Privacy notice.
In plain language.

We treat uploaded content as confidential. PerfectPaper does not use manuscripts, supporting files, prompts or system instructions, generated feedback, model reasoning or thinking content, tool calls or results, or your actions on feedback to train a generative model. We disclose content only to service providers needed to deliver and protect the Services.

When you request deletion of a review session, we initiate deletion through the application. Some records may remain temporarily in backups, provider systems, audit records, or legal holds under applicable retention requirements.

We do build one thing from your own past reviews, and only for you: if you connect your ORCID iD, PerfectPaper summarizes patterns across up to 100 of your recent findings and up to 20 of your published works, so a later review can tell you when something recurs. It is never pooled with anyone else's work and never used to train a model. Disconnecting your ORCID iD in Settings › Profile deletes it.

We collect information you give us and information collected automatically when you use the Services:

We do not seek to collect sensitive personal information.

We process your information to:

• create and authenticate your account and deliver reviews;
• process the manuscripts you upload in order to generate feedback;
• take payment, manage credits and subscriptions, and prevent fraud;
• respond to your questions and provide support;
• understand usage so we can improve the Services;
• send service messages, and — where you've opted in — marketing you can leave anytime.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performance of a contract (to provide the Services you request), legitimate interests (to secure and improve the Services, where not overridden by your rights), consent (for optional marketing, which you can withdraw at any time), and legal obligations (to comply with applicable law).

We share information with vendors who process it on our behalf and under confidentiality and data-protection obligations, by category:

We may also share information to comply with law, or in connection with a merger, acquisition, or sale of assets — in which case we will tell you.

We provide reviews through paid commercial API services. Manuscript content, instructions, tool context, and generated responses are sent to an enabled provider only to perform the requested review. PerfectPaper does not opt in to provider model-training programmes.

Google states that paid Gemini API prompts — including system instructions, cached content, and files — and responses are not used to improve Google's products. Limited safety logging and separate retention for features such as Grounding with Google Search may still apply. Anthropic states that commercial API inputs and outputs are not used to train its models unless the customer explicitly opts in.

• Google Gemini API paid-service data terms
• Anthropic commercial-product training policy
• PerfectPaper service-provider inventory

Provider safety, security, legal, and abuse-prevention retention can differ from model training. We evaluate those terms separately and disclose the configured provider inventory on our subprocessors page.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and understand usage. You can control cookies through your browser. Where required, we ask for your consent to non-essential cookies.

We use your approximate country, derived from your IP address via Cloudflare, to show regional pricing that reflects local cost of living. We retain coarse pricing-decision records — country only, never your full IP — for up to 180 days to detect and prevent pricing fraud. This processing rests on our legitimate interest in offering fair, sustainable pricing and is never used to make an automated decision about you under Art. 22 GDPR.

We operate from the United States, and your information may be processed there and in other countries where we or our providers operate. Where we transfer personal information out of the EEA or UK, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We keep information while needed to provide the Services, secure and improve them, meet contractual or legal obligations, resolve disputes, and preserve required records. A deletion request initiates deletion from active application workflows, subject to legal holds and defined periods for audit records, backups, and provider copies. We are formalising and validating those periods across each production system.

We use technical and organisational measures designed to protect your information, including scoped access controls, authentication safeguards, secure development, monitoring, and encryption provided by the application and infrastructure layers. No system is perfectly secure. Our security programme includes risk assessment, incident escalation, vendor review, and control-deficiency management.

The Services are not directed to children under 18, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact [email protected] and we will delete it.

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to object to or restrict certain processing, and to withdraw consent. We will respond as required by applicable law, and we will not discriminate against you for exercising your rights.

Two of these you can exercise yourself, straight away: delete any review and its source document from that review's page, and turn marketing email on or off in your notification settings . For access, correction, export, or deletion of your account and everything in it, use the privacy rights request form — every request is recorded when you submit it, and we respond within the period the law allows.

If you are a resident of a US state with a comprehensive privacy law — such as California, Colorado, Connecticut, Texas, Virginia, and others — you may have rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of any "sale" or "sharing" for targeted advertising. PerfectPaper does not sell your personal information. To make a request, contact [email protected]; we will verify your identity before acting.

We will update this notice as our practices or the law change. When changes are material, we will post the updated notice with a new effective date and, where appropriate, notify you directly.

Questions about your privacy, or want to exercise a right? Email [email protected], or write to PerfectPaper, Inc., Privacy Department, Delaware, USA. If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.