Privacy Policy

Last updated: 28 February 2026

This policy describes what data Highlights.Email collects and how it is used.

Data and Cookies

Your email address is collected at sign-up and used to deliver your highlights, send account-related notices, and occasional service updates.

Usage data is recorded each time you export highlights: book title, number of highlights, and timestamp. This data is used to enforce plan limits and improve the service. The content of your highlights is processed to format your email but is not stored.

Cookies are used solely for authentication sessions (via Supabase). No tracking or advertising cookies are set.

Legal Basis (GDPR)

Your data is processed on the basis of consent (provided at sign-up) and legitimate interest (to operate and improve the service). You may withdraw consent at any time by requesting deletion of your account.

Third-Party Services

• Vercel — application hosting
• Supabase — database and authentication
• Purelymail — email delivery (sends your highlights)
• Stripe — payment processing
• GoatCounter — privacy-focused website analytics; no personal data is collected

Data Retention

Account data and export logs are retained for as long as your account exists. Server diagnostic logs are automatically deleted after 30 days.

Your Rights

You may request access to, correction of, deletion of, or export of your personal data at any time by emailing kavith@highlights.email. Requests are handled within 30 days.

Security

All data is encrypted in transit via HTTPS. There are no passwords to compromise — the service uses magic-link authentication.

Changes and Contact

Significant changes to this policy will be communicated by email. The date at the top of this page reflects the latest revision.

Questions or concerns? Contact Kavith Kamaraj at kavith@highlights.email.
Address: The Liberties, Dublin 8, Ireland.

Your use of this service is also governed by our Terms of Service.