Privacy Policy

In this policy, “RRL Finder,” “we,” and “us” mean the operator of the RRL Finder service. For privacy questions or requests, email support@rrlfinder.com. Please do not include your password or payment-card details in your message.

This policy applies to the RRL Finder website, account, and research workspace. It does not govern third-party websites or services linked from the product.

• Account information: email address, name, account identifiers, authentication and account status information.
• Research and workspace content: searches and search history, saved papers, collections, notes, project details, documents and drafts, citations, comments, collaboration activity, and feedback you submit. This may contain personal or sensitive information if you choose to include it.
• Service and usage information: feature and request usage, AI token counts, subscription and entitlement records, security events, timestamps, and technical diagnostic or hosting logs.
• Payment-related information: subscription status, transaction references, amount, currency, and billing events. Payments are processed by Paddle; RRL Finder does not ask you to send full card numbers to us.
• Browser storage and analytics: authentication cookies, temporary browser storage used to restore research sessions, and privacy-oriented site analytics. See our Cookie and Browser Storage Policy.
• Research metadata: paper details and identifiers retrieved from scholarly sources. These records may be cached to provide search and paper-detail features.

We use information to create and secure accounts; provide search, research organization, collaboration, export, citation, and AI features; save your work; administer plans and billing; respond to support requests; prevent fraud and abuse; maintain service reliability; meet legal obligations; and understand aggregate service usage.

We use account and content information only for purposes connected to operating and improving the service, subject to applicable law. We do not sell personal information. We do not use private workspace content to advertise third-party products.

We share information with service providers that help operate RRL Finder, including Supabase for authentication and database hosting, Vercel for application hosting and web analytics, OpenAI when an AI feature is used, scholarly metadata and full-text providers when you search or request research information, Paddle for subscriptions and payments, and Cloudinary when you attach an image to feedback. The information sent depends on the feature you choose. Providers process information under their own terms and privacy notices.

Search terms and relevant paper or document content may be sent to OpenAI to answer a request you make using an AI feature. Do not submit information you are not authorized to share or that you do not want processed by the applicable provider.

Content in a project or shared workspace is visible to its authorized members according to the workspace’s membership and access settings. We may also disclose information when required by law, to protect users and the service, or as part of a business transfer, subject to applicable legal requirements.

We and our providers may process information in countries other than yours. Those countries may have different data protection laws. We use provider safeguards and contractual arrangements where applicable, but no online system can be guaranteed completely secure.

We use access controls, authentication, and technical and organizational safeguards designed to protect information. You are responsible for keeping your credentials private and for choosing what to include in research content.

We keep account and workspace information while needed to provide the service, maintain your account and records, meet legal and accounting requirements, resolve disputes, and enforce our agreements. Some information may remain in protected backups or provider logs for a limited period after deletion. Retention periods can also depend on provider settings and applicable law.

You can delete some content through the product where those controls are available. To request account deletion, access, correction, or deletion of other information, contact us using the address below. We may need to verify your identity and may retain information where the law permits or requires it.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information; object to or restrict certain processing; withdraw consent where processing relies on consent; or complain to a data protection authority. Send requests to support@rrlfinder.com. We will respond as required by applicable law.

You can stop using browser-based session storage by closing the tab, clear browser storage in your browser settings, and manage cookies through your browser. Clearing authentication cookies may sign you out. Some features may not work without necessary authentication storage.

RRL Finder is intended for research users and is not designed for children who are below the minimum age permitted to use online services in their location. We do not knowingly seek to collect children’s personal information without any legally required authorization. Contact us if you believe a child has provided information to the service.

We may update this policy when our service or legal obligations change. We will post the updated version here and revise the date above. For privacy requests or questions, email support@rrlfinder.com.