Privacy policy

Draft prepared on 2026-10-23 from the data the application actually stores. It has not yet been reviewed by a lawyer and must be before the public launch. Last updated: 2026-10-23.

Who is responsible

The Dialogue Map (intellectia.me) is operated by [operator’s legal name and postal address, to be added before launch]. For anything about your data, write to privacy@intellectia.me.

What we store and why

Your account. Email address, display name, a hashed password (never the password itself), whether your email is verified, your interface language, reading goal and accessibility settings. We need these to run your account.

Your reading. The texts you mark as want to read, reading, read or skipped; the books on your shelf; your private notes and highlights; the authors, concepts and paths you follow; and the days you read, for your streak. These are the features you use, and only you can see your notes.

Notifications. The in-app notifications we create for you and your email preferences. Digest emails are sent only if you turn them on.

Recommendations. When personalization is on, we keep a record of each set of recommendations: the reading signals used (progress, language, goal, follows) and what was suggested, plus any “useful” or “not for me” feedback. Your notes, email address and identity are never part of it. You choose how long these records are kept, from 30 days to a year, and turning personalization off deletes them.

Usage events. Your progress through paths is always recorded, because your reading home uses it to show where you stopped, and each search is counted without its words. Which pages and texts you open, which search results you follow, what you share and the words you search for are recorded only if you answer “Fine” to the question shown on your first visit, or choose “Pages and searches” in your account; with “Only what is needed” they are not sent at all. We read them in aggregate, to see which paths work and what readers look for that we lack. They are stored with your reader identifier.

Sessions and security. For each signed-in session we keep the IP address, browser user agent and last time it was used, to protect your account and let you sign out other devices. Editorial staff have their sign-in attempts and actions logged.

Public reading list. If you publish your reading list, its title, your display name and the texts on your shelf can be seen by anyone with the link. You can switch it off at any time.

We do not use advertising, third-party analytics or tracking cookies. Your sign-in token and your answer to the first-visit question are kept in your browser’s local storage; the answer is also saved with your reader account, so it follows you when you sign in elsewhere.

Who else handles it

• Hosting: OVHcloud runs the server and database. [Server location to be confirmed before launch.]
• Email: an email delivery provider sends verification, password-reset and notification emails. [Provider to be named before launch.]
• Payments, once subscriptions open: Stripe takes the payment and keeps your card details; we receive your subscription’s status and the dates it covers, never your card number. When you delete your account we cancel the subscription and remove your name and email at Stripe; invoices stay with Stripe for accounting.

We do not sell your data.

How long we keep it

• Account and reading data: until you delete your account. Deletion takes effect after a 7-day grace period in which you can cancel it.
• Reading without an account: your progress is tied to this browser’s session, which lasts 30 days. Once it has ended, the progress is deleted within 30 more days.
• Recommendation records: the period you choose, from 30 to 365 days (90 by default).
• Read notifications: one year.
• Usage events: 13 months, after which only a daily count per kind of event is kept, with no link to any reader.
• Sign-in sessions, with their IP address and browser: 30 days after they expire or you sign out. Used or expired email links: 7 days.
• Data exports you ask for: the file is deleted when you download it or after 24 hours; the date of the request stays with your account.
• Editorial staff sign-in attempts: 90 days. In the editorial audit log, IP addresses are shortened after 90 days.

A cleanup job applies these windows every night. Our data inventory lists every table that holds personal data, with its purpose, legal basis and retention; write to privacy@intellectia.me for a copy.

Your rights

You can download a copy of your data yourself under “Your data” on your account page: a file for other tools and a reading plan you can open anywhere. You can delete your account there too: after you confirm by email it is deleted 7 days later, and your public reading list goes offline at once. What we keep afterwards is a record that an account was deleted, with no email or name, and usage events that no longer point to anyone. You can also ask for a copy, its correction or its deletion, object to its use, or ask us to restrict it, by writing to privacy@intellectia.me. You can turn personalization and email digests off yourself in your account. If you think we have handled your data wrongly, you can complain to your data protection authority; in Belgium that is the Data Protection Authority (dataprotectionauthority.be).

Changes

When this policy changes in a way that matters, we will say so on this page and, for account holders, by email before the change applies.