Privacy policy

Writing can be personal. Here is how your account information and manuscripts are handled when you use Roundtable.

Last updated: September 8, 2026

At a glance

Your draft stays yours. We do not publish your manuscript or use it to train AI, and we have opted out of training with our AI providers. We save your work so you can return to it and send relevant content to providers for feedback. You can delete manuscripts or request deletion; backup and provider retention can still apply.

This overview is a guide. The full policy below applies.

Who handles your information

Linda Meng, the sole proprietor operating Roundtable at roundtable.works, is responsible for the personal information described in this policy and is its controller where applicable data protection law uses that term. For privacy questions or requests, contact roundtablesupport@gmail.com

This policy covers the Roundtable website and application. Paddle separately handles purchase and payment data under its own Privacy policy.

Information we collect

  • Account information: your name, email address, account identifiers, sign-in method, and verification status. Password sign-in stores a password hash, not a readable password. Google sign-in supplies basic profile information, which can include your name, email, and profile picture.
  • Your work: uploaded or pasted manuscripts, titles, genre and audience details, reader preferences, questions, and generated reactions and reports.
  • Usage and billing records: credit balances and consumption, processing status, purchase and subscription identifiers, payment status, and related transaction records. We do not receive your full payment card number from Paddle.
  • Technical and support information: session identifiers, IP addresses and request information used for security and rate limiting, error and operational records, and information you send when asking for help.

Please avoid including sensitive personal information or information about other people that is unnecessary for the feedback you want. Only submit material you are entitled to share with us and our processing providers.

Assistants you connect

If you create an assistant connection key, we store its name, permission, expiry, a short identifying prefix, and a hash of the key. We show the full key once. You can revoke it in Assistant connections.

A connected assistant can retrieve the manuscripts, reader notes, reports, and credit balance available to your account. If you grant reading permission, it can also submit manuscripts and request paid AI work using your account credits. The assistant provider receives the content it requests and handles it under its own policies; Roundtable?s provider training opt-outs do not govern an assistant you choose separately. Revocation blocks new requests, but work already accepted may finish and use credits.

How and why we use it

We use account and manuscript information to authenticate you, run the readings you request, save results, provide support, and administer your credits and subscription. Where a legal basis is required, this processing is necessary to perform our contract with you or take steps you request before entering it.

We use limited technical and usage information to keep the service reliable, investigate errors, prevent fraud and abuse, and protect accounts. Where applicable, we rely on our legitimate interests in operating a secure service, balanced against your rights. We keep records necessary to comply with legal, tax, and accounting obligations on the basis of those obligations. Where consent is required for an optional use, we will ask separately, and you can withdraw it.

We do not sell your personal information or share it for cross-context behavioural advertising. Roundtable does not use manuscripts to train AI models, and we have opted out of training with our AI providers. Generating feedback does require processing by external AI providers, as explained below.

AI processing and other service providers

Relevant manuscript text, instructions, preferences, and earlier feedback may be sent to external AI providers to generate reader perspectives and editorial reports. This can include the full manuscript when the task requires it. Depending on the feature and model in use, providers may include Google, OpenAI, and Anthropic.

We have opted out of provider use of your content for AI training. Providers process requests under their applicable API terms and data handling settings and may retain content for service operation or safety monitoring. Training opt-outs do not mean zero retention. Contact us for details about the arrangements for a particular model.

We also use service providers for hosting, databases, authentication, and transactional email. Google handles Google sign-in when you choose it; Resend delivers account emails when that email service is enabled. These providers receive the information needed for their role. Paddle handles checkout, taxes, receipts, and subscription payment administration as merchant of record.

Access to your content may be necessary to investigate a support request, maintain security, or meet legal obligations. We may disclose information when required by law or reasonably necessary to protect rights and safety. If the service is transferred to a new operator, relevant information may be transferred subject to appropriate protection and notice.

Storage, retention, and international processing

We retain account information and saved manuscripts and feedback while needed to provide your account and saved workspace, unless you delete them or request deletion. Operational and support records are retained only for as long as needed to investigate issues, protect the service, and resolve requests. Billing and dispute records may need to be kept longer for accounting, legal obligations, fraud prevention, or legal claims.

You can delete a manuscript using the application’s deletion control and request account deletion by contacting us. Deletion from active systems may not immediately remove copies from backups or records that must be retained by law. Copies held by external providers follow their applicable retention arrangements. We can explain relevant retention criteria when you contact us.

We and our providers may process information in countries other than yours, where privacy laws may differ. Where applicable law requires safeguards for international transfers, these must include a recognised adequacy decision or appropriate contractual safeguards, such as standard contractual clauses. You can contact us for information about the arrangements applicable to your data.

Cookies and security

We use anonymous daily counters to understand visits to public pages and clicks on signup links. These counters contain only a public page category, a broad referral category (such as Google or ChatGPT), the event type, date, and count. We do not store visitor identifiers, raw referrer URLs, query strings, or manuscript content in analytics, and do not set analytics cookies or use analytics browser storage. Counters are retained for up to 400 days and older counters are removed when new visits are recorded. We respect browser Do Not Track and Global Privacy Control signals by skipping these measurements. The dashboard is restricted to the verified site owner.

Roundtable uses session cookies to keep you signed in and a short-lived security cookie for Google sign-in. Blocking these cookies may prevent sign-in or account features from working. Paddle and Google may use their own cookies or similar technology when you open checkout or choose Google sign-in; their policies apply to those services.

We use safeguards such as password hashing, access controls, and session protections to protect personal information. No online service or storage system is completely secure. Keep your credentials private and contact us promptly if you suspect an account security issue.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of your personal information; restrict or object to certain processing, including processing based on legitimate interests; and withdraw consent where processing relies on consent. These rights are subject to the conditions and exceptions in applicable law.

Send requests to roundtablesupport@gmail.com using your account email where possible. We may need to verify your identity, and we will respond within the time required by applicable law. You can also complain to your local data protection authority. We do not make decisions producing legal or similarly significant effects solely from the creative feedback generated about your writing.

You can stop submitting new work or close your account. Account deletion and subscription cancellation are separate requests: cancel through Billing or Paddle to stop future renewals.

Age requirements and policy changes

Roundtable is intended for adults aged 18 and over. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information so we can investigate and take appropriate steps.

We will update the date on this page when this policy changes and provide an email or in-product notice of material changes where appropriate or required. We will seek consent before a new use where the law requires it.

Roundtable. A little perspective for your next draft.