Privacy policy
Last updated October 19, 2026
Flipspread is a service of Melodev, based in Puerto Rico ("we", "us"). This policy explains what information Flipspread collects, why, who it is shared with and the choices you have. It covers the Flipspread app at app.flipspread.com, the API at api.flipspread.com, the flipbook reader wherever it is embedded, and this website.
Who this is about
- Account holders: agencies and their clients who sign in to Flipspread to publish flipbooks.
- Readers: people who view a flipbook, on app.flipspread.com or embedded on another website.
For the flipbooks and documents an agency or client uploads, that agency or client decides what is published, and we process that content on their behalf.
What we collect from account holders
- Account details: name, email address and the workspaces and roles you belong to. Sign-in is handled by Supabase.
- Content you upload: PDFs and images, the pages made from them, link boxes, appearance settings and version history.
- Billing details: billing contact name, email, address and tax ID, the plan and the invoices. Card numbers are entered into Stripe's own form and kept by Stripe; we never see or store them. We keep the brand, last four digits and expiry date Stripe tells us, and a record of who saved a card and how the client authorized it, including the date, the IP address and browser of the person who entered it, and the version of the card terms agreed to.
- Activity records: who changed what and when, such as publishing an issue or changing a plan, so a workspace has a history of its changes.
- Technical logs: our servers log requests (time, address, path and response) to keep the service running and secure.
What we collect from readers
The reader sets no cookies and stores nothing in the reader's browser. To count views, the reader sends the page of the flipbook being viewed, the website it is embedded on and any campaign tags in the link. To count a reader once per flipbook per day, we combine the IP address and browser details with a random value that changes every day and keep only the resulting fingerprint, never the address itself. The random value of each day is deleted the next day, so these fingerprints cannot be linked to a person or across days. Agencies and clients see totals only: views, readers per day, link clicks and referring websites.
How we use information
- To provide the service: store and convert uploads, publish flipbooks, show them to readers and count views.
- To bill: create invoices and charge the plan through Stripe.
- To send service emails, such as sign-in links and invitations.
- To keep Flipspread secure, find and fix problems, and meet legal obligations.
We do not sell personal information and do not use it for advertising.
Who we share it with
We use these providers to run Flipspread, each only for its part of the service:
- Supabase, for sign-in and accounts.
- Amazon Web Services, for file storage (United States) and for sending email.
- DigitalOcean, for the servers that run the API and its database.
- Vercel, for hosting the app and this website.
- Stripe, for payments and invoices.
- Cloudflare, for domain name service.
Flipbooks are public to anyone with their link unless their publisher restricts the websites that may embed them. We may also disclose information when the law requires it, or to protect the rights and safety of our users or of Flipspread.
How long we keep it
We keep account information and content for as long as the account or workspace exists. Deleted flipbooks are removed from the service; copies may remain in our database backups until those backups are deleted. Billing records are kept as long as tax and accounting rules require. Reader fingerprints are deleted daily, as described above.
Security
Connections to Flipspread are encrypted. Each workspace sees only its own data, access depends on the role of each person, and card data stays with Stripe.
Your choices and rights
You can update your account details in the app, and ask us for a copy of your information, to correct it or to delete it, by writing to sergiolopez@melodev.com. If your information is in a client workspace, we may refer your request to that client, who decides about its content. Flipspread is not meant for children under 13.
Changes
When we change this policy we update the date at the top, and we tell account holders by email about changes that matter.
Contact
Melodev, Puerto Rico. sergiolopez@melodev.com