Privacy Policy

Who we are

reviewpaper.ai (“we”, “us”) is operated by Apoorv Saxena, an individual based in India. For anything in this policy, including privacy requests and grievances, email support@reviewpaper.ai. We are the party responsible for your personal data (the “data fiduciary” under India's Digital Personal Data Protection Act, 2023, and the “controller” under the GDPR where it applies).

What we collect

Account details

When you sign up with Google or with your email address, our sign-in provider Clerk gives us your email address and name (and, for Google, your profile picture). Clerk also keeps the session and security data it needs to keep you signed in, such as device and IP information.

Your papers and what we produce from them

• The PDFs you upload, and the text we extract from them.
• Paper metadata (title, page count), the reviews, meta-reviews, fix lists and drafts we generate, any edits you make to a draft, and your chat messages with the assistant and its replies.

Credits and payments

Your credit balance and a ledger of credits granted and spent, your plan, and the customer and subscription IDs our payment provider gives us. We do not receive or store card or bank details.

Usage and attribution

• Privacy-friendly analytics from Vercel Web Analytics and Speed Insights: pages viewed, referring site, country, browser and device type, and page performance. These tools don't use cookies and don't follow you across other sites.
• A handful of product events so we know what works: sign-up completed, paper uploaded, review started and completed (with the venue, mode and model tier), checkout started, chat message sent, and invite link copied, used and rewarded. Events never include your paper's content or your chat text.
• How you first found us: if you arrive from a link with campaign tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term) or from another website, we keep those tags and the referring address in a first-party cookie and save them to your account when you sign up.
• Invites: if you sign up through someone's invite link, we record who invited you so we can give you both referral credits. The person who invited you sees only counts (sign-ups, first reviews, credits earned), not your name or email.
• Standard server logs kept by our hosting provider for security and debugging.

How we use it

• To run the service: store your papers, generate reviews, answer chat questions, and show you your history.
• To manage credits, subscriptions and purchases.
• To keep the service secure, prevent abuse (for example, rate limits on chat) and fix problems.
• To understand, in aggregate, which features and channels work so we can improve the product.
• To reply when you contact us, and to send essential service messages.

We rely on your consent and on what is needed to provide the service you asked for. Where the GDPR applies, our legal bases are performance of our contract with you, our legitimate interests in securing and improving the service (balanced against your rights), and compliance with legal obligations.

We do not sell your personal data, share it for advertising, or train AI models on your papers. We don't read your papers or reviews ourselves except when you ask us for help, or when strictly necessary to investigate a fault or abuse.

Who processes your data

We use these service providers. Each gets only what it needs for its part of the service.

• Anthropic (Claude API) generates the reviews, chat answers and paper titles. It receives your paper (PDF and extracted text), your chat messages and the generated reviews. Anthropic's commercial terms do not allow it to use API inputs or outputs to train its models; it may keep them for a limited period for safety and abuse monitoring.
• TokenPath links each review point and chat answer to the passage in your paper it refers to. It receives the extracted text of your paper and the generated text to be linked.
• Semantic Scholar and OpenAlex are public literature databases we search for related work. They receive only short search queries (a few keywords about a topic in your paper), never the paper or your identity.
• Clerk handles sign-in and account security.
• Vercel hosts the app, stores your PDFs and extracted text in private Vercel Blob storage, and provides Web Analytics and Speed Insights.
• Neon hosts our Postgres database (account, paper metadata, reviews, chat, credits) in the US East region.
• Dodo Payments is the merchant of record for purchases (see below).

These providers process data in the United States and possibly other countries. When we transfer your data outside India or the EU/UK, we use providers that commit to protecting it under their terms, and we follow any transfer restrictions that apply.

Payments

Purchases are processed by Dodo Payments, which acts as the merchant of record: it is the seller of record for your purchase, collects your payment details, calculates and remits sales taxes, and issues invoices and receipts. Dodo handles your payment data under its own privacy policy. We receive your purchase status, customer and subscription IDs, and the email and name you use at checkout.

Cookies and local storage

• Sign-in cookies set by Clerk, needed to keep you signed in and protect your account.
• rp_acq, a first-party cookie with the campaign tags and referring address of your first visit (see above). It expires after 30 days and is not shared with anyone.
• rp_ref, a first-party cookie with the invite code, set only when you open someone's invite link. It expires after 60 days.
• Your theme preference (light or dark), kept in your browser's local storage.

We don't use advertising or cross-site tracking cookies. Vercel Web Analytics and Speed Insights are cookieless.

How long we keep data

• Papers: until you delete them. Deleting a paper from your dashboard immediately removes the PDF and extracted text from storage and deletes its reviews and chat history from our database.
• Your account: until you ask us to delete it. Email support@reviewpaper.ai from your account's address and we will delete your account, papers, reviews, chat history and credits, normally within 30 days.
• Backups and logs: deleted data can remain in database backups and hosting logs for a limited period (typically up to 30 days) before it is overwritten.
• Payment records: Dodo Payments keeps transaction records as tax and accounting laws require.

Your rights

Under India's Digital Personal Data Protection Act, 2023, you can ask for a summary of the personal data we hold about you and how it is processed, ask us to correct, complete or erase it, withdraw consent (which may mean we can no longer provide the service), nominate someone to exercise these rights on your behalf, and raise a grievance with us. If we don't resolve a grievance, you can complain to the Data Protection Board of India.

If you are in the EU, the UK or another region with similar laws, you also have rights to access, correct, delete or export your data, and to object to or restrict certain processing. You can complain to your local data protection authority.

To use any of these rights, email support@reviewpaper.ai. We may need to confirm it's really you, and will reply within 30 days. You can delete individual papers yourself at any time from your dashboard.

Security

PDFs and extracted text are kept in private storage and are only served to the signed-in owner. Data is encrypted in transit, and our providers encrypt it at rest. No system is perfectly secure; if a breach affects your personal data we will notify you and the relevant authorities as the law requires.

Children

reviewpaper.ai is not for anyone under 16, and we don't knowingly collect their data. If you are under 18, you may use it only with the consent of a parent or guardian. If you think a child has given us data, email us and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top. For significant changes we will also tell you by email or in the app before they take effect. The law of India governs this policy.

Contact

Questions, requests or grievances: support@reviewpaper.ai.