Privacy Policy

1. Introduction

Scientific-editing.ai ("we," "our," or "us") is committed to protecting your privacy and the confidentiality of your research. This Privacy Policy explains how we collect, use, store, and protect your personal information and manuscript content when you use our scientific editing service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Password (encrypted and never stored in plain text)
• Organization or institution name (optional)
• Subscription tier and payment information (processed securely through Stripe)

2.2 Manuscript Content

When you upload manuscripts for review, we collect:

• Document files (.docx format)
• File metadata (filename, size, upload date)
• Processing status and review results

2.3 Usage Information

We automatically collect:

• IP address and browser type
• Pages visited and features used
• Upload and processing timestamps
• Error logs for troubleshooting

3. How We Use Your Information

3.1 Service Delivery

We use your information to:

• Process and review your manuscripts using AI-powered analysis
• Provide you with edited manuscripts and review reports
• Manage your account and subscription
• Send service-related notifications (upload confirmations, processing status)

3.2 Service Improvement

We may use aggregated, anonymized usage data to:

• Improve our service performance and reliability
• Identify and fix technical issues
• Understand usage patterns (without accessing manuscript content)

3.3 Communication

We may contact you to:

• Respond to your support requests
• Send important service updates or security alerts
• Provide subscription and billing information
• Send marketing communications (only with your consent, and you can opt out anytime)

4. Critical Privacy Protections

5. Data Storage and Security

5.1 Encryption

All data is encrypted:

• In transit: All connections use TLS/SSL encryption (HTTPS)
• At rest: Manuscripts and database records are encrypted using industry-standard encryption
• Passwords: Stored using bcrypt hashing with salt

5.2 Access Controls

We implement strict access controls:

• Only you can access your manuscripts through your authenticated account
• Administrative access is limited to essential personnel only
• All access is logged and monitored
• Multi-factor authentication available for enhanced security

5.3 Data Retention

We retain your data as follows:

• Manuscripts: Stored until you delete them or close your account
• Account data: Retained while your account is active
• Billing records: Retained for 7 years for tax and legal compliance
• Logs: Retained for 90 days for security and troubleshooting

6. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Update or correct your account information
• Deletion: Delete your manuscripts or close your account at any time
• Export: Download your manuscripts in their original format
• Opt-out: Unsubscribe from marketing emails (service emails cannot be disabled)
• Data portability: Request your data in a machine-readable format

To exercise these rights, contact us at [email protected] or use the controls in your account dashboard.

7. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for authentication and security
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Understand how you use our service (anonymized)

You can control cookies through your browser settings, but disabling essential cookies may affect service functionality.

8. Third-Party Services

We use the following third-party services:

• Stripe: Payment processing (PCI-DSS compliant)
• Amazon Web Services (AWS): Cloud infrastructure and AI processing
• Google OAuth: Optional authentication (if you choose to sign in with Google)

These providers are contractually obligated to protect your data and may not use it for their own purposes.

9. International Data Transfers

Your data may be processed and stored in data centers located in different countries. We ensure that all international transfers comply with applicable data protection laws and use appropriate safeguards such as standard contractual clauses.

10. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: