Privacy Policy

1. What Information Do We Collect?

We collect personal information that you voluntarily provide when you register on the Services or contact us. This may include:

• Names
• Email addresses
• Passwords
• Billing addresses
• Debit/credit card numbers (handled by Stripe — we do not store raw card data)

We also automatically collect certain technical information when you visit our site, including IP address, browser type, device characteristics, operating system, language preferences, and usage data (pages viewed, timestamps, feature interactions).

We do not process sensitive personal information. All payment data is handled by Stripe. You can review their privacy policy at stripe.com/privacy.

2. How Do We Process Your Information?

We process your personal information for the following reasons:

• To create and manage your account
• To deliver the Services you request
• To respond to your inquiries and provide support
• To fulfill and manage payments and subscriptions
• To maintain the security and operation of the Services
• To comply with legal obligations

3. What Legal Bases Do We Rely On?

We only process your personal information when we have a valid legal reason to do so:

• Consent — when you have given us permission for a specific purpose
• Performance of a contract — to fulfil our obligations to you
• Legal obligations — to comply with applicable law
• Vital interests — to protect your safety or that of others

If you are located in the EU, UK, or Canada, you may withdraw consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

4. When and With Whom Do We Share Your Information?

We do not sell or share your personal information for advertising purposes. We may share information in these limited situations:

• With service providers (Anthropic, OpenAlex, Semantic Scholar, Stripe, Neon, Vercel) under written agreements, solely to provide the Services
• In connection with a merger, acquisition, or sale of assets — you will be notified in advance
• When required by law or to protect rights

5. Third-Party Websites

The Services may contain links to third-party websites. We are not responsible for the safety or privacy practices of those sites. We recommend reviewing their privacy policies independently.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain security, save your preferences (theme, language), and collect basic usage analytics. You can control cookies through your browser settings. See our Cookie Policy for details.

7. AI-Based Products

Reference Finder uses AI provided by Anthropic to extract claims and suggest citations. Your input text is processed by Anthropic’s API in accordance with their privacy policy. We use your input solely to provide the Services.

8. Social Logins

You may register or sign in using your Google account. When you do, we receive your name and email address from Google. We use this information only to create and manage your account. See Google’s privacy policy for details on how they handle your data.

9. How Long Do We Keep Your Information?

We retain your personal information for as long as your account is active or as required by law. When your account is deleted and we have no further legitimate need to process your information, we will delete or anonymise it.

10. How Do We Keep Your Information Safe?

We implement appropriate technical and organisational security measures to protect your data, including HTTPS, bcrypt password hashing, signed cookies, and rate limiting. However, no transmission over the internet can be guaranteed 100% secure. You access the Services at your own risk.

11. Do We Collect Information from Minors?

We do not knowingly collect data from or market to children under 18. By using the Services, you confirm you are at least 18 years old. If you believe we have inadvertently collected data from a minor, please contact us at sainayaunglinn@gmail.com and we will promptly delete it.

12. What Are Your Privacy Rights?

Depending on your location (EEA, UK, Switzerland, Canada, or certain US states), you may have the right to:

• Access and obtain a copy of your personal information
• Request correction of inaccurate data
• Request deletion of your personal information
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at sainayaunglinn@gmail.com. We will respond in accordance with applicable data protection law. You may also log into your account settings to review or delete your information directly.

13. Do-Not-Track Features

Most browsers include a Do-Not-Track (“DNT”) setting. We do not currently respond to DNT signals because no uniform technical standard has been adopted. If a standard is established that we are required to follow, we will update this policy accordingly.

14. US Residents — Specific Privacy Rights

If you are a resident of California, Colorado, Connecticut, Texas, Virginia, or other states with applicable privacy laws, you may have additional rights including:

• Right to know what personal data we process
• Right to access, correct, or delete your personal data
• Right to opt out of the sale or sharing of personal data
• Right to non-discrimination for exercising your rights

We do not sell or share personal information with third parties for advertising purposes. To submit a request, email us at sainayaunglinn@gmail.com.

15. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. The “Last updated” date at the top indicates when it was last revised. We encourage you to review this policy periodically.

16. Contact

If you have questions about this Privacy Policy, please contact: