Privacy Policy

1. Information We Collect

Account Information

When you create an AllScience account, we collect your name, email address, institutional affiliation (if provided), and password. If you subscribe to a paid plan, payment information is processed by Stripe and is not stored on our servers.

Usage Data

We collect information about how you interact with the platform, including pages visited, features used, session duration, and device information (browser type, operating system, screen resolution). This data helps us improve the platform experience.

Research Data

Content you create on AllScience — including uploaded documents, research analyses, drafts, citations, and published works — is stored in your account. We do not read, analyze, or share your unpublished research content for any purpose other than providing the service to you.

AI and Plagiarism Analysis

Submitted content is analyzed by our automated systems to detect plagiarism and AI-generated text patterns. This analysis is used solely to apply transparency badges and enforce our AI Content Policy and Plagiarism Policy. The analysis results are not shared with third parties.

2. How We Use Your Data

• Provide the service: Operate and maintain AllScience, process your research, generate drafts, manage citations, and publish your work.
• Improve the platform: Analyze aggregate usage patterns to improve features, fix bugs, and develop new tools.
• Analytics: Understand how researchers use different tools so we can prioritize development.
• Communication: Send account-related emails (password resets, billing receipts) and, with your consent, product updates.
• Security: Detect and prevent fraud, abuse, and security threats.

3. Data Storage and Security

Your data is stored on Oracle Cloud Infrastructure in the United States region. All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher. We maintain regular backups and follow industry-standard security practices including access controls, audit logging, and vulnerability monitoring.

4. Third Parties

We share your data only with the following third-party services, and only as necessary to operate AllScience:

• Stripe: Payment processing for subscriptions. Stripe receives your payment details directly; we do not store credit card numbers.
• Oracle Cloud: Infrastructure hosting and data storage.

We do not sell your personal data to anyone. We do not share your data with advertisers, data brokers, or any other third parties for their own commercial purposes.

5. Your Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you.
• Delete: Request deletion of your account and all associated data. Published works that have been cited by others may remain in the public archive with attribution removed upon request.
• Export: Download your research data, drafts, citations, and published works at any time through the dashboard export feature.
• Correct: Update or correct your account information at any time through your profile settings.
• Withdraw consent: Opt out of non-essential communications at any time.

To exercise any of these rights, contact us at privacy@allscience.net. We will respond within 30 days.

6. GDPR Compliance (European Economic Area Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) provides you with additional rights regarding your personal data. AllScience processes your data under the following legal bases:

• Contract performance: Processing necessary to provide the AllScience service you signed up for.
• Legitimate interest: Platform security, fraud prevention, and aggregate analytics to improve the service.
• Consent: Analytics cookies and non-essential communications, which you may withdraw at any time.

Under the GDPR, you have the right to:

• Access: Obtain a copy of the personal data we process about you.
• Rectification: Correct inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Data portability: Receive your data in a structured, machine-readable format and transfer it to another service.
• Restriction: Request that we limit how we process your data in certain circumstances.
• Object: Object to processing based on legitimate interest, including profiling.

We do not engage in automated decision-making or profiling that produces legal effects. To exercise these rights, or to file a complaint with your local data protection authority, contact us at privacy@allscience.net. We will respond within 30 days.

7. CCPA Compliance (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) and its amendment (CPRA) grant you the following rights:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purpose, and the categories of third parties with whom we share it.
• Right to delete: Request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to opt-out: Direct us not to sell or share your personal information. AllScience does not sell your personal information and has never done so.
• Right to non-discrimination: We will not deny you services, charge different prices, or provide a different quality of service because you exercised your CCPA rights.
• Right to correct: Request correction of inaccurate personal information.
• Right to limit use of sensitive information: We only use sensitive personal information as necessary to provide the service.

To submit a verifiable consumer request, contact us at privacy@allscience.net. We will verify your identity and respond within 45 days. You may also designate an authorized agent to submit requests on your behalf.

8. COPPA Compliance (Children Under 13)

AllScience does not knowingly collect, use, or disclose personal information from children under the age of 13. Our platform is designed for researchers, academics, and adult users. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us immediately at privacy@allscience.net.

Our companion platform WonderPress.net, which serves younger audiences, maintains its own age-appropriate privacy policy with additional parental consent mechanisms.

9. Cookies

AllScience uses cookies as follows:

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
• Analytics cookies: Used only with your explicit consent to understand usage patterns. You can accept or decline analytics cookies at any time through the cookie banner or your account settings.

We do not use advertising cookies or tracking pixels. We do not participate in cross-site tracking.

10. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law. Anonymized, aggregate analytics data may be retained indefinitely.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the platform at least 30 days before the changes take effect.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact us at:

privacy@allscience.net