privacy policy

[ 01 · INFORMATION WE COLLECT ]

We collect:

• ·Account information: the email address you sign in with, and your plan. Authentication is handled by Supabase; we do not store passwords.
• ·Content you provide: the questions you research, the reviews and claims you create, notes, and any PDFs you upload. Uploads are private to your account (or your team, if you share them).
• ·Usage information: events that record which actions you take, used to enforce plan limits and understand product usage. For visitors without an account, we count usage against a salted, one-way hash of your IP address rather than the address itself.
• ·Payment information: when you subscribe, our payment processor (Stripe) handles your card details. We receive a customer identifier and subscription status; we never see or store full card numbers.
• ·Integrations you connect: if you connect Slack or Zotero, we store the webhook URL or API key you provide so we can deliver briefings or push references. These are shown masked and can be removed at any time.

[ 02 · HOW WE USE INFORMATION ]

We use the information above to:

• ·Provide the Service: run discoveries, compile and maintain reviews, generate audio, and deliver briefings;
• ·Enforce plan limits and prevent abuse;
• ·Process payments and manage subscriptions;
• ·Communicate with you about your account and, if you opt in, send change briefings;
• ·Understand and improve how the product is used, in aggregate.

[ 03 · PROCESSORS WE SHARE DATA WITH ]

We use a small set of third-party processors to run the Service. They act on our instructions and only receive what they need for their function:

• ·Supabase: authentication, database, and file storage for your account, reviews, and uploads;
• ·Stripe: payment processing and subscription billing;
• ·Vercel: application hosting, and privacy-friendly, cookieless usage analytics;
• ·Language-model providers (which may include Cerebras, Google, and Anthropic): to read papers and draft claims and summaries from the text of the papers being processed;
• ·Text-to-speech and embedding services (a self-hosted model, with Google as a fallback): to generate audio briefings and semantic search;
• ·Resend: to send account and briefing emails;
• ·Scholarly sources (OpenAlex, Semantic Scholar, arXiv): which we query to find and retrieve papers, sending only the search terms and, where required, a contact email.

[ 04 · WE DO NOT SELL YOUR DATA ]

We do not sell your personal information, and we do not share it for advertising. We share data only with the processors above, or when required by law, or to protect the rights and safety of Cesure and its users.

[ 05 · COOKIES ]

We use a small number of cookies, mainly to keep you signed in. Our analytics are cookieless. See our Cookie Policy for the details.

[ 06 · DATA RETENTION ]

We keep your information for as long as your account is active or as needed to provide the Service. Processed papers and their audio are cached and shared across users so each paper is only ever read once; that cache holds public paper metadata, not your personal data. When you delete a review, its version history is deleted with it. When you delete your account, we delete or anonymize your personal data, except where we must retain records to meet legal or accounting obligations.

[ 07 · SECURITY ]

We use industry-standard measures to protect your data, including encrypted connections and access controls scoped to your account. No system is perfectly secure, but we work to limit what is collected and who can reach it.

[ 08 · YOUR RIGHTS ]

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit much of your data directly in the app, and you can delete your reviews and your account at any time.

To exercise any right, email us at founders@cesure.phanguard.org. We will respond within the time required by applicable law.

[ 09 · INTERNATIONAL TRANSFERS ]

Our processors may store and process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for these transfers.

[ 10 · CHILDREN ]

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

[ 11 · CHANGES TO THIS POLICY ]

We may update this policy as the Service changes. We will update the date above and, for material changes, notify you where appropriate.

[ 12 · CONTACT ]

Questions about privacy? Email founders@cesure.phanguard.org.