Privacy

Last updated 30 July 2026

What is collected, where it goes, and what is done with it. Written out rather than summarised, because the interesting parts are usually the ones that get summarised away.

What is collected

Your email address, which is how you sign in. Anything you choose to put in the forms about your book. The files you upload. The letters produced for you, and the feedback you give about them.

There is no advertising, no tracking across other sites, and no selling of anything to anybody.

Where it is stored

In a Supabase project hosted in the EU, in Frankfurt. The site itself runs on Vercel. Payments, when they exist, are handled by Stripe, which receives what it needs to take a payment and never receives your manuscript.

Site analytics come from Vercel and are aggregate: page views and countries, no cookies and nothing that identifies you.

⚠ Your manuscript is processed by an AI model

This is the disclosure that matters most, so it gets its own heading.

Producing your letter means sending the text of your manuscript to an AI provider for analysis. That transfer is the service; it cannot be done without it. The provider is Anthropic and the model is Claude. The manuscript goes to their API under a data-processing agreement: they do not train on it, they do not keep it for their own purposes, and transfers outside the EU are covered by standard contractual clauses.

What comes back is analysis. Your text is never rewritten, and nobody else sees it.

What it is used for

Reading your work and writing back. Running your account. Nothing else.

The feedback you give about which notes helped builds a preference profile attached to your account, which shapes the letters that follow. It is used for you, not aggregated and sold.

How long it is kept

Until you delete it. Delete a manuscript and it goes; ask me to delete everything and it all goes. Encrypted backups roll on a cycle, so removed material can persist there briefly before ageing out.

Your rights

Under GDPR you can ask for a copy of everything held about you, ask for it to be corrected, ask for it to be erased, and object to how it is processed. Write to me and it gets done. You can also complain to the Norwegian Data Protection Authority if you think it has not been.

Cookies

One, and it is the thing that keeps you signed in. Nothing for advertising, nothing for tracking, and therefore no banner asking you to accept anything.

Getting in touch

Any of this, including a request to delete everything, goes to editor@karlove.com. It is me who reads it, and there is nobody else to escalate to.