. Scans and photographs, documents, voice recordings, written stories and answers to interview questions.
- What we make from it. Transcriptions and translations of each page, summaries, the people, places and dates mentioned, groupings of faces in photographs, and a family tree.
- Email, only if you connect it. See "Gmail" below.
- Records of use. Sign-ins and the pages and actions used, with IP address and browser, kept to secure the service and to measure what processing costs.
Who can see an archive
An archive is private to the people its owner has invited. Owners choose whether each person can only read and ask questions (a viewer) or can also add material (an editor). We do not publish archives and we do not sell or rent anything in them. We do not use archives for advertising.
Gmail
If you choose to connect a Google account, Book-Line asks for read-only access to your email. We search only for the names and terms set for the archive you connected it to, and only when you start a search. Matching messages and their attachments are held for review: nothing enters the archive until you, or the archive's owner, approve it. Until then only you and the owner can see them. Items you remove are deleted, and those messages are not imported again. We store a token that lets us run a search again when you ask. You can disconnect at any time from the archive, which deletes the token and withdraws our access at Google.
Book-Line's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use email content only to provide the archive features you ask for. We do not use it for advertising, we do not sell it, and we do not use it to train general-purpose AI models.
Who else handles it
We use a small number of providers to run the service. Each receives only what it needs:
- Amazon Web Services stores archives and runs our servers, in the United States.
- Anthropic reads pages, letters, messages and recordings' transcripts to transcribe, translate and answer questions about them. [Confirm Anthropic's current commercial terms on training and retention before publishing.]
- Amazon Transcribe turns voice recordings into text.
- Clerk handles sign-in.
- Google, if you connect Gmail.
- Stripe processes payments, when you buy a plan. We never see your full card number.
Face grouping in photographs runs on our own servers.
Getting it out, and deleting it
- Download. An archive's owner can download everything in it — every original, every page's transcription and translation, and the recordings — from Settings.
- Delete an archive. The owner can delete an archive and everything stored for it, including staged email and recordings, from Settings.
- Delete your account. You can delete your account from Settings. Archives only you are in are deleted with it. What you added to someone else's archive stays there, as part of that family's record; ask that archive's owner if you want something removed.
- Backups. Deleted files can remain in our storage backups for up to [N days — set a storage lifecycle rule first; at present old versions are kept indefinitely].
Children
Book-Line is not directed at children under 13, and we do not knowingly create accounts for them. Archives naturally mention children; that material belongs to the family that added it.
Changes
If we change this policy in a way that matters, we will tell account holders by email before the change takes effect.
Contact
Questions or requests: [privacy contact email]. Caribou LLC, [postal address].