Privacy Policy

1. Introduction

VBP LLC (“we,” “us,” or “our”) operates Troubadour (“the Service”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Service. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

Account Information

• Name (optional), email address, and password when you create an account
• Language preferences (native language, target language, accent, and CEFR difficulty level)
• Display preferences (theme selection, audio playback speed, autoplay settings)

Usage Data

• Reading progress across stories and series (completion status, last position)
• Learning activity and engagement patterns

Subscription and Payment Data

• Subscription status, plan type, and billing period dates
• Paddle customer and subscription identifiers

We do not collect, store, or have access to your payment card details, bank account information, or other financial instrument data. All payment processing is handled directly by Paddle.com Market Limited (“Paddle”), our merchant of record.

Device and Technical Data

• Browser type, operating system, and device type
• IP address and general location data derived from it
• Pages visited, referring URLs, and session duration

3. How We Use Your Information

We use collected information to:

• Provide, personalize, and improve the learning experience
• Track your reading progress across stories and series
• Deliver audio content in your preferred language, accent, and playback speed
• Manage your subscription and verify Premium access entitlements
• Send transactional emails (account verification, password resets, subscription confirmations)
• Improve the Service, diagnose technical issues, and develop new features
• Enforce our Terms of Use and protect against fraud or abuse

We do not use your information for targeted advertising.

4. Data Storage and Security

Your data is stored on secure cloud infrastructure. We implement the following security measures:

• Encryption of data in transit (TLS/HTTPS)
• Hashed and salted password storage (passwords are never stored in plain text)
• Time-limited, single-use tokens for password reset operations
• Role-based access controls for administrative functions

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Sharing and Third-Party Processors

We do not sell, rent, or trade your personal information. We may share data with the following categories of third parties solely to operate the Service:

• Payment processing: Paddle processes all subscription payments and manages billing on our behalf. Paddle has access to your email address and payment details you provide to them.
• Cloud infrastructure: Database hosting and application hosting providers that store and serve your data.
• Audio generation: Third-party services used to generate narration audio for educational content.
• Legal obligations: We may disclose information when required by law, subpoena, or other legal process, or to protect our rights, property, or safety.

6. Cookies and Authentication

We use essential cookies and tokens to:

• Maintain your authenticated session (via secure, HTTP-only authentication tokens)
• Remember your display preferences (theme, language)

We do not use third-party advertising or tracking cookies. We do not participate in cross-site tracking or behavioral advertising networks.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained until you request account deletion
• Learning progress: Retained alongside your account for continuity of your learning experience
• Subscription records: Retained for a reasonable period after cancellation for accounting and legal purposes
• Password reset tokens: Automatically expire after 1 hour and are marked as used

Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

8. International Data Transfers

Your data may be processed and stored in countries other than your own, including the United States. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable, machine-readable format
• Restriction: Request that we limit processing of your data
• Objection: Object to processing of your data in certain circumstances

To exercise any of these rights, please contact us at support@troubadourapp.com. We will respond to your request within 30 days.

California Residents

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

European Economic Area Residents

If you are located in the EEA, our legal basis for processing your personal data includes: performance of our contract with you (providing the Service), your consent (where applicable), and our legitimate interests (improving the Service and preventing fraud). You have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us immediately and we will take steps to delete the information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or sending an email to your registered address. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@troubadourapp.com