Privacy Policy

Who we are

Papertis is a service operated by Papertis [legal entity name and registered address to be added once formalized]. Papertis is intended for use by healthcare professionals worldwide and is not directed at, or intended for use by, individuals under 18 years of age.

[PENDING] If Papertis processes personal data of individuals located in the European Union without an establishment in the EU, Article 27 GDPR requires the appointment of an EU representative. This appointment is pending; the representative's name and contact details will be added here before commercial launch in the EU.

What we collect

We collect the information you provide when you create an account (your email address and password), the topics you choose to follow, your plan selection, your watchlist of authors and journals, any feedback you give on individual papers, and any papers or trials you choose to save. We also keep a record of the digests we generate for you, so you can access your archived papers.

The topics you follow reflect your professional or research interests — they describe published scientific literature (for example, a clinical area you want to stay current on), not your own health. Papertis never asks for, and does not collect, information about your own or any other individual's health, diagnosis, or medical history.

Why we process your data (legal basis)

We process your account and usage data because it is necessary to provide the service you signed up for (performance of a contract). Where you have given explicit consent — for example, to receive marketing communications — we rely on that consent, which you may withdraw at any time. Where relevant, we may also rely on our legitimate interest in maintaining and improving the security and reliability of Papertis. Where a specific jurisdiction requires a different legal basis for processing, we rely on that basis instead.

How we use it

We use this information solely to operate Papertis: to select and send you the weekly evidence relevant to your topics, to notify you of exceptional findings, retractions, or guideline updates where applicable to your plan, to maintain your archive and saved papers, to notify you about new topics in specialties you follow, and to manage your account and plan. We do not sell, rent, or share your personal information with third parties for their own marketing purposes, and we do not use your data to train external models beyond what is necessary to generate your own digest.

Third-party services

Papertis relies on third-party infrastructure to operate, including hosting (Vercel), database and authentication (Supabase), email delivery (Resend), and AI language processing (Anthropic) used to generate summaries of publicly available scientific literature. When Papertis introduces paid plans, payment processing will be handled by a third-party payment provider [PENDING — provider to be confirmed, see Terms of Service]. These providers process data on our behalf under their own security and privacy terms, and under data processing agreements where applicable.

International data transfers

Papertis is used by healthcare professionals in many countries, and some of our service providers may process data outside your country of residence, including outside the European Economic Area. Where this occurs, we rely on appropriate safeguards, such as Standard Contractual Clauses or an equivalent recognized transfer mechanism, to ensure your data continues to receive a level of protection equivalent to that guaranteed in your home jurisdiction.

Cookies and similar technologies

Papertis uses only the technical cookies strictly necessary to keep you signed in and to operate the service. We do not currently use advertising or cross-site tracking cookies. If this changes, we will update this policy and request your consent where required by your local law.

Data retention and deletion

You may unsubscribe from weekly digests at any time from your account settings. You can permanently delete your account and all associated personal data — including your profile, followed topics, watchlist, saved items, and feedback — at any time directly from your account settings page. Deletion is immediate and cannot be undone. Some records, such as billing records where applicable, may be retained for the period required by law.

Your rights

Depending on your location, you may have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, request a copy of your data in a portable format, object to or restrict certain processing, and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us using the details below. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or equivalent regulator.

Region-specific rights

We aim to honor equivalent privacy rights regardless of where you live, not only where a specific law requires it. In practice, this includes:

European Economic Area, United Kingdom, and Switzerland. Rights under the GDPR / UK GDPR, as described in "Your rights" above.

California and other U.S. states with comprehensive privacy laws. You have the right to know what personal information we collect, to request deletion, and to request correction. We do not sell or share personal information as defined under the CCPA/CPRA, so there is no "opt-out of sale" action needed. We will not discriminate against you for exercising any privacy right.

Brazil. Rights under the LGPD, materially equivalent to those described in "Your rights" above.

Canada. Rights under PIPEDA (or applicable provincial law), materially equivalent to those described in "Your rights" above.

If your jurisdiction grants a right not explicitly listed here, contact us and we will address your request under the standard applicable to your location.

Children's privacy

Papertis is intended for use by healthcare professionals and is not directed at individuals under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

Security

We apply reasonable technical and organizational measures to protect your data, including access controls restricted to what each part of our system needs, encryption of data in transit, and error monitoring configured to avoid capturing personal data in logs. No system is completely secure, but we work to limit and promptly address any incident that could affect your data.

Changes to this policy

We may update this Privacy Policy as Papertis evolves or as legal requirements change. We will update the "Last updated" date above, and where a change is material, we will take reasonable steps to notify you directly.

Contact

For any questions about this Privacy Policy, or to exercise your rights over your data regardless of where you are located, please contact us at papertis.contact@gmail.com.