Privacy Policy
Last updated: April 2026. Plain language, no legalese.
What we collect
When you sign in with Google or GitHub, we store your name, email address, and profile picture URL. We also record your IP address and browser user-agent as part of session management.
When you upload a manuscript or reviewer comments, we store the file and its parsed text so we can run manuscript reviews and display results.
If you purchase review credits or subscribe to a plan, we store your subscription and order IDs from our payment provider. We do not store credit card numbers or billing addresses.
How we use your data
Your manuscripts and reviewer comments are used only to generate AI-powered corrections, checklists, and suggested studies for you. We do not read, review, or use your documents for any other purpose.
Your email is used for account identification, transactional communication (e.g. payment receipts), and occasional product updates. You can unsubscribe from non-essential emails at any time.
AI providers
To review your manuscript, we send manuscript text and review instructions to one or more of the following AI providers, depending on our internal routing and fallback logic:
- Google Gemini API / Vertex AI — Google's paid API terms state that data sent through these services is not used to train their models.
- Azure AI Foundry — used for routed model variants when enabled in our server-side configuration.
- Hugging Face Inference Providers — used for routed open-weight model variants when enabled in our server-side configuration.
- OpenRouter — used for routed model variants when enabled in our server-side configuration.
- Inception Labs (Mercury) — used only for some routed lower-tier tasks or fallbacks.
We do not include your name, email, or any personal identifiers in the text sent to these providers. Only the manuscript content and your review instructions are transmitted.
Your manuscripts are not used for AI training
CorrectMyPaper does not use your manuscripts, corrections, or any uploaded content to train, fine-tune, or improve AI models. Your work stays yours.
Storage and security
Uploaded files are stored in Cloudflare R2 (encrypted at rest) or on our server's local filesystem during development. Database records are stored in SQLite via Turso.
Access to your manuscripts is restricted to your authenticated account. Shared links are time-limited and revocable.
Third-party services
Beyond AI providers, we use the following services that may process some of your data:
- Dodo Payments — processes subscriptions and credit purchases. Receives your email and an internal user ID.
- Mixpanel — product analytics. We send your user ID, email address, and page-view events so we can investigate issues you report. We do not send your name or manuscript content to Mixpanel, and session recording is disabled.
- Google Ads / Google tag — measures ad-driven visits and conversions. Google may use cookies or similar technologies to attribute visits, ad interactions, and conversion events.
- Google / GitHub OAuth — handles sign-in. We receive your profile info; they process the authentication flow per their own privacy policies.
- Cloudflare — hosts uploaded files (R2) and may serve as CDN/proxy.
Data retention
Your data is retained for as long as your account exists. You can delete any manuscript at any time from your dashboard — this permanently removes the manuscript, all versions, corrections, uploaded files, and associated data.
If you want your entire account deleted, contact us and we will remove all your data within 30 days.
Your rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, or to object to its processing. To exercise any of these rights, email us at the address below.
Changes to this policy
We may update this policy from time to time. Material changes will be noted with an updated date at the top. Continued use of CorrectMyPaper after changes constitutes acceptance.
Contact
Questions or requests? Email us at [email protected]