Privacy Policy

AIPaperDetect (“we”, “our”, “us”) operates aipaperdetect.com, an AI-powered academic paper evaluation service (APEAS — AI Paper Evaluation Agent Suite). This Privacy Policy explains how we collect, use, and protect your personal information.

Account information: When you register, we collect your name, email address, and a hashed (bcrypt) version of your password. We never store your password in plain text.

Uploaded papers: Files you upload (.pdf, .tex, .txt) are stored temporarily on our server only while analysis runs. The original file is permanently deleted immediately after analysis completes (within ~120 seconds). Only your analysis results are retained.

Usage data: We collect the number of analyses run, modules selected, scores generated, and timestamps. This is used to enforce plan quotas and improve our service.

Payment data: Payments are processed by Paddle. We receive only a customer ID and subscription status — we never see or store your full card number.

Log data: Standard server logs including IP addresses and request timestamps, retained for 30 days for security purposes.

• To provide and improve the APEAS evaluation service
• To enforce monthly analysis quotas per plan
• To send transactional emails (password reset, billing receipts) — we do not send marketing email unless you opt in
• To detect abuse and enforce our Terms of Service
• To aggregate anonymous usage statistics that help us improve evaluation accuracy

Your uploaded papers are processed solely to generate your evaluation report. We do not read, share, sell, or use your paper content for any other purpose.

What happens to your paper — step by step:

1. Your file is uploaded to our server over HTTPS (encrypted in transit).
2. Text is extracted. Before any content is sent to external AI providers, we automatically strip: email addresses, the author/affiliation block, and the acknowledgements section.
3. Each evaluation agent receives only the paper section it needs — for example, the fabrication checker receives only your bibliography, not your full methodology.
4. Stripped, scoped text is sent to AI models for analysis (see Section 5).
5. The original file is permanently deleted from our server immediately after analysis completes — typically within 90–120 seconds of upload.
6. Only your analysis results (scores, findings) are retained in your account.

For unpublished or sensitive research, we recommend additionally anonymizing discipline-specific identifiers (dataset names, project codenames, proprietary methods) before upload.

We do not sell your personal data. We share data only with the following sub-processors:

• OpenRouter(openrouter.ai) — AI model API gateway. PII-stripped, section-scoped paper text is routed through OpenRouter to downstream model providers. OpenRouter's API data policy states that API inputs are not used to train models.
• Google— Gemini 2.5 Flash is used for standard evaluation agents. Under Google Cloud API terms, customer data submitted via API is not used to train Google's models by default.
• Anthropic— Claude Haiku is used for tool-based agents (citation verification, fabrication checks). Anthropic's usage policy for API customers states that API inputs are not used to train models without explicit opt-in.
• Semantic Scholar & OpenAlex — academic search APIs for reference verification. Only reference titles and DOIs are sent — no paper body content.
• Paddle — payment processor and merchant of record (name, email for billing only).
• Resend — transactional email (email address only).
• Cloudflare — infrastructure and CDN (IP address, request metadata).

All sub-processors are contractually bound. We recommend independently verifying the current data policies of Google Cloud, Anthropic API, and OpenRouter if your research has specific confidentiality requirements.

If you are in the EEA, UK, or another jurisdiction with data protection laws, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and all associated data
• Portability — export your analysis results as Markdown or PDF (Starter/Pro), or request a structured export by email
• Restriction — limit how we process your data
• Objection — opt out of any future marketing communications

To exercise any of these rights, email: privacy@aipaperdetect.com. We will respond within 30 days.

We use only a single authentication token stored in localStorage — not a cookie — to keep you logged in. We do not use tracking cookies or third-party advertising cookies.

Cloudflare may set a security cookie (__cf_bm) for bot detection. This is a strictly necessary cookie and does not require consent under GDPR.

Paper files: Deleted immediately after analysis completes (within ~120 seconds of upload), regardless of plan.

Analysis results (scores, agent findings, reports): Retained in your account until you delete them or close your account. You can delete individual analyses at any time from your dashboard.

Account data (name, email, plan): Retained until you request account deletion. Email privacy@aipaperdetect.com to delete your account and all associated data.

Payment records: Retained as required by applicable tax and accounting law (typically 7 years), stored by Paddle.

We use industry-standard security practices: bcrypt password hashing, HTTPS-only via Cloudflare, JWT authentication with session invalidation, rate limiting on all endpoints, and regular dependency security audits.

We may update this policy from time to time. Material changes will be communicated via email at least 14 days before taking effect. Continued use of the service after changes constitutes acceptance.

For privacy questions or data requests: privacy@aipaperdetect.com