Privacy Policy

Welcome to OpenRevyu ("we," "us," or "our"), an AI-powered academic paper review platform operated at openrevyu.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform. By accessing or using OpenRevyu, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the platform.

We collect the following categories of information: • Account Information: When you register, we collect your full name, email address, and a securely hashed version of your password. We never store passwords in plain text. • Uploaded Papers: You may upload academic papers in PDF format for AI-assisted review. These files are stored securely in our object storage infrastructure (S3-compatible, powered by Cloudflare R2). • Review Results: The AI-generated review feedback, scores, and analysis produced for your papers are stored in our database alongside paper metadata. • Payment Information: Payments are processed entirely by Stripe. We do not store your credit card numbers, bank account details, or other sensitive payment credentials on our servers. We retain only transaction references and credit balance records. • Usage Data: We collect basic usage information such as timestamps of actions, paper submission records, and credit transaction history to maintain and improve the service.

We use your information for the following purposes: • Service Delivery: To provide AI-powered paper reviews, manage your account, and maintain your paper library. • Review Processing: To send your paper content to large language model (LLM) providers for analysis and to generate structured academic reviews. • Billing and Credits: To process payments through Stripe, manage your credit balance, and maintain transaction records. • Communication: To send you important service-related notifications, respond to support requests, and provide account updates. • Platform Improvement: To monitor platform performance, diagnose technical issues, and improve the quality of our services.

When you submit a paper for review, the text content of your paper is sent to third-party large language model (LLM) providers, which may include OpenAI, Anthropic, and Google, for the purpose of generating your academic review. Important safeguards regarding AI processing: • Your papers are NEVER used to train AI models. Our agreements with LLM providers explicitly prohibit the use of submitted content for model training purposes. • LLM providers process your paper text solely to generate the requested review output. Per their data processing agreements, they do not retain your paper content after processing is complete. • Review results are stored on our platform and are accessible only to you unless you choose to share them.

We take the security of your data seriously and implement appropriate technical and organizational measures: • Paper Storage: Uploaded PDF files are stored in S3-compatible object storage (Cloudflare R2) with access controls ensuring only authorized users can retrieve their own documents. • Database: Account information, paper metadata, review results, and credit transaction records are stored in PostgreSQL with appropriate access controls. • Job Processing: We use Redis for temporary job queue management. No personally identifiable information (PII) is stored in Redis. • Encryption: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS). Passwords are hashed using industry-standard algorithms before storage. • Access Controls: We implement strict access controls and follow the principle of least privilege for all internal systems.

We do not sell, rent, or trade your personal information to third parties. We share data only in the following limited circumstances: • Stripe: Payment information is shared with Stripe for transaction processing. Stripe's handling of your data is governed by their own privacy policy. • LLM Providers: Paper text content is shared with AI providers (OpenAI, Anthropic, Google) solely for the purpose of generating reviews, subject to data processing agreements that prohibit data retention and model training. • Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.

In accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR), you have the following rights: • Right of Access: You may request a copy of the personal data we hold about you. • Right to Rectification: You may request correction of inaccurate or incomplete personal data. • Right to Erasure: You may delete your uploaded papers at any time through the platform. You may also request complete deletion of your account and all associated data. • Right to Data Portability: You may request your data in a structured, commonly used, and machine-readable format. • Right to Object: You may object to certain processing of your personal data. • Right to Restrict Processing: You may request that we limit the processing of your personal data under certain circumstances. To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

We retain your data according to the following principles: • Uploaded Papers: Your papers are stored for as long as you choose to keep them. You may delete any paper at any time, and the file will be permanently removed from our storage systems. • Review Results: Review results are retained alongside their associated papers and are deleted when you delete the paper or your account. • Account Data: Your account information is retained for as long as your account is active. Upon account deletion, all associated personal data, papers, and review results are permanently removed. • Transaction Records: Credit transaction records may be retained for a reasonable period after account deletion to comply with financial reporting and legal obligations.

OpenRevyu uses minimal browser storage and does not employ tracking or analytics cookies: • Authentication Token: We store a JSON Web Token (JWT) in your browser's localStorage to maintain your authenticated session. This is essential for the platform to function. • Locale Preference: Your language preference (English, French, or Arabic) is stored in localStorage to provide a consistent experience. • Theme Preference: Your display theme preference (light or dark mode) is stored in localStorage. We do not use tracking cookies, analytics cookies, or any third-party advertising cookies.

OpenRevyu is not designed for or directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal data, please contact us immediately.

OpenRevyu is operated from Morocco and serves users globally. Your data may be transferred to and processed in countries other than your country of residence, including countries where our infrastructure providers and AI processing partners operate. We ensure that any such transfers are carried out in compliance with applicable data protection laws and that appropriate safeguards are in place to protect your personal data.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, by providing additional notice through the platform. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: • General inquiries: ainnovatex@gmail.com • Support: ainnovatex@gmail.com • Website: openrevyu.com