Privacy and terms
Last updated 5 November 2026.
In short
- Your API keys are never stored on this server.
- An account is an email address and a password hash. Nothing else about you is collected.
- Your topic, and the text selected from a paper you upload, are sent to the model and search services needed to assess them.
- Reports are kept for the period this deployment sets, and you can delete them, or your whole account, yourself.
- No cookies, no analytics, no advertising, no third-party scripts.
What is stored
Your account
Your email address, a salted scrypt hash of your password, and a hash of each sign-in session. The password itself and the session token are never written down. The email is not verified and no email is ever sent to it.
Your assessments
The topic you entered, the decision context if you gave one, the sources retrieved, the report, the scorecard and the automated checks. They are kept on this server for the period this deployment sets. After that they are deleted automatically. You can delete any assessment from its page at any time.
Papers you upload
The PDF is read once to extract the contribution it describes. The original file is deleted as soon as extraction succeeds. The extracted summary is kept with the assessment that uses it; if no assessment uses it, it is deleted within 24 hours.
Receipts
When you start a paid operation, the server keeps a short record so that a lost reply can be recovered without starting the operation twice. It holds a fingerprint of the request and the reply that was accepted, never the keys, and is deleted after 24 hours.
What is never stored
Your model and search API keys. They stay in your browser tab, are sent with each operation you start, are handed to the worker that runs it, and are gone when it ends. If you are signed in, they are also sent once when you save them, so that each provider can be asked whether it accepts its key. That check reads the provider's model list and the search service's account record; it requests no completion, runs no search and is not billed. They are not written to assessments, receipts, logs or any database. Closing the tab removes them from the browser.
Who else sees your content
An assessment cannot be made without sending parts of it elsewhere:
- The model provider you choose (DeepSeek, Alibaba Model Studio, OpenAI or Anthropic) receives your topic, the text selected from an uploaded paper, and the retrieved sources, under your own key and that provider's terms.
- The web search service you choose (Tavily or Serper) receives search queries derived from your topic.
- Public literature and patent services (OpenAlex, Crossref, Semantic Scholar, arXiv, PubMed, Google Patents and, where configured, Lens) receive search queries derived from your topic. They do not receive your paper.
- The websites of the sources found are fetched to read their publication details, as any reader's browser would.
If your topic or paper is confidential, consider what a search query built from it would reveal before you run it.
Links to an assessment
Each assessment has a long random address. Anyone who has that address can read the assessment without signing in, which is what lets you share a report. Cancelling, deleting or resuming an assessment made under an account needs that account. Share the link only with people who should read the report.
Your browser
The page keeps your language choice and your sign-in session in the browser's local storage, and your API keys in session storage for the open tab. There are no cookies. Nothing on the page loads from another site.
Operational records
The server logs each request's path and result, without its body, your keys or your password. Where the operator has enabled tracing, it records timings and outcomes of each stage; it excludes your topic, your text, prompts and keys.
Your controls
- Delete an assessment from its page.
- Change your password from the Account panel; other devices are signed out.
- Turn on “Email me when an assessment finishes” in the Account panel to get a message at your address, with the run's topic and link, when an assessment of yours completes or fails. It is off by default, nothing is sent for a run you cancel, and the switch is the only record of the choice.
- Delete your account from the Account panel. This removes every assessment, uploaded paper and receipt recorded under it, and cannot be undone. The service keeps recovery copies of the account list, so your email address and password hash stay in those copies for up to days after you delete the account, and are then gone. Assessments are not in those copies.
If you lose your password, use “Forgot your password?” on the sign-in screen: a one-time link is sent to the account's address, and setting a new password signs the account out everywhere. Where this deployment cannot send email, contact the operator.
Terms of use
- Not professional advice. A report is an automated reading of public sources. It is not investment, legal, regulatory or patent advice. Read the sources it cites before acting on it; the automated checks shown with each report say where it is weakest.
- Your keys, your costs. Operations you start are billed to you by the providers whose keys you supply. This service does not charge you and cannot refund them.
- Your right to upload. Upload only papers you are allowed to send to the model provider you chose.
- Fair use. Do not use the service to attack it or others, or to get around its limits. The operator may disable an account that does.
- No warranty. The service is provided as it is, without a guarantee of availability or accuracy. It may be changed or withdrawn.
Contact
Questions about this page or your data: the operator of this deployment, or the issue tracker of the project repository. The software is open source; what this page describes can be checked against the code there.