Privacy Policy

1. What we collect

When you create an account we collect your name and email address (via Clerk, our authentication provider). When you upload a manuscript we collect the manuscript text. When you use the query tracker or other tools we collect the data you enter (agent names, query dates, results). We also collect basic usage data (pages visited, features used) to improve the product.

We do not collect payment card information directly — payments are handled by Stripe, which has its own privacy policy.

2. How we use your data

• Manuscript text — processed by Anthropic's Claude API solely to generate your analysis report. It is not stored by Anthropic beyond the API call.
• Email address — used to send you account-related and marketing emails (you can unsubscribe at any time from any marketing email).
• Query tracker data — used to generate anonymized, aggregated community statistics on the /stats page. Your individual query data is never attributed to you publicly.
• Usage data — used internally to understand which features are working and to prioritize improvements. Never sold or shared.

3. Your manuscript

Your manuscript is private to you. We do not share it with literary agents, publishers, other users, or any third party except Anthropic's API for the purpose of generating your analysis. We do not use your manuscript to train AI models. Manuscripts are stored securely in Cloudflare R2 and are accessible only to your account.

4. Third-party services

We use the following third-party services to operate Above the Slush:

• Clerk — authentication and account management
• Anthropic — AI analysis of manuscripts and generation of query letters and comp titles
• Stripe — payment processing
• Resend — transactional and marketing email delivery
• Cloudflare R2 — manuscript file storage
• Railway / Vercel — hosting and database

Each of these services has its own privacy policy governing the data they process on our behalf.

5. Cookies and tracking

We use cookies for authentication (set by Clerk) and to maintain your session. We do not use advertising cookies, cross-site tracking cookies, or sell data to advertising networks.

6. Community data and anonymization

Query tracker data you submit may be included in aggregated, anonymized community statistics shown on the /stats page and on agent profile pages. This data is aggregated across all users and is never attributed to any individual. Minimum thresholds (typically 3–5 submissions) are required before any aggregated stat is displayed, to protect member privacy.

7. Data retention and deletion

We retain your account data for as long as your account is active. You can delete your account at any time from Dashboard → Settings — this permanently deletes your account from our system and from Clerk. Manuscript files stored in Cloudflare R2 are deleted when you delete the associated project or your account. Some anonymized, aggregated statistical data (with no personally identifiable information) may be retained after account deletion.

8. Your rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise these rights, email support@abovetheslush.com. If you are located in the European Economic Area or the United Kingdom, you may have additional rights under GDPR or UK GDPR — please contact us to discuss.

9. Children

Above the Slush is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information.

• Right to know — you have the right to know what personal information we collect about you, how it is used, and with whom it is shared. See sections 1–4 above for a full description.
• Right to delete — you have the right to request deletion of your personal information. This is available as a self-service action in Dashboard → Settings (account deletion). You may also email us at support@abovetheslush.com.
• Right to opt out of sale — we do not sell, rent, or trade your personal information to third parties for their marketing purposes. There is nothing to opt out of.
• Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights.

To exercise your California privacy rights, email support@abovetheslush.com or use the self-service account deletion in Dashboard → Settings.

11. European Users (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or equivalent law applies to our processing of your personal data.

Legal basis for processing:

• Legitimate interests — operating and improving the service, security and fraud prevention, and aggregated analytics.
• Contract performance — processing necessary to deliver the features you paid for (manuscript analysis, agent matching, query tracking).
• Consent — marketing emails (you can withdraw consent by unsubscribing at any time).

Your data subject rights under GDPR: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object to processing based on legitimate interests.

To exercise any of these rights, use the self-service account deletion in Dashboard → Settings or email support@abovetheslush.com. We will respond within 30 days.

International data transfers: Above the Slush is based in the United States. We do not transfer your personal data outside the US except as necessary to provide the service through our sub-processors — Clerk, Stripe, Resend, Anthropic, and Cloudflare — all of which have appropriate data transfer mechanisms in place (Standard Contractual Clauses or equivalent).

Supervisory authority: if you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection supervisory authority.

12. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised date. Continued use of the Service after changes are posted constitutes your acceptance.

13. Contact

Questions about this policy? Email support@abovetheslush.com.