HomeBranch Cloud Privacy Notice

1. Scope and controller

This notice explains how Oghamark LLC collects, uses, discloses and retains personal information through HomeBranch Cloud. HomeBranch Cloud is intended only for adults in the United States and is not directed to children under 18.

2. Information we collect

• Account information: name, email address, a password hash, and account status.
• Library content: the books and cover images you upload, bibliographic metadata, shelves, favorites, and reading progress.
• Billing information: Stripe customer and subscription identifiers, subscription status, and billing dates. Card details go directly to Stripe and are never entered into our own forms or stored by us.
• Technical and security information: session tokens, request logs, and network identifiers used for rate limiting and abuse prevention.
• Communications you choose to send us.

3. How we use information

• To authenticate you, keep you signed in, and operate your private library.
• To process subscriptions, enforce the storage limit, and manage the account lifecycle described in the Terms.
• To protect accounts and systems, prevent abuse and fraud, and investigate incidents.
• To send transactional messages, respond to requests, comply with law, and enforce our agreements.

We do not read your books for any purpose other than operating the service, and we never share your library with other members.

4. Cookies

We use strictly necessary cookies to keep you signed in. They are not used for advertising or cross-site tracking.

5. Service providers and disclosures

We use Stripe for payment processing and Cloudflare for file storage (R2) and security. They process data on our behalf. We may also disclose information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, complete a business transaction, or with your direction. We do not sell personal information or share it for cross-context behavioral advertising.

6. Retention

We keep account and library data while your account is active. If your subscription lapses and is not renewed, your account and all stored files are permanently deleted 30 days after suspension. Billing and tax records are kept for 7 years to meet recordkeeping obligations. Security logs are kept for up to 2 years. Backup copies may persist for a limited period after deletion.

7. Security

We use measures designed to protect information, including password hashing, access controls, per-account data isolation, private object storage, rate limits and encrypted transport. No system is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

You may ask to access, correct or delete your personal information, or object to or restrict certain processing, by contacting us. We will verify requests and respond as required by law. Some information may be retained where needed for legal obligations, security, fraud prevention or legal claims. Because we do not sell or share personal information for targeted advertising, there is no opt-out to offer.

9. Changes and contact

We may update this notice. Material changes get a new version and effective date. Privacy questions and requests: [email protected] or 212 N. 2nd St., STE 100, Richmond, KY 40475.