Data security
Your project is visible to you. A manuscript becomes visible to reviewers only when you invite them. Our service operators may access data when needed to operate, support or secure the service.
Storage and access
Uploaded files are kept in a private Cloudflare R2 bucket in production and served through time-limited signed links. Cloudflare encrypts R2 objects at rest and in transit. Account passwords are hashed with Argon2id. Connections to the production service use TLS.
AI processing
When you start an AI action on a document, the text needed for that action is sent to the configured Google Gemini API project. Before paid access opens, we will verify that this project uses paid API terms. Google says paid API inputs and outputs are not used to improve its products, but may retain content for limited abuse monitoring. Search terms may also be sent to scholarly search providers. Do not upload confidential company material: industrial teams can use today's tools only for public or anonymized materials, and a workspace for company data is still in development (see For R&D).
Deletion and copies
You can delete projects, manuscripts and your account in the app. A deletion request fails visibly if its stored files cannot be removed, so you can retry or contact support. Database and file backup retention will be published after the production backup and restore procedure has been verified, before paid access opens.
For access, correction or export requests, contact support. See the privacy policy for current data handling.