Privacy Policy

1. Introduction

Scholix Research Intelligence ("Scholix", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at scholix.app and any associated services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use immediately.

2. Information We Collect

Account information: When you register, we collect your name, email address, and password hash. We do not store plaintext passwords.

Research papers: When you submit a paper for analysis, we temporarily process the document content to generate your analysis report. We do not permanently store paper content beyond the duration required for processing.

Analysis results: We store the structured analysis output (scores, feedback, journal matches) in your account so you can access your history.

Usage data: We collect standard server logs including IP addresses, browser type, pages visited, and timestamps for security and performance monitoring.

Payment data: Payment processing is handled entirely by Stripe. We store only a Stripe customer ID and subscription status — we never see or store your card details.

3. How We Use Your Information

• To deliver the analysis, journal matching, and review simulation services you request
• To authenticate your account and enforce subscription limits
• To send transactional emails (analysis complete, subscription receipts, password resets)
• To improve our AI models and scoring algorithms using anonymized, aggregate data
• To detect and prevent fraud, abuse, or violations of our Terms of Service
• To comply with applicable legal obligations

We do not sell your personal information to third parties. We do not use your paper content to train AI models without your explicit consent.

4. Third-Party Services

To deliver the Service, we share limited data with trusted third-party processors:

• Anthropic (Claude API) — Processes paper text to generate AI analysis. Anthropic's API usage policy prohibits training on API inputs. See anthropic.com/privacy.
• Copyleaks — Processes paper text for plagiarism detection. Data is subject to Copyleaks' privacy policy.
• GPTZero — Processes paper text for AI content detection.
• Supabase — Hosts our database and file storage infrastructure (EU/US regions).
• Stripe — Processes all payments. We never see your payment card details.
• Vercel — Hosts the application. Standard server logs may be retained per Vercel's data processing agreement.

5. Data Retention

Raw paper content (PDF text) is deleted within 24 hours of analysis completion. Analysis results (scores, feedback) are retained as long as your account is active. You can delete individual analyses from your dashboard at any time.

On account deletion, all associated analysis results and personal data are permanently deleted within 30 days, except where retention is required by law.

6. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, row-level security (RLS) on all database tables, and regular security audits. However, no method of transmission over the internet is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format
• Opt out of non-essential communications

To exercise any of these rights, contact us at maaz.pk0123@gmail.com and we will respond within 30 days.

8. Cookies

We use strictly necessary cookies for session authentication and CSRF protection. We do not use tracking cookies or third-party advertising cookies. No cookie consent banner is required for essential cookies under applicable regulations.

9. Children's Privacy

The Service is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such data, contact us and we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email or a prominent notice on the platform at least 14 days before they take effect. Continued use after that date constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or requests, contact us at: