Privacy Policy

This Privacy Policy explains what information ScholarLib ("we," "us") collects when you use our website and Service, why we collect it, and the choices you have.

1. Information We Collect

Account information. When you sign up, we collect your email address and, if you sign in with Google, your name and profile information from that account.

Content you submit. This includes research questions, topics, uploaded PDFs, and pasted text you provide to the Drafting Room and Analyzer, and the checklist steps you tick.

Generated content. AI-generated drafts, analyses, scores, and commentary produced for you are stored so you can revisit them later (My Drafts / My Analyses).

Payment information. When you buy credits, our payment processor, Dodo Payments, collects your billing details directly. We do not receive or store your full card number.

Usage information. Basic technical data such as your theme preference (light/dark), stored locally in your browser.

2. How We Use Information

• To provide and operate the Service, including generating and grading your submissions;
• To maintain your account, credit balance, and saved drafts/analyses;
• To process payments and prevent fraud;
• To communicate with you about your account or the Service;
• To improve and maintain the reliability of the Service.

3. Third-Party Service Providers

We share the minimum information necessary with the following providers to operate the Service:

• Firebase (Google) — authentication and database storage for your account, drafts, analyses, and checklist progress.
• Anthropic (Claude) — processes the text you submit to the Drafting Room and Analyzer in order to generate or grade content.
• Google (Gemini) — used for supporting AI features such as citations and search.
• Pinecone — vector search infrastructure used to support citation lookup.
• Dodo Payments — our payment processor and merchant of record for credit purchases.

These providers process data on our behalf and under their own privacy and security commitments. We do not sell your personal information.

4. Data Retention

We retain your account information and saved content for as long as your account is active. If you delete your account or request deletion, we will remove your personal data within a reasonable time, except where we are required to retain records (for example, payment records) for legal or accounting purposes.

5. Your Rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact us at the email below.

6. Children's Privacy

ScholarLib is used by IB students, many of whom are minors. If you are under 18, you should have your parent's or guardian's permission before creating an account or making a purchase. We do not knowingly collect personal information from children under 13 without appropriate consent; if you believe a child has provided us information without consent, contact us and we will remove it.

7. Cookies and Local Storage

We use essential cookies/local storage for authentication sessions and to remember your theme preference. We do not use third-party advertising trackers.

8. Data Security

We rely on Firebase's security infrastructure to store your data and follow reasonable practices to protect it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Our service providers operate infrastructure in multiple countries, including the United States. By using the Service, you understand that your information may be processed outside your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above.

11. Contact

Questions about this Privacy Policy, or requests to access/delete your data, can be sent to support@scholarlib.app.