Privacy Policy

1. Controller

The controller for the processing of personal data in Manuscribe is:

Represented by its Managing Director, Nick Sebastian Seidel.

2. Overview

Manuscribe is a tool for planning and writing books. We process personal data only as far as needed to run Manuscribe, your account and the features you use. We don't sell data, don't use advertising or analytics trackers, and don't read your writing unless you ask us to (for example in support) or the law requires it.

3. Hosting, database and server logs

Manuscribe runs on the platform of Lovable Labs Incorporated, 1111b South Governors Avenue, Dover, DE 19904, USA ("Lovable"). Database, sign-in and file storage ("Lovable Cloud") run on the infrastructure of Supabase, Inc. in a data centre in the European Union (Ireland, Amazon Web Services). We have a data processing agreement with Lovable under Art. 28 GDPR.

When you use Manuscribe, technically necessary data is recorded in server logs, in particular IP address, date and time, requested address, amount of data, browser type and operating system. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is a secure and stable service. Logs are deleted after a short period unless security events require longer storage.

4. Your account

To use Manuscribe you create an account with an email address and a password. The password is stored only in encrypted (hashed) form. We send emails to confirm your address and to reset your password through Lovable Cloud's email service. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract).

5. Your content

We store the content you create in Manuscribe – such as projects, chapters, notes, research, versions and uploaded files – to provide the service (Art. 6 (1) (b) GDPR). Your content is private: technical access controls ensure that only your account can read and change it. Content is deleted when you delete it or your account; it may remain in the provider's backups until they are overwritten in the regular cycle.

6. AI features (optional)

Manuscribe offers optional AI features, for example to revise a passage, for chapter notes, suggestions, chapter and card drafts and the quick project setup. Everything else works without AI, and you can switch the AI features off in the settings at any time.

Only when you trigger an AI feature do we send the content it needs – for example the selected passage, your instruction, a chapter title and excerpt, or details of your project – to Lovable's AI service ("Lovable AI"), which forwards it to the provider of the language model (currently Google, Gemini models) to generate the answer. This may involve processing outside the EU, in particular in the USA. The legal basis is Art. 6 (1) (b) GDPR, as you expressly request the feature.

For each AI request we store the time, the feature, its size (characters and tokens) and the credits used, but not your text. This is used to account for your credit balance and to prevent abuse (Art. 6 (1) (b) and (f) GDPR) and is deleted with your account. AI answers can be wrong; please check them before using them.

7. Browser storage (no advertising or analytics cookies)

Manuscribe keeps your sign-in session and settings such as colour theme and language in your browser's local storage. This is strictly necessary for the service you request (§ 25 (2) no. 2 TDDDG). We don't use cookies or similar techniques for advertising, tracking or analytics.

8. Error reports

If a technical error occurs in the app, technical details of the error (message, affected page, browser information) are sent to Lovable so we can detect and fix errors. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is a stable, secure service.

9. Fonts

The fonts used ("Inter" and "Crimson Pro") are loaded from our own server. No connection to Google Fonts or other third parties is made.

10. Recipients, processors and transfers outside the EU

We use the following service providers:

• Lovable Labs Incorporated (USA): operation and hosting of the app, Lovable Cloud (database, sign-in, files, emails), Lovable AI and error reports;
• Supabase, Inc. (USA) with a data centre in the EU (Ireland): infrastructure for database, sign-in and file storage, as a sub-processor of Lovable;
• Google (Gemini language models): processing the content of AI requests, as a sub-processor of Lovable, only when you use the AI features.

Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework if the recipient is certified, or on the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR).

11. Retention and deletion

We keep your data as long as your account exists. You can delete your account yourself in Manuscribe at any time; this deletes your content, uploaded files and account data. Legal retention obligations remain unaffected.

12. Your rights

You have the right to:

• access (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR) – you can export your data from Manuscribe as a file at any time,
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent with effect for the future (Art. 7 (3) GDPR).

A message to the email address above is enough.

13. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority, in particular where you live. Our competent authority is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen).

14. Encryption

Communication between your browser and Manuscribe is encrypted via HTTPS (TLS).

15. Changes

We update this policy when Manuscribe or the law changes, for example when paid offers are added. The version published here applies. See also the Terms of Use.