https://submitme.app/assets/PrivacyPolicyPage-DM58lZcB.js

1import{j as e,H as t,L as s,i as r}from"./index-CrxfwN2m.js";function n(){return e.jsxs(e.Fragment,{children:[e.jsxs(t,{children:[e.jsx("title",{children:"Privacy Policy — SubmitMe"}),e.jsx("meta",{name:"description",content:"SubmitMe privacy policy: what data we collect, how we use it, and your rights under GDPR and CCPA."})]}),e.jsxs("div",{className:"min-h-screen bg-white flex flex-col",children:[e.jsxs("header",{className:"sticky top-0 z-50 bg-cream-100/95 backdrop-blur border-b border-cream-200 px-6 h-16 flex items-center justify-between",children:[e.jsxs(s,{to:"/",className:"flex items-center gap-2 font-serif font-bold text-ink-900 text-lg",children:[e.jsx(r,{className:"w-5 h-5 text-brand-600"}),"SubmitMe"]}),e.jsxs("nav",{className:"flex items-center gap-6 text-sm text-gray-500",children:[e.jsx(s,{to:"/terms",className:"hover:text-gray-900 transition-colors",children:"Terms"}),e.jsx(s,{to:"/contact",className:"hover:text-gray-900 transition-colors",children:"Contact"}),e.jsx(s,{to:"/login",className:"hover:text-gray-900 transition-colors",children:"Sign in"})]})]}),e.jsx("main",{className:"flex-1 px-6 py-16",children:e.jsxs("div",{className:"max-w-2xl mx-auto",children:[e.jsx("p",{className:"text-sm font-semibold text-brand-600 uppercase tracking-wide mb-3",children:"Legal"}),e.jsx("h1",{className:"text-3xl font-serif font-bold text-gray-900 mb-2",children:"Privacy Policy"}),e.jsx("p",{className:"text-sm text-gray-400 mb-12",children:"Effective date: May 20, 2026"}),e.jsxs("div",{className:"prose prose-gray max-w-none space-y-10 text-gray-600 leading-relaxed",children:[e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"1. Who we are"}),e.jsxs("p",{children:["SubmitMe (",e.jsx("strong",{children:"submitme.app"}),") is a submission tracking tool for writers. We are operated by Blue Planet Media, LLC and can be reached through our"," ",e.jsx(s,{to:"/contact",className:"text-brand-600 hover:underline",children:"contact form"}),"."]})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"2. Data we collect"}),e.jsx("p",{className:"mb-3",children:"We collect only what we need to provide the service:"}),e.jsxs("ul",{className:"list-disc pl-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Account information:"})," your name, email address, and hashed password when you register."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Submission data:"})," the projects, agents, query letters, and submission history you create inside SubmitMe. You retain ownership of your submission data."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Billing information:"})," your subscription tier and Stripe customer/subscription identifiers. We do not store payment card details — these are handled directly by Stripe."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Gmail OAuth credentials:"})," if you connect your Gmail account, we store an encrypted OAuth refresh token to send emails on your behalf and to read the content of email threads that originated from SubmitMe (for example, to display agent replies and enable you to reply in-app). SubmitMe accesses only Gmail messages and threads associated with submissions you initiate through the platform. We do not use Gmail data for advertising, profiling, model training, or any purpose unrelated to providing the email tracking and reply features. SubmitMe's use and transfer of information received from Google APIs adheres to the ",e.jsx("a",{href:"https://developers.google.com/terms/api-services-user-data-policy",target:"_blank",rel:"noopener noreferrer",className:"text-brand-600 hover:underline",children:"Google API Services User Data Policy"}),", including the Limited Use requirements."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Usage events:"})," records of AI-assisted actions (e.g., book evaluations, query letter reviews) used to enforce plan limits and resolve billing disputes."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Technical data:"})," server logs including IP addresses and request timestamps, retained for up to 30 days for security purposes."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Session information:"})," each time you sign in, we record your browser, operating system, device type, IP address, and an approximate location derived from that IP (typically city-level, not precise). This is linked to your account and used to help us troubleshoot problems you report."]})]})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb

1-3",children:"3. How we use your data"}),e.jsxs("ul",{className:"list-disc pl-6 space-y-2",children:[e.jsx("li",{children:"To create and maintain your account and deliver the service."}),e.jsx("li",{children:"To process payments and manage your subscription via Stripe."}),e.jsx("li",{children:"To send transactional emails (email verification, password reset) via Amazon SES."}),e.jsx("li",{children:"To send emails to agents on your behalf when you use the Gmail integration."}),e.jsx("li",{children:"To enforce plan quotas and detect abuse."}),e.jsx("li",{children:"To improve the service — we may review aggregated, anonymised usage patterns."})]}),e.jsx("p",{className:"mt-3",children:"We do not sell your data. We do not use your data for advertising. We do not share your submission content with third parties except the sub-processors listed below."})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"4. Sub-processors"}),e.jsx("p",{className:"mb-3",children:"We share data with the following third parties solely to operate the service:"}),e.jsxs("ul",{className:"list-disc pl-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Stripe"})," — payment processing. Stripe stores your billing details under their own privacy policy."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Google"})," — Gmail OAuth for sending emails. Google's privacy policy governs your Google account."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Amazon Web Services (SES)"})," — transactional email delivery."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Anthropic"})," — AI-powered features (book evaluations, query letter feedback). Content you submit for AI-powered features is sent to Anthropic's API solely to provide those features. We do not permit Anthropic to use your content to train public AI models."]})]})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"5. Legal basis for processing (GDPR)"}),e.jsx("p",{className:"mb-3",children:"If you are in the European Economic Area (EEA) or UK, we process your data under the following lawful bases:"}),e.jsxs("ul",{className:"list-disc pl-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Contract:"})," processing necessary to provide the service you signed up for (account, submissions, billing)."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Legitimate interests:"})," security logging, abuse prevention, and service improvement."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Consent:"})," connecting your Gmail account. You can withdraw this consent at any time by disconnecting Gmail in Settings."]})]})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"6. International data transfers"}),e.jsx("p",{children:"Your information may be processed in countries outside your country of residence, including the United States. Where required by law, we rely on appropriate safeguards for such transfers."})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"7. Data retention"}),e.jsx("p",{children:"We keep your data for as long as your account is active. If you delete your account, we permanently delete your profile, projects, submissions, query letters, and Gmail credentials within 30 days, except where retention is required by law or necessary to resolve active billing disputes. Usage event records may be retained for up to 12 months for billing dispute resolution, after which they are deleted."})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"8. Your rights"}),e.jsx("p",{className:"mb-3",children:"Depending on where you live, you may have the following rights:"}),e.jsxs("ul",{className:"list-disc pl-6 space-y-2",children:[e.jsxs("li",{children:[e.jsx("strong",{children:"Access:"})," request a copy of the personal data we hold about you."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Rectification:"})," correct inaccurate data (your name and email can be updated in Settings)."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Erasure:"})," delete your account and all associated data — available directly in Settings → Delete account."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Portability:"})," request an export of your data in a machine-readable format."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"Objection / restriction:"})," object to certain processing or ask us to restrict how we use your data."]}),e.jsxs("li",{children:[e.jsx("strong",{children:"California (CCPA):"})," California residents have the right to know what personal information we collect, to delete it, and to opt out of its sale (we do not sell personal information)."]})]}),e.jsxs("p",{className:"mt-3",children:["To exercise any of these rights, use our"," ",e.jsx(s,{to:"/contact",className:"text-brand-600 hover:underline",children:"contact form"}),". We will respond within 30 days."]})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb

1-3",children:"9. Security"}),e.jsx("p",{children:"All data in transit is encrypted via HTTPS/TLS. Passwords are hashed with bcrypt and never stored in plain text. Gmail refresh tokens are encrypted at rest. We apply industry-standard access controls and monitor for unauthorized access."})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"10. Cookies and local storage"}),e.jsx("p",{children:"SubmitMe does not use advertising or cross-site tracking cookies. We store authentication credentials in browser storage solely to maintain your authenticated session."})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"11. Children's privacy"}),e.jsx("p",{children:"SubmitMe is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have done so inadvertently, please contact us and we will delete the data promptly."})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"12. Changes to this policy"}),e.jsx("p",{children:"We may update this policy from time to time. When we do, we will update the effective date above. If we make material changes, we will notify you by email or by a prominent notice in the app before the changes take effect."})]}),e.jsxs("section",{children:[e.jsx("h2",{className:"text-lg font-semibold text-gray-800 mb-3",children:"13. Contact"}),e.jsxs("p",{children:["Questions or concerns about this policy? Use our"," ",e.jsx(s,{to:"/contact",className:"text-brand-600 hover:underline",children:"contact form"}),". If you are in the EEA and believe we have not addressed your concern, you have the right to lodge a complaint with your local data protection authority."]})]})]})]})}),e.jsxs("footer",{className:"border-t border-gray-100 px-6 py-8 text-center text-xs text-gray-400",children:["© ",new Date().getFullYear()," SubmitMe (submitme.app). All rights reserved."," ",e.jsx(s,{to:"/terms",className:"hover:text-gray-600 transition-colors",children:"Terms"})," · ",e.jsx(s,{to:"/privacy",className:"hover:text-gray-600 transition-colors",children:"Privacy"})]})]})]})}export{n as default};