Last updated 2026-09-28.
Account data: your email, a hashed password (or linked ORCID identifier), your display name and scientific field if you set one.
Content you add: search queries and results, saved themes, uploaded documents and the text extracted from them, project chat questions and answers, manuscripts, reviews and review responses.
Usage data: which actions you take and when, for billing (credits used) and for fixing bugs — never sold or shared with advertisers.
A manuscript you upload for review is visible to you and reviewers you explicitly invite. Service operators can access content when needed for operations and support. Your private manuscript is not indexed for other users' searches.
Single- and double-blind review modes hide the identities you'd expect them to hide from each other; we don't use blind mode to hide anything from you as the manuscript owner.
Deleting a manuscript or project attempts to remove its associated files. If storage deletion fails, the request fails so it can be retried; a database-only deletion is not reported as complete.
For document AI actions, the configured Google Gemini API project receives text needed for the action. Before paid access opens, we will verify that it uses paid API terms. Google says paid API inputs and outputs are not used to improve its products, while limited retention for abuse monitoring can occur. Your account password is not sent.
Resend delivers transactional email (verification, password reset, review invitations). When checkout opens, Lemon Squeezy will process payment and provide payment documents; we store order and entitlement identifiers, not your card details.
Academic APIs (OpenAlex, Crossref, Semantic Scholar, and others) receive your search terms to fetch results — the same as using their own websites directly.
You can delete your account from Settings. For a full copy of your data or help with deletion, contact support. Account deletion fails visibly if storage files cannot be removed, rather than reporting a database-only deletion as complete.
If you're in the EU, this includes the rights GDPR gives you — access, correction, deletion, and portability of your personal data.
Production backup retention and restore procedures are being verified and exact periods will be published before paid access opens. Contact support with questions about deletion or retention.