Privacy Policy

1. Introduction

ScienceIQ ("we", "us", "our"), operated by Artemis Technology Kft., provides an AI-powered research and study platform. Artemis Technology Kft. is the data controller responsible for your personal data; our full company details are set out in the Contact section below. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services (collectively, the "Service").

By using ScienceIQ, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Data We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address
• Profile picture (if provided via social login)
• Authentication credentials (hashed passwords for email sign-up, or OAuth tokens for Google, Apple, and Facebook sign-in)

2.2 User-Generated Content

When you use the Service, we store:

• Uploaded documents (scientific papers, articles)
• Chat messages and conversations with the AI assistant
• Study materials you create or generate (quizzes, flashcards, mind maps, learning plans, presentations)
• Notes, reading progress, and study goals
• Folder organization and group participation data

2.3 Payment Information

Payments are processed by Stripe, Inc. We do not store your full credit card number, CVV, or banking details on our servers. We retain only a Stripe customer ID, subscription status, and billing period for account management. Please refer to Stripe's Privacy Policy for details on how your payment data is handled.

2.4 Usage Data

We automatically collect:

• Feature usage counts (e.g., number of papers analyzed, quizzes generated) for subscription limit enforcement
• Credit consumption and transaction history
• Session tokens and authentication timestamps

3. How We Use Your Data

We use your personal data to:

• Provide and maintain the Service, including AI-powered analysis and study material generation
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Enforce usage limits based on your subscription tier
• Improve the Service and develop new features
• Communicate with you about your account, updates, or support inquiries
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate ScienceIQ:

• OpenAI — Your uploaded documents and prompts are sent to OpenAI's API for AI-powered analysis, summarization, quiz generation, and other study features. OpenAI processes this data according to their Privacy Policy. OpenAI's API data is not used to train their models. We reserve the right to change our AI provider(s) from time to time; any replacement provider will be bound by equivalent data-protection and confidentiality obligations.
• Amazon Web Services (AWS) — Uploaded documents are stored securely in AWS S3 cloud storage.
• Stripe — Handles all payment processing and subscription management.
• Resend — Delivers transactional and account-related emails (for example sign-in links, notifications, and messages you send us through our contact form).
• PostHog — Product analytics that help us understand how the Service is used so we can improve it (only where you have consented to analytics cookies).
• Vercel Analytics — Aggregate traffic and performance metrics for the website.
• Authentication Providers — Google, Apple, and Facebook may receive limited data (such as authentication tokens) when you choose to sign in via their services.

Semmelweis Kiadó és Média Kft. — When you create an account, you consent to us sharing your email address with our partner Semmelweis Kiadó és Média Kft. (full legal name: Semmelweis Kiadó és Média Korlátolt Felelősségű Társaság; registered seat: 1089 Budapest, Nagyvárad tér 4. 2. em.; company registration number: 01-09-870237; tax number: 13729879-2-42), so that Semmelweis Kiadó may inform you about, and provide you with, the content, offers, and services related to your access, and may contact you for these purposes. You may withdraw this consent at any time by contacting us at the email address in the Contact section.

We do not sell, rent, or trade your personal data to any third party for marketing or advertising purposes.

5. Data Storage and Security

Your data is stored in secured PostgreSQL databases and AWS S3 storage. We implement industry-standard security measures including:

• Encryption of data in transit (TLS/HTTPS)
• Hashed and salted passwords (bcrypt)
• Secure, HTTP-only session tokens
• Access controls and principle of least privilege for internal systems

While we strive to protect your personal data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial transaction records).

Uploaded documents and generated study materials are deleted when you remove them from the platform or upon account deletion.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your personal data ("right to be forgotten")
• Data Portability — Request your data in a structured, machine-readable format
• Restriction — Request that we limit processing of your data
• Objection — Object to processing of your data for certain purposes
• Withdraw Consent — Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at the email address provided below. We will respond within 30 days.

8. European Users (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract — Processing necessary to provide the Service you signed up for
• Legitimate Interest — Improving our Service, preventing fraud, and ensuring security
• Consent — Where you have given explicit consent (e.g., optional communications)
• Legal Obligation — Where required by applicable law

Your data may be transferred to and processed in countries outside the EEA (for example, by our AI, hosting, and payment providers in the United States). Where this occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to ensure your data remains protected in line with GDPR.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have processed your personal data unlawfully.

9. Cookies and Local Storage

We use strictly necessary cookies for authentication and session management. These do not require your consent as they are essential for the Service to function.

With your consent, we also use analytics cookies provided by PostHog and Vercel Analytics to understand how the Service is used and to improve performance. These cookies track page views, feature usage, and site performance metrics. Analytics cookies are only set after you provide consent through our cookie banner. You can change your preference at any time via the cookie settings in your account or the website footer.

We do not use advertising or marketing cookies. Local storage may be used to save UI preferences such as language and theme settings.

10. Children's Privacy

ScienceIQ is intended for users aged 16 and older. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact the data controller:

• Company: Artemis Technology Kft.
• Registered address: 1117 Budapest, Budafoki út 64/A B. lház. 3. em. 302. ajtó, Hungary
• Company registration number: 01-09-457954
• Tax number: 33078230-2-43
• Email: contact@scienceiq.ai