Skip/privacy

Privacy policy

Last updated: 25 October 2026

Data controller

FLEXIGLOB LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA, publisher of FlexiLibrary, is the controller of the data described here. Contact: contact@flexiglob.com.

What we collect

Account data: name, email, preferred language, optional country/city and currency.

Library data you enter: libraries, shelves, books, notes, loans, photos of shelves and covers.

Security data: hashed password (Argon2id), passkey public keys, session records (device, IP, timestamps).

We never receive or store fingerprints, face images or any biometric template: passkeys are verified on your device.

How we use it

Only to provide the service: display and search your catalogue, authenticate you, protect accounts against abuse.

We do not sell data, show ads, use third-party analytics on private pages, or use your catalogue to train AI models.

AI providers

AI features run with your own OpenAI API key, stored encrypted (AES-256-GCM envelope encryption) and never returned to your browser.

When you use a scan or research feature, the necessary photos or catalogue excerpts are sent to OpenAI under your account and its terms. Web search receives only your question.

Sharing

Your libraries are private. Only members you invite can see them, according to the role you grant (owner, editor, viewer). Private pages are excluded from search engines.

Retention and your rights

You can export all your data (Settings → Privacy & data) and delete your account at any time; deletion removes your libraries, books, photos, notes and research.

Encrypted backups are kept for up to 14 days before rotation.

You may request access, correction or deletion by contacting us.

Cookies

We only use strictly necessary cookies (secure HttpOnly session cookies) and your browser’s local storage for your language choice and offline catalogue. No advertising, analytics or tracking.

Processors

Contabo GmbH (Munich, Germany) hosts the application on servers located in France.

Namecheap Private Email delivers service emails (verification, password reset, invitations).

OpenAI, only if you add your own key and use an AI feature, under your own account.

Fonts are bundled at build time and served from our own server: your browser makes no request to Google.

Supervisory authority

If our answer does not satisfy you, you may contact the CNDP in Morocco or the data protection authority of your country of residence.

FLEXIGLOB LLC · 30 N Gould St, Ste R, Sheridan, WY 82801, USA · contact@flexiglob.com

Privacy policy · FlexiLibrary