Privacy Policy

What we collect

When you use the Manuscript Readiness Check tool, we collect:

• Your email address: used so we can follow up with your report and relevant resources. You can unsubscribe at any time.
• Your target journal name: used to personalize the analysis.
• Your manuscript file: processed to generate your requested review. Do not upload PHI, a HIPAA limited data set, or directly identifiable patient information.

When you submit a contact form or get a review, we also collect your name and any information you provide in your message.

How we use it

• Your manuscript is analyzed using the subprocessors listed in our Trust Center and handled under purpose-limited access controls.
• Your manuscript content is not used to train Manusights models or model-provider models.
• Your email address is used to send your report results and may be used for follow-up about our review services. We do not sell or share your email with third parties.
• We may use aggregated, anonymized usage data (e.g., number of submissions per week) to improve the tool.

Data retention

• Source manuscript files: Scheduled for deletion seven days after the review lifecycle settles. You can request earlier deletion by emailing team@manusights.com.
• Generated report artifacts: Free preview artifacts are scheduled for deletion 30 days after the review lifecycle settles. Completed Full Reviews and Dossiers remain available in your account without an automatic expiry, unless you request deletion. This also applies to completed reports from Lab Plan workspaces.
• Manuscript fingerprints: We keep a short fingerprint of each upload: its title and a compact set of word features from its opening text. It lets us recognize a revised version of the same paper and check public publication databases for whether it was published. We clear the stored title two years after upload.
• Operational records: Job status, security, support, billing, and audit records may be kept longer when needed for fraud prevention, accounting, legal obligations, or service reliability. These records are minimized and are not used for model training.
• Email addresses: Retained until you unsubscribe. You can request deletion at any time by emailing team@manusights.com.
• Contact form submissions: Retained for up to 2 years for business purposes, then deleted.

Browser storage

We use functional browser storage (cookies and localStorage) for the site to work, not for advertising:

• Sign-in session: a secure cookie keeps you signed in to your workspace.
• Returning-customer recognition: a small flag remembers that this browser has used Manusights before, so we can offer you a faster sign-in path instead of starting over.
• Your draft session: we remember details of your most recent upload (such as your email and target journal) so a return visit can pick up where you left off.

You can clear this at any time from your browser settings. Analytics cookies are separate and governed by the cookie banner.

Third-party services

We use the following services to operate the site:

• Anthropic (Claude API): processes manuscript text for selected analysis tasks. Anthropic's API terms prohibit using API inputs for model training.
• OpenAI: may process task context for structured-output fallback and selected review tasks. API inputs are not used to train OpenAI models.
• Resend: delivers email notifications. Your email address is passed to Resend for delivery purposes.
• Vercel: hosts the website. Vercel may collect standard server access logs (IP address, browser type, pages visited).
• Supabase: used for authentication, durable job state, billing metadata, and operational app records.
• Google Cloud: runs the core review API and worker services in us-east1.
• Stripe: processes payments, receipts, and refunds. Stripe receives billing information, not manuscript content.
• Public research databases (OpenAlex, Semantic Scholar, Crossref): we search them with your paper's title, short search phrases, and the references you cite, to check those references, find related work, and see whether a reviewed paper was later published. They receive search queries, not your manuscript file.
• YouTube (Google): some blog posts embed our own videos with YouTube's player. When one of those pages loads, your browser connects to YouTube, which may set cookies and collect usage data under Google's privacy policy. Pages without a video make no connection to YouTube.

Connected apps

You can allow another application, such as an AI assistant, to use your Manusights account on your behalf. An app can use your account only after you sign in and approve it on a Manusights consent screen that names the app.

• Without an account: reference checks and journal AI-policy lookups also work in a connected app without signing in. We then receive only the references or the journal name, plus a one-way hash of the anonymous identifier the app sends, which we use for rate limits and usage counts.
• What a connected app can do with your account: check reference lists, look up journals' AI policies, upload manuscripts you give it, start previews, and read the reviews on your account. Some apps, but not the ChatGPT plugin, can also open a Stripe checkout page for a paid review.
• What it cannot do: charge you. Payment always happens on Stripe's own checkout page, which you confirm, and the app never receives your card details.
• What we share with it: the email address on your account and the reviews belonging to it. Nothing else about you is exposed.
• Reference checks: the app sends us only the references it read from your manuscript, not the manuscript itself. We look each one up in Crossref, the DOI registry and Retraction Watch and return the results. We keep a record that a check ran and how many references fell into each result, not the references.
• Institution licences: if your university or department licenses Manusights, we use the domain of your account email (the part after the @) to apply the licence. We may tell a licensing institution how many accounts on its email domains used Manusights. We never share names, email addresses or anyone's work with it.
• Removing access: open connected apps in your account and disconnect it. That immediately revokes the app's access, and its existing sessions stop working.

Manuscripts uploaded through a connected app are handled exactly like manuscripts uploaded on this website, under the retention and processing terms above. The app's own handling of your data is governed by its privacy policy, not ours.

Your rights

You have the right to access, correct, or delete any personal information we hold about you. To exercise these rights, email team@manusights.com and we will respond within 30 days.

Contact

Questions about this policy? Email team@manusights.com.