Privacy, in plain English
Your reading life is yours.
Shelf stores the sources you save and the notes, highlights, questions and connections you create so the product can work for you. Your workspace is private and is not used to build a public profile.
Access requests
We use your waitlist email only to manage Shelf access. We do not sell it or add it to a marketing newsletter.
Your library
Saved content and generated knowledge stay scoped to your workspace. Shared pages are public only when you explicitly create a share link.
AI processing
Saved source text may be sent to the AI providers configured for Shelf to create notes, answers, Key ideas and Connections. Your prompt may be sent with the relevant source text. Those providers handle the data under their own terms and privacy policies.
Product measurements
Our self-hosted analytics record content-free activity such as saves, reader opens, answer outcomes, and AI cost. They use a pseudonymous workspace label. We do not send saved URLs, titles, source text, questions, answers, email addresses, or sign-in IDs to analytics. Activity events expire after 90 days.
When you erase your Shelf data, we also request deletion of that workspace’s analytics and block late events from restoring them. If the analytics service is unavailable, your library is still erased and Settings shows that analytics deletion is unconfirmed. There is no automatic retry; older events remain subject to the 90-day limit.
Control
From Settings, you can download your Shelf data or permanently erase your library and workspace data. Deleting Shelf data does not delete the sign-in identity that lets you start again later.