Privacy policy

Last updated October 8, 2026. Draft — under review.

This page explains, in plain English, what Query Hand keeps for you, why, and what we never do with it.

What’s yours stays yours

Everything in your account is yours and private to you: the people you follow, your notes about them, the queries you log, and the manuscripts you upload with their query letters, pitches and tags. Nobody else can see any of it — not other members, not agents or editors, not anyone outside Query Hand. We keep it so the app can show it back to you, and for nothing else.

The only other things we keep are your email address (it’s how you sign in — there are no passwords), which plan you’re on (your card details stay with Stripe; we never see or store the number), and brief technical logs (page requests, errors) that our hosting provider keeps for a short time so the service runs. If you press Send feedback, we keep your message, your email address and, if you leave the box ticked, the page you were on, so we can fix things and write back to you. Nobody else sees it.

How we use it

• To run your account: show your Overview and directory, send your alert emails at the times you choose, and bill your subscription.
• Now and then we may email you about Query Hand news, events and workshops. Every one of those emails has an unsubscribe link.
• We do not sell your information or share your notes, queries or manuscripts with anyone — including agents and editors.
• If you’re on Pro, your manuscript file is read when you upload it, and again when you ask for matches. To do that, its text — with its query letter, pitch and tags — is sent securely to Anthropic’s Claude, the AI that does the reading and ranking. It is used only to answer your request and is not used to train their models. No person at Query Hand, or anywhere else, reads your manuscripts. Your work is yours and is kept yours.
• If you use “Bring in my list”, your notes, opinions and query history are never shown to anyone else and never added to the shared directory. If your list names an agent or editor we don’t list yet, only their name, agency and public web page are kept as a lead for us to verify from their own page — nothing you wrote about them, and no record of who sent us the lead. Your list is read by our AI provider to sort it, kept only until you finish reviewing, then deleted.

Your directory

Welcome to our pre-built directory of more than 250 agents, editors and more, each checked against their own public pages. It’s fully customizable for you: add notes, remove anyone you don’t want, or add to it from your own document or spreadsheet. Your account gives you your own personal directory, so your notes, query history, tags and more are yours and yours alone. The directory itself holds only professional details from each person’s public submission pages.

Keeping it safe

• Your data is encrypted where it’s stored and on its way to and from your browser, and the site works only over a secure connection.
• You sign in with a one-time link sent to your email, so there is no password for anyone to steal. Keeping your email account secure is the best thing you can do for your Query Hand account.
• We use a small number of cookies to keep you signed in and to remember settings such as how your manuscripts are sorted. No tracking cookies.
• We take every reasonable step to protect your account, but no system can promise to be safe from every intrusion, and we can’t guarantee that your data will never be accessed or released without authorization.

Your choices

• You can turn alert emails off, or change when they arrive, in Settings.
• You can change your name and settings, and delete notes, queries and manuscripts from their own pages, at any time.
• You can download your queries as a spreadsheet any time, from the Download my queries button on Query Statuses.
• You can delete your whole account yourself, under Settings → Account → Delete my account. Your profile, notes, queries, manuscripts and directory changes are removed from Query Hand at once, any subscription is cancelled, and our database fully purges all of it within 7 days (that’s how long our backups last). Billing records stay with Stripe for as long as bookkeeping rules require.
• If this policy changes in a way that matters, we’ll email you before the change takes effect.

Where it lives

Your data is stored with Supabase (database), Vercel (hosting) and Stripe (billing), all in the United States, each under their own security practices. Emails are sent through Resend.

Questions

Write to hello@queryhand.com. See also our terms of service.