Supaper

Legal

Privacy Policy

Last updated: March 10, 2026

Your privacy matters to us. This policy describes what data we collect, why we collect it, and how we protect it. We aim to be transparent and collect only what is necessary to operate the Service.

1. Information We Collect

Account Information

When you register, we collect your email address, name, and optionally a profile image. If you sign in via GitHub, we receive your public profile data from GitHub.

Usage Data

We collect information about how you use the Service, including papers viewed, interpretations generated, questions asked, and features accessed. This helps us improve the Service.

Technical Data

We automatically collect certain technical information such as your IP address, browser type, operating system, and session tokens. This information is used for security and service operation.

2. How We Use Your Information

Service Operation

To provide, maintain, and improve the Service, including processing AI interpretations, managing credits, and delivering subscription features.

Communications

To send you service-related emails such as account verification, password resets, and subscription notifications. We do not send marketing emails without your explicit consent.

Security

To detect, prevent, and address fraud, abuse, and security incidents.

3. AI Processing

Paper Content

When you request an AI interpretation, the paper's title, abstract, and metadata are sent to our AI provider (Moonshot AI) for processing. We do not send your personal information alongside paper content.

Follow-up Questions

Questions you ask are sent to our AI provider along with the relevant paper context. Questions are stored in our database associated with your account to enable conversation history.

4. Data Sharing

Third-Party Services

We use the following third-party services: Moonshot AI (AI processing), Creem (payment processing), Resend (email delivery), and cloud infrastructure providers. Each operates under their own privacy policies.

No Sale of Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Legal Requirements

We may disclose your information if required by law, court order, or governmental authority.

5. Data Retention

Account Data

We retain your account data for as long as your account is active. You may request account deletion at any time, which will permanently remove your data from our systems.

Interpretations and Questions

AI interpretations and follow-up questions are retained to provide conversation history. You may delete individual interpretations from your account.

6. Cookies and Storage

Session Cookies

We use session cookies to keep you logged in. These are strictly necessary for the Service to function and cannot be disabled while using the Service.

No Tracking Cookies

We do not use third-party tracking or advertising cookies.

7. Your Rights

Access and Portability

You may request a copy of the personal data we hold about you.

Correction

You may update your profile information at any time from your account settings.

Deletion

You may request deletion of your account and all associated data. This action is permanent and cannot be undone.

8. Security

Measures

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

Questions about this Privacy Policy? Contact us at [email protected].