Privacy Policy

Manuscriptly operates this service and, for data-protection law, is the controller of the personal information described here. You can reach us any time at info@manuscriptly.net.

We collect only what the service needs to run:

• Account details: your name and email address, provided through Auth0 when you sign up (including sign-in with Google or Microsoft).
• Your manuscripts and project files: the DOCX files you upload, your target journal, and the audit results and edits produced for you.
• Payment information: purchases are processed by Lemon Squeezy as merchant of record. We never receive your full card details; we receive confirmation of the transaction and your plan.
• Usage analytics, only with your consent: product analytics events (PostHog) and session replays (Sentry) are captured only if you accept the analytics category in the cookie banner.
• Operational error data: if something breaks, our error monitoring (Sentry) records the technical failure. This runs without analytics consent but is configured not to attach your IP address or identity to events.
• Support communications: emails you send us.

We process personal information to provide the audit service and run the business, specifically to:

• run compliance audits on the manuscripts you submit and show you the results,
• create and manage your account and subscription,
• process payments and prevent fraud (through Lemon Squeezy),
• answer support requests,
• keep the service secure and fix failures,
• understand how the product is used, only where you have consented to analytics, and
• meet legal obligations.

Where the GDPR applies, our legal bases are performance of a contract (providing the service you signed up for), your consent (analytics and session replay), our legitimate interests (security and error monitoring, run in a way designed not to identify you), and compliance with legal obligations.

Your unpublished research gets stricter treatment than any other data we hold:

• It is encrypted in transit (TLS 1.3) and at rest (AES-256).
• We never sell it, share it for advertising, or use it to train AI models, and the AI provider that runs your audit is configured not to log or train on it either.
• It is processed only by the providers in the table below that are marked as handling manuscript content, and only to deliver your audit.
• It stays unpublished: nothing is submitted anywhere until you download your manuscript and submit it to the journal yourself.
• You can request deletion of any paper, or your whole account, at any time, and it is removed completely, files and analysis included.

We use a small set of service providers. This is the complete list, including whether each one ever handles your manuscript content:

We do not sell personal information to anyone, and we do not share it for cross-context behavioural advertising.

The site sets a session cookie to keep you signed in and a cookie to remember your consent choice. Analytics cookies are set only after you accept them in the banner; until then, PostHog captures nothing and Sentry records no session replays. The full list, with lifetimes, is in the Cookie Policy, where you can also reopen your preferences and change your mind at any time.

The providers listed above operate infrastructure in the United States and other countries, so your information is transferred internationally to deliver the service. Each provider commits to safeguards for international transfers in its data processing terms, and your manuscript remains encrypted in transit and at rest wherever it is processed.

We keep your account data and manuscripts while your account is active so your projects remain available to you. Delete a paper and it is gone, files and analysis included. Ask us to delete your account and everything goes with it. Transaction records are retained by Lemon Squeezy and us as required by tax and consumer law. We do not keep personal data longer than the purpose it was collected for requires.

Wherever you are, you can access, correct, export or delete your personal information by emailing info@manuscriptly.net. Depending on where you live you also have specific legal rights:

• Australia: we handle personal information in line with the Australian Privacy Principles. If you are unhappy with our response to a complaint, you can contact the Office of the Australian Information Commissioner (OAIC).
• EU, EEA and UK (GDPR and UK GDPR): access, rectification, erasure, portability, restriction of and objection to processing, withdrawal of consent at any time, and complaint to your supervisory authority.
• California (CCPA and CPRA): the rights to know, correct and delete, and to non-discrimination for exercising them. We do not sell or share personal information as those laws define it.

We answer rights requests within 30 days. We will never discriminate against you for exercising any of them.

Traffic is encrypted with TLS 1.3, stored files with AES-256, and access to production systems is restricted to the people who operate the service. No online service can promise perfect security, but if a breach ever affects your data we will notify you and the relevant regulator as the law requires.

Manuscriptly is a tool for researchers and is not directed at children. We do not knowingly collect personal information from anyone under 18; if you believe we have, contact us and we will delete it.

When we change this policy we update the date at the top of this page, and if a change meaningfully affects how your data is handled we will tell you by email or in the app before it takes effect.

Privacy questions, complaints and rights requests: info@manuscriptly.net.