Privacy Policy

This Privacy Policy explains how The Readers' Verdict ("Service", "we", "us", or "our") collects, uses, stores, and protects your information when you use the Service. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and any profile information you provide. We use Supabase Auth to manage authentication. We do not collect your name unless you choose to provide it.

1.2 Manuscript Content

When you submit a Manuscript, we receive and store the text you upload. Manuscripts are encrypted at rest using AES-256-CBC encryption before being written to storage (see Section 4).

1.3 Submission Data

We store metadata about your submissions, including word count, genre selection, reader persona selections, submission status, and Analysis Results (reviews, grades, and summaries). Analysis Results are stored separately from Manuscript files and do not contain your Manuscript text.

1.4 Payment Information

When you make a payment, it is processed by Stripe, Inc. We do not receive or store your payment card details. We retain a record of the transaction amount and Stripe's payment reference for our records.

1.5 Usage Data

We may collect standard server logs and usage data, including IP addresses, browser type, pages visited, and actions taken within the Service. This data is used for security monitoring and to improve the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Process your Manuscript submissions and return Analysis Results;
• Send transactional emails (account confirmation, beta invitations, submission notifications) via Resend;
• Respond to your support enquiries submitted through the contact form;
• Detect and prevent fraud, abuse, or violations of our Terms of Service;
• Comply with legal obligations.

We do not sell your personal information. We do not use your Manuscript content for any purpose other than providing the Service.

3. Transmission to Third-Party Services

3.1 Anthropic API

To perform analysis, your Manuscript text is transmitted to the Anthropic API. Anthropic's usage policies state that API inputs are not used to train their models and are not retained beyond the scope of the API request. We are not responsible for Anthropic's data practices. You are encouraged to review Anthropic's Privacy Policy at anthropic.com.

3.2 Supabase

Your account data, submission metadata, and Analysis Results are stored in a Supabase-managed PostgreSQL database. Encrypted Manuscript files are stored in Supabase Storage. Supabase is subject to its own privacy and security practices.

3.3 Stripe

Payments are processed by Stripe, Inc. Stripe receives your payment card details directly; we do not. Stripe is subject to its own privacy and security practices.

3.4 Resend

Transactional emails are sent via Resend. Your email address is transmitted to Resend for the purpose of delivering these messages.

3.5 Vercel

The Service is hosted on Vercel. Vercel may process request data as part of serving the application.

4. Manuscript Encryption

Manuscripts are encrypted using AES-256-CBC encryption before being written to storage. The encryption key is derived from your user account identifier and a server-side secret stored separately from the encrypted files.

You should be aware that:

• Manuscript text exists in server memory during the analysis request window and is transmitted to the Anthropic API in unencrypted form as required to perform analysis;
• We retain the technical ability to decrypt Manuscripts using server-side keys, though we do not access Manuscript content except to operate the Service;
• Encryption does not protect against legal compulsion, such as a valid court order or subpoena.

5. Data Retention

We retain your account information and submission data for as long as your account is active or as needed to provide the Service.

Encrypted Manuscript files are retained to support the revision tracking feature. If you delete your account or request deletion of a specific Manuscript, we will remove the corresponding encrypted files from storage within a commercially reasonable time.

Analysis Results (reviews, grades, and summaries) are stored in our database and associated with your account. These are retained to allow you to access past verdicts and track revision progress.

6. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us through the contact form on the Service website. We will respond within a commercially reasonable time.

You may delete your account at any time through your account settings. Upon account deletion, we will remove your personal information and Manuscript files as described in Section 5.

7. Cookies and Tracking

The Service uses cookies for authentication session management and beta access control. We do not use third-party advertising cookies or cross-site tracking.

8. Security

We implement commercially reasonable technical and organisational measures to protect your information, including HTTPS for all connections, encrypted Manuscript storage, and access controls on our database and storage systems.

No method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

9. Beta Environment

The Service is currently in beta. Data handling practices, storage architecture, and security controls may change as the Service evolves. We will update this Privacy Policy to reflect material changes and notify registered users by email or in-Service notice.

We recommend not submitting Manuscripts of extraordinary commercial sensitivity during the beta period.

10. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will take steps to remove it.

11. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. We will notify registered users of material changes by email or by a notice displayed within the Service. Your continued use of the Service after the effective date of a revised policy constitutes your acceptance of those changes.

12. Contact

Questions about this Privacy Policy may be directed to us through the contact form on the Service website at readersverdict.com/contact.