Privacy notice
How your personal data and academic work are processed.
This notice is a template prepared under Turkey's Personal Data Protection Law (KVKK) and the EU General Data Protection Regulation (GDPR). It must be completed with the data controller's details and reviewed by a lawyer before publication.
Data we process
- Account data: name, email, institution. If you sign in with Google or Apple, we receive only your name and email address from that service (with Apple, possibly a private relay address); we never see your Google or Apple password.
- Academic content: projects, section texts, sources, uploaded files, AI conversations.
- Usage data: request counts, token usage, error logs.
- Payment data: processed by the payment provider; card details are never stored on our servers.
Purposes
Providing the service, enforcing usage limits, ensuring security and meeting legal obligations.
Transfer to AI providers
When you use AI features, the relevant section text, project context and selected source abstracts are sent to the configured AI provider (e.g. Anthropic) solely to answer your request.
Your rights
From your account page you can download all your data in a portable format (JSON) and permanently delete your account with all its data. For other requests, contact the data controller.
Security
Data is protected with row-level security (RLS) policies; no user can access another user's work. Files are kept in private storage and can only be downloaded through time-limited signed links.
