FactReview

Privacy Policy

Your paper. Your data.
Our responsibility.

Last updated: April 2026

🔒

Encrypted in transit & at rest

All uploads use TLS 1.3. Papers stored on Neon Postgres with AES-256 encryption.

🚫

Never used to train models

Your paper is never sent to any model training pipeline. It is used solely to generate your review.

🗑

Deleted on request within 7 days

Email delete@factreview.ai and we'll erase all your data — paper, review, and account — within 7 days.

What we collect

When you submit a paper, we collect: your email address (to send the magic link and identify your reviews), the paper itself (PDF or arXiv URL), and the FactReview analysis output. We do not collect your name, institution, or any other personal information. We also collect standard server logs (IP address, timestamp, HTTP status) for security and debugging. These are retained for 30 days.

How we use your paper

Your paper is passed to the FactReview analysis pipeline (Xu et al., 2026) running on our servers. It is not sent to third-party AI APIs for training. It is not shared with other users. It is not indexed by search engines (all review pages carry noindex headers). The review URL is a 32-byte cryptographically random ID — effectively a secret. Do not share it with people you don't want reading your review.

Authentication & sessions

We use magic links — no passwords. When you click Submit, we send a one-time sign-in link to your email. Clicking it creates a 30-day session cookie. We don't store passwords. Session tokens are stored in our Neon Postgres database. They expire automatically after 30 days of inactivity.

Data retention & deletion

Reviews are stored indefinitely until you request deletion. To delete all your data, email delete@factreview.ai with the subject line "Delete my data". We will delete your account, all reviews, and all associated data within 7 days and confirm by email. We set up a Resend inbox at delete@factreview.ai that forwards to our team.

Third-party services

We use: • Neon Postgres (neon.tech) — database, hosted in AWS us-east-1 • Resend (resend.com) — transactional email (magic links) • Vercel (vercel.com) — hosting and edge infrastructure • Vercel Analytics — anonymous page-view analytics (no cookies, GDPR compliant) We do not use Google Analytics, Meta Pixel, or any advertising trackers.

Open source

FactReview is built on the FactReview research pipeline (Xu et al., 2026), licensed under Apache 2.0. The pipeline source is available at github.com/ChaoqianO/factreview. The web application code (this site) is not yet open source, but we plan to open it after the alpha phase.

Questions about this policy? privacy@factreview.ai

Powered by FactReview (Xu et al., 2026) · Apache 2.0