Privacy Policy
Last updated: April 16, 2026
Who We Are
This Privacy Policy describes how FirstReader LLC("we," "us," or "FirstReader") collects, uses, and protects information about you. FirstReader LLC is a South Carolina limited liability company.
What We Collect
When you create an account, we collect your email address and a password (stored securely via Supabase Auth). When you upload a manuscript, we store the manuscript text, metadata you provide (title, genre, POV mode, character list), and the analysis results generated from it.
How We Use Your Data
- Manuscript text is sent to Anthropic's Claude API for analysis. Your manuscript is processed and the response is stored. We do not read, share, or sell your manuscript to anyone.
- Analysis results are stored so you can access your reports at any time.
- Email address is used for account access, password resets, and occasional product updates. We will never sell your email or share it with third parties for their marketing purposes.
- Payment information is handled entirely by Stripe. We never see or store your credit card number.
Your Manuscript is Yours
You retain full ownership and copyright of your manuscript at all times. Uploading to FirstReader does not grant us any rights to your work beyond the limited, process-only license described in our Terms of Service.
AI Training: Our Commitment
FirstReader LLC does not use your manuscripts to train AI models — our own or any third party's — now or in the future, without your express separate written consent.
Anthropic, the provider of the Claude API we use for analysis, also does not use API inputs (your manuscript text and our prompts) to train their models, per Anthropic's published API data usage policy. Anthropic may retain API inputs for up to 30 days for abuse monitoring and trust-and-safety purposes, after which they are deleted from Anthropic's systems. FirstReader has no control over this retention window.
Data Storage, Retention, and Deletion
Your manuscripts and analysis results are stored in a secure database hosted by Supabase. When you delete a manuscript from your account, all associated data is permanently removed: the manuscript text, scene content, analysis results, character data, and any generated reports. This deletion is irreversible.
If you delete your account, all manuscripts, reports, and personal data are permanently deleted.
Inactive account purge. If you do not sign in to your account for 24 consecutive months, we may delete your account and all associated data. We will send a reminder email to the address on file before permanent deletion. Signing in at any point during the notice window resets the inactivity clock.
Your Rights
Regardless of where you live, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data (by deleting manuscripts, reports, or your entire account).
- Export your reports in a machine-readable format (available in-app).
- Withdraw consent for processing where consent is the basis.
- Object to or restrict processing in certain circumstances.
To exercise any of these rights, email privacy@firstreader.app. We'll respond within 30 days.
If you are a resident of the European Union, the United Kingdom, or California, you have additional rights under the GDPR, UK GDPR, or CCPA, including the right to data portability and the right to lodge a complaint with a supervisory authority (such as your national data protection authority or the California Attorney General). We honor these rights globally.
We do not sell your personal information. We do not share it with third parties for their independent marketing purposes.
Third-Party Services
- Anthropic (Claude API) processes your manuscript text to generate analysis. Anthropic does not use API inputs to train their models. API inputs may be retained by Anthropic for up to 30 days for abuse monitoring, then deleted.
- Supabase provides authentication, database, and file storage.
- Stripe processes payments. Stripe's privacy policy governs payment data.
- Vercel hosts the web application.
- Resend delivers transactional emails (account confirmations, password resets, report notifications).
Cookies
We use essential cookies for authentication (keeping you logged in) and session management. We do not use tracking cookies, advertising cookies, or third-party analytics.
Children's Privacy
FirstReader is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Our Terms require users to be at least 16. If we learn that we have collected information from a child under 13, we will delete it promptly.
Copyright Matters
For DMCA takedown notices and copyright-related inquiries, see our Copyright & DMCA Policy.
Changes to This Policy
We may update this policy as the service evolves. Significant changes will be communicated via email at least 14 days before they take effect, where practicable. The "last updated" date at the top reflects the most recent revision.
Contact
Questions about this policy? Contact us at privacy@firstreader.app.
FirstReader LLC
6650 Rivers Ave., Suite 100
Charleston, SC 29406