Information we process
We process account details, institution membership, research-project content, uploaded documents, source metadata, AI interactions, support submissions, security events, and product usage necessary to operate the service. Stripe processes payment-card information; RigorWise stores subscription identifiers and status rather than complete card details.
How information is used
Information is used to provide and secure workspaces, authenticate users, enforce tenant access, run requested AI workflows, process subscriptions, provide support, prevent abuse, improve reliability, and comply with legal obligations.
Research content and AI
Research content is sent to configured AI providers only when needed to perform requested features. Customer documents must not be used to train external models unless a separate, explicit agreement authorizes it.
Sharing
We share information with infrastructure, database, authentication, AI, storage, analytics, support, and billing processors only as needed to provide the service. We may disclose information when required by law or to protect rights and security. We do not sell private research content.
Tenant and advisor access
Institution administrators can manage institutional settings and authorized memberships. Advisors can access only projects explicitly shared with them. Administrative analytics should not expose private manuscript content.
Retention and deletion
We retain information while an account or institutional relationship is active and as needed for security, billing, backups, disputes, or legal obligations. Verified deletion or export requests can be submitted through the contact form.
Security
Controls include encrypted transport, credential hashing, database-backed authorization, tenant scoping, audit logs, rate limits, secure secret management, and restricted agent tools. No service can guarantee absolute security.
Your choices and rights
Depending on location, you may have rights to access, correct, export, restrict, object to, or delete personal information. Submit a privacy request through the contact form. Identity verification may be required.
Changes and questions
We may update this policy as the service and applicable requirements evolve. Questions can be submitted through the RigorWise contact form.