Privacy

Who we are

Provenance is run by Stefano Bordin, Monza, Italy, who is the data controller for the personal data described here.

For anything about your data, write to support@withprovenance.app.

What we collect

Your account: the email address you sign in with, and — if you sign in with Google — the name and profile picture Google returns. We never see your password: we don't have one.

If you add a passkey, your fingerprint or face never leaves your device: we only store a public key.

Your library: the books you add, and everything you choose to record about them — the edition, where you got it, what you thought of it, when you read it, your notes and reactions.

Your images: photos of covers, of shelves and of your own copies, which you take or upload yourself.

What you say to the curator: the messages you send in the chat, and — if you use the voice input — the audio you record, which is transcribed to text.

What you send us: if you write to us from Help & feedback, your message, your email address and the version of the app you are using.

Your subscription: if you subscribe, the payment is handled by Stripe. We store the identifiers Stripe gives us and the state of your plan; we never see or store your card details.

Technical data: the usual server logs of a web application, and counters we keep to enforce usage limits.

If you join the waitlist: your email address, the name for your plate if you give it, the date, and who invited you, if anyone.

When you join the waitlist we keep which site sent you, the campaign tag in the link (if any), the page you landed on, and your answer to “How did you hear about us?” — to learn where readers find us. We never keep the full address you came from.

If you confirm your place on the waitlist: a short note from us now and then about what we are building. Every note has a link to stop them, and you keep your place.

Visits to our home page: we count them with Vercel Web Analytics. It uses no cookies and doesn't know who you are: it records the page, the site you came from, your country, and the kind of device and browser, and we only ever see the totals.

Cookies: only the ones that keep you signed in, and a short-lived one (15 minutes) that remembers your email while you sign in. No advertising, no trackers.

What we do with it, and why

We show you your own library, and we build the Atlas — the maps of time, place and theme — from it. We look up book information for you: when you add a book, we ask public and commercial catalogues about it. We answer you in the chat, and we remember the context of your conversations so the curator doesn't start from zero every time. We keep your account and your subscription working.

Why we are allowed to: to give you the service you signed up for (the contract between us), for your account, your library, your images and your conversations; your consent, for the waitlist, which you can withdraw at any time; a legal obligation, for payment and tax records; and our legitimate interest in keeping Provenance secure and stopping abuse, for server logs and usage limits, and in knowing how many people visit our home page and where they come from, for the visit counts.

Who else sees it

We use other companies to run the product. Each of them sees only what it needs to do its job, and processes it for us under its own data processing terms. Some of them are in the United States, under the safeguards European law requires for transfers outside the EU.

Vercel — hosts the application, serves it to your browser, and counts the visits to our home page.

MongoDB Atlas — stores your library and your account. The cluster is in the European Union (eu-central-1).

Cloudflare R2 — stores the images.

Google — signs you in, if you choose to sign in with Google.

Resend — sends the sign-in emails, the waitlist emails and notes, and the messages you send us from Help & feedback.

LaunchList — keeps the waitlist and your place in it.

Stripe — handles payments and subscriptions.

Anthropic — the models behind the curator and behind reading your photos: it receives the messages of a conversation to answer them, and the photos of covers and shelves you take, to recognise the books.

OpenAI — transcribes voice input, when you use it.

Mem0 — stores the memory of your conversations with the curator.

Trigger.dev — runs the background jobs that enrich your books.

Google — Gemini, with Google Search, reads the photos of covers you take to recognise the book, and answers our questions about books and places.

Book and place sources — Google Books, Open Library, ISBNdb, Wikidata, Wikipedia and Nominatim (OpenStreetMap). We ask them about books and places, not about you: they receive a title, an author, an ISBN or a place name.

What we never do

We don't sell your data, and we don't share it for advertising.

The photos of your own copies are never shown to other users. They are stored at addresses that are not listed anywhere.

We don't use your library to train anyone's models.

How long we keep it

Your account, your library, your images and your conversations: for as long as you keep your account. When you delete it, everything is deleted within 30 days.

Server logs: for a short time, kept by our hosting provider, then deleted.

Payment records: kept by Stripe for as long as tax law requires.

The waitlist: until you leave it, or until Provenance opens to everyone.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it together with your account, or object to how we use it. Write to support@withprovenance.app — we answer within 30 days — or delete your account yourself, from Settings › Account.

You can also complain to your data protection authority — in Italy, the Garante per la protezione dei dati personali.

Provenance is not meant for children under 16.