Privacy Policy

ExplainThisPaper ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at explainthispaper.org and any related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2.1 Account Information

If you choose to sign in via Google OAuth, we collect your name, email address, and profile picture as provided by Google. Signing in is entirely optional -- the Service works fully without an account.

2.2 Analysis Data

For signed-in users, we store paper titles and analysis results so you can access your history. This data is associated with your account and is not stored for anonymous users.

2.3 Usage Data

We may collect anonymous, aggregated usage data such as page views, feature usage patterns, and performance metrics. This data cannot be used to identify individual users.

2.4 What We Do Not Collect

We never collect, transmit, or store your Gemini API key. Your API key is stored exclusively in your browser's localStorage and is sent directly from your browser to Google's Gemini API. Our servers never see, log, or persist your API key.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Save your analysis history so you can revisit past results
• Authenticate your identity when you sign in via Google
• Understand how the Service is used so we can improve it
• Communicate with you about service-related matters, if necessary

We do not sell, rent, or trade your personal information to third parties.

Your account information and analysis history are stored in a PostgreSQL database hosted on Supabase. All data is encrypted in transit using TLS/SSL. We employ industry-standard security measures to protect your data from unauthorized access, alteration, or destruction.

While we strive to use commercially acceptable means to protect your personal information, no method of electronic storage or transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

The Service integrates with the following third-party providers. Each has its own privacy policy governing the data they process:

• Google OAuth -- Used for optional authentication. We receive your name, email, and profile picture from Google when you sign in.
• Google Gemini API -- Used to analyze research papers. You provide your own API key, and requests are made directly using that key. We do not act as an intermediary for your Gemini API usage beyond facilitating the analysis request.
• Vercel -- Our hosting provider. Vercel may process request metadata (IP addresses, request headers) as part of serving the application.
• Supabase -- Our database provider, where account and analysis data is stored.

We retain your account information and analysis history for as long as your account is active. You may delete individual analyses from your history at any time. If you delete your account, all associated data -- including your profile information and entire analysis history -- will be permanently removed from our systems.

Anonymous usage data may be retained in aggregated form indefinitely, as it cannot be linked to any individual user.

You have the right to:

• Access your personal data and analysis history through the Service
• Delete individual analyses or your entire account and all associated data
• Export your analysis data in a portable format
• Withdraw consent by signing out and discontinuing use of the Service at any time

To exercise any of these rights, you can use the built-in account management features in the Service or contact us at [email protected].

We use minimal cookies strictly necessary for the operation of the Service. Specifically, we use a session cookie to maintain your authentication state if you choose to sign in. We do not use advertising cookies, tracking cookies, or any third-party cookies for analytics or marketing purposes.

Your theme preference and accent color selection are stored in your browser's localStorage, not in cookies.

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us at [email protected].

ExplainThisPaper is operated from Bengaluru, Karnataka, India. If you access the Service from outside India, please be aware that your data may be transferred to, stored, and processed in India or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules.

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising under or in connection with this policy shall be subject to the exclusive jurisdiction of the courts in Bengaluru, Karnataka, India.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: