Privacy Notice — The Agent's Read

Who we are

The Agent's Read is operated by Sarah Ulicny ("we", "us"). We are the data controller for personal data processed in connection with the Service.

Data we collect

Account data: email address, hashed password, sign-in provider (e.g., Google).
Submitted content: manuscripts, queries, and writing samples you submit for assessment.
Purchase data: transaction IDs, amounts, currency, and timestamps (handled by Stripe).
Usage data: credits consumed, assessment history, IP address, basic device/browser info.
Support communications: messages you send us.

Why we collect it

To provide the Service (contract performance): create your account, deliver assessments, track credits, send transactional notifications.
To process payments (contract performance): via Stripe.
To prevent fraud and abuse (legitimate interest): security monitoring, rate limiting.
To improve the Service (legitimate interest): aggregate usage analysis.
To comply with law (legal obligation): tax records, lawful requests.

Who we share data with

Stripe — payment processor for sales, tax calculation, billing, and fraud prevention. Stripe's privacy notice: stripe.com/privacy.
AI providers — submitted content is sent to AI model providers (Google, OpenAI) to generate assessments. Content is processed transiently and is not used by these providers to train their models on our account.
Hosting and infrastructure — Lovable Cloud (Supabase, Cloudflare) for hosting, database, and authentication.
Authorities — when required by law.

Data retention

We retain account data while your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes. Submitted manuscripts are retained as part of your assessment history while your account exists. You can request deletion at any time.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or port your personal data, object to processing, or withdraw consent. To exercise any of these, contact sarahulicny@gmail.com. EU/UK residents may also lodge a complaint with their local supervisory authority.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and managed authentication. No system is 100% secure, but we work to minimise risk.

International transfers

Our service providers may process data outside your country, including in the United States. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required.

Cookies

We use only essential cookies required for sign-in and session management. We do not use marketing cookies.

Contact

Privacy questions: sarahulicny@gmail.com