Books by SuperML.org (“Books,” “we,” “us”) is a private manuscript review workspace. This page explains what we collect, why, and who can see it. It's written in plain language rather than dense legal boilerplate — if anything here is unclear, reach out (see Contact below).
What we collect
- Account information, from Google or GitHub sign-in: your name, email address, and profile picture. We don't collect a password — authentication is handled entirely by Google/GitHub via Supabase Auth.
- Manuscript content you upload: chapter text, cover images, book metadata (title, description, ISBN, category).
- Review activity: comments, replies, and per-chapter review-completion status that you or reviewers you've invited create.
- Invitation details: the email address you invite a reviewer with, and whether that invitation was accepted, declined, or revoked.
Who can see your content
A book's content is visible only to its owner and to reviewers who have accepted an invitation for that specific book (or, for chapter-scoped invitations, that specific chapter). This is enforced at the database level — access isn't just hidden in the interface, it's not queryable at all without the right permission. We don't have a public catalog or search of manuscripts.
How we use your information
- To operate the review workflow itself — rendering chapters, anchoring and displaying comments, tracking review rounds.
- To send transactional email (reviewer invitations) via our email provider, Resend.
- To authenticate you and enforce access control on your books and reviews.
We don't run ads, sell data to third parties, or use your manuscript content to train any model.
Where your data lives
Data is stored with Supabase (Postgres database and file storage). Manuscript files and cover images are kept in a private storage bucket and served only via short-lived signed URLs, never a permanent public link. Row-level security policies restrict every table to the people who actually have access to that book or review round.
Third-party services
- Supabase — authentication, database, and file storage.
- Resend — delivering reviewer invitation emails.
- Google / GitHub — sign-in identity provider, at your choice.
Data retention and deletion
We keep your account and book data for as long as your account is active. There's no self-serve account deletion yet — if you'd like your account or a specific book's data removed, contact us and we'll process it manually.
Children's privacy
Books by SuperML.org isn't directed at children under 13 and we don't knowingly collect their data.
Changes to this policy
If this policy changes materially, we'll update the date at the top of this page.
Contact
Questions about this policy or your data: reach us via www.superml.dev.
See also our Terms & Conditions.