1. Introduction
ScienceIQ ("we", "us", "our"), operated by Artemis Technology Kft., provides an AI-powered research and study platform. Artemis Technology Kft. is the data controller responsible for your personal data; our full company details are set out in the Contact section below. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services (collectively, the "Service").
By using ScienceIQ, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
2. Data We Collect
2.1 Account Information
When you create an account, we collect:
- Name and email address
- Profile picture (if provided via social login)
- Authentication credentials (hashed passwords for email sign-up, or OAuth tokens for Google, Apple, and Facebook sign-in)
2.2 User-Generated Content
When you use the Service, we store:
- Uploaded documents (scientific papers, articles)
- Chat messages and conversations with the AI assistant
- Study materials you create or generate (quizzes, flashcards, mind maps, learning plans, presentations)
- Notes, reading progress, and study goals
- Folder organization and group participation data
2.3 Payment Information
Payments are processed by Stripe, Inc. We do not store your full credit card number, CVV, or banking details on our servers. We retain only a Stripe customer ID, subscription status, and billing period for account management. Please refer to Stripe's Privacy Policy for details on how your payment data is handled.
2.4 Usage Data
We automatically collect:
- Feature usage counts (e.g., number of papers analyzed, quizzes generated) for subscription limit enforcement
- Credit consumption and transaction history
- Session tokens and authentication timestamps
3. How We Use Your Data
We use your personal data to:
- Provide and maintain the Service, including AI-powered analysis and study material generation
- Authenticate your identity and manage your account
- Process payments and manage subscriptions
- Enforce usage limits based on your subscription tier
- Improve the Service and develop new features
- Communicate with you about your account, updates, or support inquiries
- Comply with legal obligations
We also record which features of the Service are used and whether they worked (for example, that a quiz was generated or a page of a document was opened), without cookies and without the content of your documents, to keep the Service reliable and improve it.
We measure whether our product-update emails are opened and which links are clicked, using a per-recipient link and image, to improve our communication. Every such email has a one-click unsubscribe link.
4. Third-Party Services
We use the following third-party services to operate ScienceIQ:
- OpenAI — Your uploaded documents and prompts are sent to OpenAI's API for AI-powered analysis, summarization, quiz generation, and other study features. OpenAI processes this data according to their Privacy Policy. OpenAI's API data is not used to train their models. We reserve the right to change our AI provider(s) from time to time; any replacement provider will be bound by equivalent data-protection and confidentiality obligations.
- Amazon Web Services (AWS) — Uploaded documents are stored securely in AWS S3 cloud storage.
- Stripe — Handles all payment processing and subscription management.
- Resend — Delivers transactional, account-related and product-update emails (for example sign-in links, notifications, and messages you send us through our contact form).
- PostHog — Product analytics that help us understand how the Service is used so we can improve it (only where you have consented to analytics cookies).
- Sentry — Error and performance monitoring, so we learn about crashes and failures and can fix them quickly. When something goes wrong, Sentry receives technical details about the error (such as the error message, the affected part of the app, browser and device type, and the time) together with your internal account ID. We do not send your name, email address, IP address, passwords, sign-in links, or the content of your documents. Sentry processes this data on servers in the European Union (Frankfurt, Germany) according to their Privacy Policy.
- Vercel Analytics — Aggregate traffic and performance metrics for the website.
- Meta Platforms Ireland Limited measures the performance of our advertising on Facebook and Instagram through the Meta Pixel and the Conversions API. This only happens if you choose "Accept all" in our cookie banner. See section 10 for details.
- Authentication Providers — Google, Apple, and Facebook may receive limited data (such as authentication tokens) when you choose to sign in via their services.
Semmelweis Kiadó és Média Kft. — When you create an account, you consent to us sharing your email address with our partner Semmelweis Kiadó és Média Kft. (full legal name: Semmelweis Kiadó és Média Korlátolt Felelősségű Társaság; registered seat: 1089 Budapest, Nagyvárad tér 4. 2. em.; company registration number: 01-09-870237; tax number: 13729879-2-42), so that Semmelweis Kiadó may inform you about, and provide you with, the content, offers, and services related to your access, and may contact you for these purposes. You may withdraw this consent at any time by contacting us at the email address in the Contact section.
We do not sell, rent, or trade your personal data to any third party for marketing or advertising purposes.
5. Data Storage and Security
Your data is stored in secured PostgreSQL databases and AWS S3 storage. We implement industry-standard security measures including:
- Encryption of data in transit (TLS/HTTPS)
- Hashed and salted passwords (bcrypt)
- Secure, HTTP-only session tokens
- Access controls and principle of least privilege for internal systems
While we strive to protect your personal data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial transaction records).
Uploaded documents and generated study materials are deleted when you remove them from the platform or upon account deletion.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access — Request a copy of the personal data we hold about you
- Rectification — Request correction of inaccurate or incomplete data
- Erasure — Request deletion of your personal data ("right to be forgotten")
- Data Portability — Request your data in a structured, machine-readable format
- Restriction — Request that we limit processing of your data
- Objection — Object to processing of your data for certain purposes
- Withdraw Consent — Where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at the email address provided below. We will respond within 30 days.
8. European Users (GDPR)
If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:
- Contract — Processing necessary to provide the Service you signed up for
- Legitimate Interest — Improving our Service, preventing fraud, ensuring security, detecting and fixing errors (error monitoring), and measuring feature usage and reliability
- Consent — Where you have given explicit consent (e.g., optional communications)
- Legal Obligation — Where required by applicable law
Your data may be transferred to and processed in countries outside the EEA (for example, by our AI, hosting, and payment providers in the United States). Where this occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to ensure your data remains protected in line with GDPR.
You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have processed your personal data unlawfully.
9. Cookies and Local Storage
We use strictly necessary cookies for authentication and session management. These do not require your consent as they are essential for the Service to function.
With your consent, we also use analytics cookies provided by PostHog and Vercel Analytics to understand how the Service is used and to improve performance. These cookies track page views, feature usage, and site performance metrics. If you choose "Accept all", Meta's advertising-measurement cookies are also set (see section 10). These cookies are only set after you provide consent through our cookie banner. You can change your preference at any time via the cookie settings in your account or the website footer.
Error monitoring (Sentry) does not set cookies and does not track you across websites, so it runs without a cookie consent, on the basis of our legitimate interest in keeping the Service working reliably.
Advertising-measurement cookies from Meta (_fbp and _fbc) are set only after you choose "Accept all" in our cookie banner. See section 10 for what is shared and how to withdraw your consent. We do not use any other advertising or marketing cookies. Local storage may be used to save UI preferences such as language and theme settings.
11. Children's Privacy
ScienceIQ is intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.