Privacy Policy

What we collect

When you submit a paper for review, we collect:

• Your email address (to notify you when the review is done)
• Your uploaded paper (processed and then deleted)
• The generated review (stored for 90 days)
• Standard web analytics via Google Analytics (GA4)

What we do not store

Your OpenRouter API key is used once to run the review and then discarded. It is never written to a database or logged. You can verify this in our open-source code.

How we use your data

Your email is used only to send you a confirmation and a notification when your review is complete. We do not send marketing emails or share your email with third parties.

Your paper is uploaded to secure storage, processed by AI agents to generate a review, and then deleted. The review result is stored so you can retrieve it.

Data retention

• Uploaded papers: deleted after processing
• Reviews: stored for 90 days, then deleted
• Email addresses: stored alongside the review record

What the LLM provider sees

Your paper is sent to the LLM you choose (Claude, GPT, Gemini, DeepSeek, Qwen, Kimi, Grok, Llama, and so on) through OpenRouter. OpenRouter itself does not log prompts or completions — only anonymous request metadata like token counts and latency.

We send every request with provider.data_collection: "deny", which instructs OpenRouter to route only to model providers whose policy is to not retain or train on your data. You can verify this in llm.py.

Providers may still keep short-term logs for abuse monitoring (typically 30 days or less, auto-deleted). They will not train on your paper. The final authority is the provider’s own terms — we encourage you to check them if you’re submitting highly sensitive work, and for maximum control you can always run coarse yourself on your own infrastructure.

Analytics

We use Google Analytics 4 to understand how people use the site (page views, traffic sources). No personally identifiable information is sent to Google Analytics.

Third-party services

• Supabase — database and file storage (EU/US)
• OpenRouter — LLM API (your own key, your own account; routed with data_collection: deny)
• Vercel — website hosting
• Google Analytics — web analytics

Your rights

You can request deletion of your review and associated data by emailing us. Since the project is open-source (MIT license), you can also run it yourself and keep all data on your own infrastructure.

Contact

David Van Dijcke — GitHub Issues