Is It Safe to Upload Your Manuscript to an AI Tool?

You have spent years on this book, and now a tool wants the whole file. It is a reasonable moment to pause. Stories about AI companies training on writing they did not pay for have made a lot of novelists wonder whether pressing "upload" means giving their book away. The honest answer is calmer than the headlines: most of the risk comes down to a few settings and a few lines in the terms, and you can check all of them in ten minutes.

This guide explains what actually happens to text you upload, what the big general tools do with it by default as of September 2026, what uploading does and does not mean for your rights, and a short checklist you can use on any tool, including ours. If you are weighing tools more broadly, our roundup of the best tools for editing a manuscript covers what each one is for.

What happens to a manuscript after you upload it

"Is it safe?" is really three separate questions, and tools answer them differently.

• Training. Could your words be used to teach the company's next AI model? This is the fear behind "does ChatGPT steal your writing". Training does not mean your book is stored and handed out to other people word for word. It does mean your text becomes part of what the model learns from, and you cannot take it back out afterwards.
• Retention. How long does the company keep your text on its servers, even if it never trains on it? Some keep it only as long as you do, some keep it for a set period after you delete it, and some keep it for years.
• Human review. Can a person at the company, or a contractor, read what you uploaded? Several services have staff review a sample of conversations for safety and quality.

A tool can be fine on one of these and loose on another. A service that never trains on your writing but keeps it indefinitely is a different proposition from one that trains by default but deletes quickly. So check all three.

The settings that matter on the big general tools

Here is what each company's own help pages say about its consumer plans, the free and personal paid tiers most authors use, as of September 2026. Business and enterprise plans usually work differently, and these policies change, so check the pages linked below before you rely on them.

Two things stand out. First, the business versions of these tools generally do not train on your text by default, while the personal versions often do: OpenAI says its Business, Enterprise and API offerings do not use your inputs for training by default, and Anthropic's consumer changes explicitly do not apply to its commercial and API terms. Second, Google is unusually direct about human review. Its Gemini privacy page asks you not to enter anything confidential you would not want a reviewer to see.

None of this means you should avoid these tools. It means that if you paste chapters into a general chat assistant, you should switch off the training setting first, and know how long the text is kept. Privacy is also not the only question with a general chatbot on a whole novel: they read a long book in pieces, which is why AI tends to forget the middle of your book (we compare which tools read it whole in editing software that reads your whole manuscript), and they lean towards praise, which we cover in why an AI book editor should give honest feedback, not flattery.

Sources:OpenAI Help Center, data controls in ChatGPT·OpenAI Help Center, how your data is used to improve model performance·OpenAI Help Center, chat and file retention in ChatGPT·Anthropic Privacy Center, is my data used for model training?·Anthropic, updates to consumer terms and privacy policy·Google, Gemini Apps Privacy Hub·Grammarly Support, Product Improvement and Training control

Does uploading affect your copyright or first publication rights?

This is the worry behind a lot of hesitation, especially for authors planning to query agents: if I upload my unpublished manuscript, have I "published" it, or given something away that a publisher will want later? We are not lawyers and this is not legal advice, but the basics are well established.

Your copyright does not move. In the United States, the Copyright Office says a work is protected the moment it is created and fixed in a tangible form, a file on your laptop included. Uploading a copy to a service for processing does not transfer ownership. What you should read is the license the terms ask you to grant, which is normally limited to what the service needs to run: storing and processing your text so it can respond to you.

Uploading is not publishing. The Copyright Office defines publication as distributing copies of a work to the public, by sale, transfer, rental, lease or lending. Sending your file to a private account that only you can see does not fit that description. "First rights" in a publishing contract are about the first time the work reaches the public, and a tool that keeps your manuscript private to you does not put it there.

Training is the real concern, and the Authors Guild says so. Its April 2026 statement warns publishing professionals against uploading authors' manuscripts to consumer AI systems without permission, and says that where AI is used, the manuscript must not be used for training, for example by opting out in the user settings. Its guidance for authors notes that, by default, material you enter into almost all public chatbots can be used for training, and that uploading drafts can sometimes conflict with a publisher's exclusivity terms. If you already have a publishing contract, check what it says about AI before you upload anything. If you are still querying, the practical step is simple: use tools that do not train on your work, or switch training off.

Sources:U.S. Copyright Office, copyright in general (when is my work protected?)·U.S. Copyright Office, definition of publication·The Authors Guild, use of consumer AI systems in publishing (April 2026)·The Authors Guild, AI best practices for authors

A checklist for any tool's terms

Before you upload a book anywhere, look for plain answers to these five questions on the tool's privacy or security page. If you cannot find an answer, ask support, and treat silence as a no.

1. Training. Does the tool, or the AI company behind it, use your text to train or improve models? Is that off by default, or do you have to find the switch?
2. Retention. How long is your manuscript kept, and how long after you delete it? Are there copies in backups or logs?
3. Deletion. Can you delete your manuscript and your account yourself, and is the text actually removed, not just hidden from view?
4. Who can see it. Is your work private to your account? Can staff or contractors read it, and when? Is it ever shared, sold or published?
5. Where it is hosted. Is it stored on infrastructure with recognised independent security audits, such as SOC 2 Type II or ISO 27001? Is it encrypted while it travels and while it is stored?

Specialist writing tools often state these things more clearly than general assistants, because their customers ask. Our comparison of AutoCrit and ProWritingAid, for example, notes that both companies say they do not train their AI on your manuscript. It is still worth reading the page yourself: a clear, specific privacy page is a good sign, and a vague one is worth a question. If you drafted in a co-writing tool and want to move to one built for feedback, see NovelAI alternatives for editing your novel.

How Edith handles your manuscript

Here is how we answer that same checklist. Your manuscript is private to your account: other users cannot see it, and we never share, sell or publish your work. It is never used to train AI, and the AI provider that processes it for your feedback is bound by commercial terms that forbid training on it too. You can delete your manuscripts or your whole account at any time, and your content is removed from our systems. The service is hosted on infrastructure that is independently audited to SOC 2 Type II and ISO 27001; that audit belongs to our hosting providers rather than to Edith itself, and we would rather say so plainly. The full detail is on our security and privacy page.

There is a second kind of safety authors ask about, which is the book itself. Edith leaves notes and suggestions only, like an editor in the margins; she never rewrites your prose, so every word in the finished book stays yours. Our guide to editing your novel without losing your voice explains why that matters, and how Edith compares with ChatGPT sets the two side by side.

If you would like to see what you get before you upload anything, the sample editorial letter is open to read. When you are ready, the first 10,000 words are free, with no credit card, so you can try it on a few chapters first. And if you are not sure the draft is ready for anyone yet, how to tell if your novel is ready for an editor is a good place to start.