Privacy Policy
This Privacy Policy explains how Scienvera (“Scienvera,” “we,” “us”) collects, uses, and shares information when you use our research tools at tools.scienvera.com (the “Service”). By using the Service you agree to the practices described here.
1. Information we collect
Account and identity
We use a third-party authentication provider (Stytch) to sign you in. When you create an account we receive your email address, and, if you sign in with Google, basic profile information such as your name. We do not receive or store your passwords, and we never gain access to your Google account beyond the basic profile you approve.
Workspace and content
The Service is organized into workspaces (organizations). We store the content you create, including workspace names and membership, saved collections, watches (saved searches), projects and the documents you write in them, notes you attach to papers, and your workspace’s credit balance and ledger.
Documents you upload
If you use the library, the files you upload (such as PDFs) are stored so you can view, search, and reference them. We extract their text, split it into passages, and create numerical embeddings so the content is searchable within your workspace. When you ask a question about your documents, the relevant passages are sent to our AI provider to generate a grounded answer. Your uploaded files are private to your workspace, are not shared with other workspaces, and are not used to train third-party models. Only upload documents you have the right to store and process.
Usage and search data
When you run a search, verify a claim, or generate a report, we process the query text you provide in order to return results. We may retain limited, encrypted logs of activity (such as the type of action, timing, and result counts) to operate, secure, and improve the Service.
Technical data
Like most online services, we and our infrastructure providers automatically process technical data such as IP address, browser type, and request metadata for security, rate-limiting, and reliability.
Cookies and local storage
We use your browser’s storage to keep you signed in (a session token) and to remember basic preferences. These are necessary for the Service to function. We do not use advertising cookies.
2. How we use information
- To provide, maintain, and secure the Service and your account.
- To authenticate you and manage your workspace and its members.
- To run searches and features you request and allocate credits.
- To monitor for abuse, prevent fraud, and enforce our terms.
- To diagnose problems and improve features and reliability.
- To communicate with you about your account or the Service.
3. How your queries and content reach third parties
Scienvera is a search and synthesis layer over scholarly sources. To return results and answers, the text of your query, and, when you ask about your own documents, the relevant passages from them, is sent to the providers below. Please avoid entering or uploading confidential or personal information you would not want transmitted to them.
- Academic databases (OpenAlex, Crossref, Europe PMC, PubMed, arXiv, and DOAJ): to retrieve candidate papers and metadata.
- Pinecone: to compute relevance, re-rank results, and index your uploaded documents so they are searchable.
- Anthropic: to generate summaries, claim assessments, research reports, and answers about your documents from retrieved sources.
4. Service providers (subprocessors)
We rely on the following providers to run the Service. Each processes data only as needed to provide their function:
| Provider | Purpose |
|---|---|
| Stytch | Authentication and account management |
| Anthropic | AI summaries, claim analysis, reports |
| Pinecone | Semantic relevance, re-ranking, document indexing |
| Backblaze B2 | Storage of files you upload to your library |
| Cloudflare | Content delivery, DNS, and security |
| Our hosting provider | Servers and databases |
| Academic APIs | OpenAlex, Crossref, Europe PMC, PubMed, arXiv, DOAJ |
We do not sell your personal information, and we do not share it with third parties for their own advertising.
5. Data retention
We keep account and workspace content for as long as your account is active or as needed to provide the Service. You may delete collections, watches, projects, and uploaded documents at any time; deleting an uploaded document removes its stored file and its search embeddings. When you ask us to delete your account, we remove associated content within a reasonable period, except where we must retain limited records to comply with legal obligations, resolve disputes, or enforce our agreements.
6. Security
We use technical and organizational measures to protect your information, including encryption in transit, restricted access, and encryption of sensitive activity logs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Legal bases for processing (GDPR and KVKK)
Where the EU or UK General Data Protection Regulation (GDPR) or the Turkish Personal Data Protection Law No. 6698 (KVKK) applies, we process your personal data on the following legal bases:
- Performance of a contract: to create your account, run the features you request, and otherwise provide the Service (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- Legitimate interests: to secure the Service, prevent abuse and fraud, and maintain and improve reliability, balanced against your rights (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- Legal obligation: to comply with laws that apply to us (GDPR Art. 6(1)(c); KVKK Art. 5(2)(a)).
- Consent: where we ask for it for a specific purpose, which you may withdraw at any time (GDPR Art. 6(1)(a); KVKK Art. 5(1)).
We do not use your personal data to make decisions producing legal or similarly significant effects about you solely by automated means.
8. Your rights (GDPR and KVKK)
Depending on where you are, you have rights over your personal data. Under the GDPR these include the right to access, rectify, erase, restrict, or object to processing, the right to data portability, and the right to withdraw consent. Under the KVKK (Article 11) you may learn whether your data is processed and request information about it, learn the purpose of processing, know the third parties to whom it is transferred, request correction or deletion and that this be notified to those third parties, object to outcomes based solely on automated analysis, and claim compensation for damage caused by unlawful processing.
To exercise any of these rights, or to ask a privacy question, contact [email protected]. We will respond consistent with applicable law. If you believe we have not addressed your concern, you may lodge a complaint with a supervisory authority: in the EU/UK, your local data protection authority; in Türkiye, the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu, kvkk.gov.tr).
9. Data controller
Scienvera is the controller responsible for the personal data described in this policy. You can reach us about data protection matters, including GDPR and KVKK requests, at [email protected].
10. International transfers
We and our providers may process your information in countries other than your own, including outside the European Economic Area and Türkiye. Where required, we rely on appropriate safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses and the conditions for transfer abroad under the KVKK.
11. Children’s privacy
The Service is not directed to children and is not intended for anyone under 16. We do not knowingly collect personal information from children.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.
13. Contact
Questions or requests? Contact us at [email protected]. Your use of the Service is also subject to our Terms of Service.
Questions about this document? Contact [email protected]. See also our Privacy Policy and Terms of Service.