Data & Privacy Policy

Effective Date: April 28, 2026

1. Data We Collect

  • Account data: name, email.
  • Payment data: handled by Stripe (we do not store full card details).
  • Usage/technical data: IP address, browser/device signals, pages/actions.
  • Uploaded content: PDFs and extracted text; may include personal data depending on what you upload.
  • Generated artifacts: PDFs, DOCX, LaTeX, BibTeX, and logs generated during document creation.

Analytics & cookies: We measure product usage with first-party Google Analytics (loaded via Google Tag Manager) to understand which features are used and where users encounter problems, including account sign-ups, research runs, and exports. This relies on cookies and similar device signals under a notice-based, implied-consent model. We do not load third-party advertising or cross-site tracking tags. You may block analytics with your browser settings or the Google Analytics opt-out browser add-on. The Service functions without analytics.

2. Subprocessors (Who Processes Data)

We share data with subprocessors solely to operate the Service:

  • Firebase (authentication, database, storage)
  • Stripe (payments)
  • OpenRouter and Google Vertex AI, plus their underlying model providers (AI processing)
  • Firebase Hosting (hosting/infrastructure)
  • Google Analytics (analytics cookies/telemetry)

3. Explicit Consent for AI Processing

BY UPLOADING DOCUMENTS OR SUBMITTING PROMPTS, YOU EXPLICITLY CONSENT to transmitting document text, prompts, and relevant context to the configured AI providers, including OpenRouter and Google Vertex AI, to generate outputs.

THIRD-PARTY CONTROL DISCLAIMER. Once transmitted to third-party AI providers, their handling/retention is governed by their own policies and technical requirements. UKTUBAI DISCLAIMS CONTROL AND LIABILITY FOR THIRD-PARTY PROCESSING BEYOND ITS DIRECT SYSTEMS.

4. Where Data Is Stored (Firebase + Browser)

  • Uploaded documents and generated files are stored in Firebase Storage under your account, separated by project.
  • Temporary session data may be cached locally in your browser using browser storage.

YOU ARE RESPONSIBLE FOR BACKUPS. We do not guarantee preservation or recoverability of your data.

5. Retention and Deletion (Soft Delete)

We keep data as needed to provide the Service and comply with legal/accounting obligations. You may request deletion. Deletion uses a soft delete baseline and may not immediately remove all residual copies from logs, backups, or third-party systems.

NO DELETION GUARANTEE / FAILURE-TO-DELETE WAIVER. YOU AGREE UKTUBAI IS NOT LIABLE for delayed, partial, or failed deletion due to third-party APIs, infrastructure limitations, or backups.

6. Security

We use reasonable measures, but no system is perfectly secure. Security incidents, unauthorized access, and data loss can occur. THE LIABILITY LIMITS IN PART 2 APPLY TO ALL SECURITY AND PRIVACY CLAIMS TO THE MAXIMUM EXTENT PERMITTED BY LAW.

7. International Transfers

Your data may be processed in other countries due to subprocessors and infrastructure locations.

8. Your Rights

Where required by applicable law, you may request access, correction, or deletion of your personal data by contacting [email protected].