Privacy and manuscript data

Data the service handles

SciRedPen handles account details, the PDF you select, extracted text and page images, review outputs, project and job status, and credit history. Payment card details are entered with Stripe and do not reach this application server.

Services involved in your account and reviews

OpenAI receives the manuscript and extracted material needed to produce the review. Crossref receives DOI strings for citation metadata checks. Stripe receives payment information when you purchase credits or a subscription; it does not receive manuscripts from SciRedPen. When account email is enabled, the email delivery provider (SMTP) chosen by the operator receives the account email address and the account access messages for delivery; it does not receive manuscripts.

Storage and retention

The application stores each manuscript and its outputs in the deployment's project storage and keeps account, job, and credit records in its database. The configured retention period is 7 days. Your Account page shows the same live setting.

Deletion

You can delete a project before review or after a review succeeds or fails. A queued or running review cannot be deleted because it may still be writing results. Deletion immediately hides the project, then a durable queue removes storage before its database tombstone. Failures are retried and the receipt reports completion. The Account page also exports account data and can permanently revoke and delete the account. Managed backups must expire within the deployment's published backup-retention period.

This browser

Review comments and quoted manuscript passages are held in this tab's session storage. They are cleared when the tab closes, when you sign out, when you delete the project, and when the project is no longer in your library. Local storage keeps language, theme, panel preferences, and the identifier and filename of the review being tracked; signing out removes that tracking entry. Each entry is tied to the account that wrote it, so another account signing in on this browser does not recover it. Clearing this site's browser data removes the remaining local preferences and caches.

Provider retention and training

Provider retention and training terms depend on the OpenAI account and agreement configured by the service operator. This code does not make or verify a no-training promise. Confirm that the deployment meets your institution, funder, journal, consent, and confidentiality requirements before submitting restricted material.

Security boundary

SciRedPen restricts projects to their authenticated account in the application. Transport encryption, storage encryption, backups, staff access, and incident response depend on the deployed infrastructure. Use only a deployment approved for the sensitivity of your manuscript.

Questions and requests

For deployment-specific retention, backups, provider agreements, access requests, or incidents, contact the service operator.

Contact the organization or operator that provided access to this deployment.