Privacy
Last updated 7 September 2026
What is collected, where it goes, and what is done with it. Written out rather than summarised, because the interesting parts are usually the ones that get summarised away.
What is collected
Your email address, which is how you sign in. Anything you choose to put in the forms about your book. The files you upload. The letters produced for you, and the feedback you give about them.
Nothing is sold to anybody. The only tracking that can exist is the one optional advertising cookie described under Cookies below, and it exists only if you allow it.
Where it is stored
In a Supabase project hosted in the EU, in Frankfurt. The site itself runs on Vercel. Payments, when they exist, are handled by Stripe, which receives what it needs to take a payment and never receives your manuscript.
Site analytics come from Vercel and are aggregate: page views and countries, no cookies and nothing that identifies you.
⚠ Your manuscript is processed by an AI model
This is the disclosure that matters most, so it gets its own heading.
Producing your letter means the text of your pages is read by Anthropic's Claude model. That is the service; it cannot be done without it. It happens like this: the brief and the manuscript are exported as a file, I run the reading through Claude on my own computer, I read and edit what comes back, and I publish the letter. Two parties handle your text: Anthropic, whose model does the reading, and me. It is not published, not shared with other customers, and not used as an example without asking you.
The reading runs through Claude on my own computer, under my own Claude subscription, with the setting that would let Anthropic use the text to improve their models switched off. Under Anthropic's published terms for that kind of account, what is sent is not used for training and is kept on their side for thirty days. If the volume ever justifies moving the reading to Anthropic's API under commercial terms, this page changes when that happens.
The file I export to run the reading stays on my own computer, the way a manuscript stays on an editor's desk, so that I can answer a question about the read later. There is no fixed date on which it is removed; ask me to remove it, along with everything else about you, and I will.
What comes back is analysis. Your text is not rewritten.
What it is used for
Reading your work and writing back. Running your account. Nothing else.
What you mark as useful or not on each finding is kept with your account and goes into the next letter to you. It is used for you, not aggregated and sold. I also look at which kinds of notes hold up across letters, as counts, never as your text.
How long it is kept
Until you delete it. Delete a manuscript and the stored text goes with it and the file is queued for removal; delete a book and everything belonging to it goes; ask me to delete everything and it all goes. Encrypted backups roll on a cycle and are kept for sixty days, so removed material can persist there for that long before ageing out.
The public feedback form, which works without signing in, keeps a short-lived hashed key derived from your IP address for up to twenty-four hours, to limit abuse of the form. The address itself is not stored.
Your rights
Under GDPR you can ask for a copy of everything held about you, ask for it to be corrected, ask for it to be erased, and object to how it is processed. Write to me and it gets done. You can also complain to the Norwegian Data Protection Authority if you think it has not been.
Cookies
Two, at most. The first keeps you signed in and asks nothing of you.
The second is optional and exists only if you allow it: a Meta pixel that measures whether the advertising that brings people here is worth running. Declining is exactly as easy as allowing, everything works the same either way, and you can change your mind at any time through the cookie choice link in the footer. If you allow it, the fact that you started a free read may also be reported to Meta from our server, tied to the ad that brought you — never your manuscript, never a word of your text.
Videos are hosted on YouTube or Loom. If you allowed the cookie above they load when the page does; decline it and nothing is fetched until you press play.
Getting in touch
Any of this, including a request to delete everything, goes to editor@karlove.com. It is me who reads it, and there is nobody else to escalate to.