QueryRight

Legal

Privacy Policy

Last updated: October 3, 2026

This Privacy Policy explains how QueryRight ("QueryRight," "we," "us") collects, uses, shares, and protects information when you use our website and services (the "Service"). It applies to authors, literary agents, and anyone else who visits or creates an account with QueryRight. By using the Service, you agree to the practices described here.

1. Who we are

QueryRight is operated as an independent project. For the purposes of privacy law (including the EU/UK General Data Protection Regulation), QueryRight acts as the data controller for personal information collected through the Service. You can reach us at hello@queryright.com for any privacy question or request.

2. Information we collect

Account information

When you create an account, we collect your email address and a securely hashed password (authentication is handled by our infrastructure provider; we never see or store your password in plain text). You can also sign in with Google, in which case we receive your name and email address from your Google account rather than setting a password.

Uploaded files

Manuscript samples and profile photos you choose to upload are stored by our infrastructure provider and are subject to the same access controls as the rest of your account data.

Author & manuscript information

Book details you submit to generate matches or build a pitch — title, genre, comp titles, themes and tropes, word count, synopsis, pitch text, and similar fields.

Agent profile information

If you create or claim an agent account, we collect your name, agency, professional bio, submission preferences, and similar professional details you choose to provide.

Sourced agent information

Separately, some literary agent profiles are compiled from publicly available sources (agency websites, publicly listed submission guidelines, and similar public materials) before that agent has created or claimed an account. This is professional, publicly-available information about individuals acting in a professional capacity, not information about them as private individuals. Any agent may claim, correct, or request removal of their profile — see Section 12.

Messages

Content of messages you send through the Service between authors and agents.

Query tracking & saved items

If you use My Queries or Save, we store which agents you saved or queried, the book each relates to, how you sent the query, the dates you sent it and received a reply, and any notes you add.

Comments & reports

The text of comments you post about agents, and any reports you file about a comment (including your reason). Comments are shown publicly without your name, but we store which account wrote each one so we can moderate and respond to legal requests.

Feedback

If you send us feedback through the feedback form, we store your message together with your email address, the page you were on, your browser and device details, and whether your account is an author or agent account. We use this to fix problems, improve QueryRight and follow up with you if needed.

Activity status

While you have the site open, we record a "last active" timestamp on your account. We use it to avoid emailing you about things you have likely already seen.

Usage & device information

Standard technical information collected automatically — IP address, browser type, device type, pages visited, and similar server-log data collected by our hosting infrastructure. We do not currently use third-party analytics or advertising trackers. If that changes, this policy will be updated first.

3. How we use information

We use the information above to:

  • Operate the Service, including generating agent/author matches
  • Enable messaging and pitch visibility between users as you direct
  • Send transactional email (account, claim status, message notifications)
  • Respond to support requests
  • Maintain the accuracy and integrity of the agent database
  • Calculate reply-time statistics, and display and moderate author comments
  • Detect, prevent, and address fraud, abuse, or security issues
  • Comply with legal obligations

We do not sell your personal information, ever.

5. How we share information

With other users, as you direct

Manuscript details are used only to generate your matches and are not shown to agents unless you set a pitch to "live" on the Pitch Board, at which point its headline, pitch text, and book details become visible to verified agents browsing the board. You can set a pitch back to draft or paused at any time. Messages are visible only to the sender and recipient.

Service providers

We use a small number of infrastructure providers to run the Service, including database/authentication hosting, transactional email delivery, and application hosting. We also use bot-protection (CAPTCHA) and rate-limiting services, currently Cloudflare Turnstile and Upstash, to protect sign-up and sign-in from abuse; these may process your IP address and browser details. These providers process data only on our instructions and only as needed to provide their service to us.

Comp Lister third-party lookups

Our comparable-title tool queries public book-data APIs (Google Books, the New York Times Bestseller Lists, and Open Library) using search terms derived from your book's genre and metadata. These queries do not include your personal account information.

Comments & reply-time statistics

Comments you post appear on the relevant agent's public profile without your name. Reply-time statistics are aggregated (medians) from dates authors log and are shown only once at least five authors have logged a query to that agent. Your individual query log is not displayed to agents or to other users. Our administrators can see which account wrote a comment, and we may disclose that if required by law or valid legal process, or where needed to resolve a claim about a comment.

Legal & safety

We may disclose information if required by law, subpoena, or court order, or where we believe in good faith it's necessary to protect the rights, safety, or property of QueryRight, our users, or the public.

Business transfers

If QueryRight is ever acquired, merged, or transferred, user information may transfer as part of that transaction. We'll notify you if this happens and a materially different entity takes over your data.

6. Data retention

We keep your information for as long as your account is active. If you ask us to delete your account (email hello@queryright.com), we delete or anonymize your personal information within a reasonable period, except where we're required to retain certain records for legal, security, or fraud-prevention purposes. Comments you posted are deleted along with your account. Comments hidden by moderation stay stored but are not shown publicly. If a comment is the subject of a pending complaint or legal request, we may keep a record of it, and of the account that posted it, for as long as needed to handle that matter.

7. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, object to or restrict certain processing, and withdraw consent where processing is based on consent. To exercise any of these rights, email hello@queryright.com. We'll respond within a reasonable time and, in any case, within the timeframe required by applicable law.

EEA / UK residents

You have the rights described above under the GDPR, and the right to lodge a complaint with your local data protection supervisory authority.

California residents

Under the CCPA/CPRA, you have the right to know what personal information we collect, request deletion, and opt out of the "sale" or "sharing" of personal information — though we do not sell or share personal information as those terms are defined by California law. We won't discriminate against you for exercising these rights.

8. International data transfers

QueryRight serves users internationally, and the infrastructure providers we use may process and store information in countries other than your own. Where required, we rely on appropriate safeguards for these transfers.

9. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and database-level access controls (row-level security) that restrict data access to what each user is authorized to see. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

10. Children's privacy

QueryRight is not directed at, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll delete it.

11. Cookies & similar technologies

We currently use only essential cookies required to keep you signed in and to secure your session. We do not currently use advertising or third-party analytics cookies. If that changes, we'll update this policy and, where required by law, ask for your consent first.

13. How matching works

Agent/author matching on QueryRight is deterministic and rule-based — matches are generated by comparing structured fields (genre, comp titles, themes, word count, and similar data) against agent criteria, and every match is shown with the specific evidence behind it. This isn't used to make any legal, financial, or similarly significant automated decision about you, and you're always free to disregard, question, or contact us about any match.

14. Changes to this policy

We may update this policy as the Service evolves. If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you directly.

15. Contact us

Questions about this policy, or requests regarding your personal information, can be sent to hello@queryright.com.