Privacy Policy

Effective Date: 05/03/2026 CitedEvidence (citedevidence.com) is operated by Videmak, Inc. ("we", "us"). This Privacy Policy explains what personal data we collect when you use CitedEvidence, including through apps such as ChatGPT and Claude, why we use it, who we share it with, how long we keep it, and the choices you have. 1. Information we collect a. Account information Name, username and email address. Your password, stored only as a secure hash, or your Google account identifier if you sign in with Google. Your plan, credit balance and account settings. b. Content you provide Research questions and the reports we generate for you. Documents and papers you upload or save to your Library, your notes and annotations. Manuscripts and other text you submit for review, writing or analysis, and your chats with our assistants. c. Payment information Payments are processed by Stripe. We receive a payment confirmation, the amount, and limited card details (such as the last four digits). We do not store full card numbers. d. Usage and device information We collect your IP address, browser and device type, pages visited, features used, time spent and referring sites. Some of this comes from cookies and similar technologies (see section 6). e. Support messages The messages and attachments you send to our support team. f. Connected AI apps (ChatGPT, Claude, Codex and other apps) When you connect CitedEvidence to an AI app, we keep a record of the connection: the app's name, the access you approved and when it was last used. We also keep secure tokens that let the app act on your behalf. The app sends us only what each request needs: your search terms, the references or text you ask us to check, format, research or review, and the papers you ask us to save. We don't receive the rest of your conversation, and the app never receives your CitedEvidence password or payment details. 2. How we use your information To provide the service: searching and analysing literature, generating research reports and reviews, storing your Library, and responding to requests from apps you connect. To manage your account, credits and payments. To communicate with you: service messages, support replies and, if you opt in, product updates. To keep the service secure, prevent fraud and abuse, and fix problems. To understand how the service is used and improve it. To comply with legal obligations. We do not sell your personal data. We do not use your documents, manuscripts or research content to train AI models. 3. Who we share information with We share personal data only with the following categories of recipients, and only as needed to run the service: Cloud hosting and security: Microsoft Azure and Cloudflare host and protect the service. AI model providers: to answer your requests, your prompts and the relevant content are sent to the AI model providers we use, such as OpenAI (including through Microsoft Azure OpenAI), DeepSeek and providers reached through OpenRouter. Scholarly data services: to find and verify papers, we send search terms, titles and DOIs to scholarly databases such as Crossref. Payments: Stripe. Email delivery: Resend sends account and service emails. Analytics and advertising measurement: Google Analytics, PostHog, Microsoft Clarity, and the Meta and TikTok pixels, according to your cookie choices. Apps you connect: ChatGPT, Claude or other apps you authorise receive the results of the requests they make on your behalf. Their own privacy policies govern what they do with them. Legal and business transfers: when required by law or a valid legal request, or as part of a merger, acquisition or sale of assets. 4. How long we keep information Account information: while your account is open. After you ask us to delete your account, we delete or anonymise it within 30 days. Research reports, Library documents, notes and reviews: until you delete them. Deleted research reports stay in "Recently deleted" for 30 days so you can restore them, then are permanently removed. Connected-app access: Access tokens expire after 1 hour. Refresh tokens expire after 90 days without use. Disconnecting an app revokes its access immediately. Expired and revoked tokens are deleted shortly after. The connection record is kept until you disconnect the app or delete your account. Payment and invoice records: as long as tax and accounting laws require, generally up to 7 years. Support messages: up to 2 years after the request is closed. Usage logs and analytics: up to 12 months. Backups: deleted data may remain in encrypted backups for up to 30 days before it is overwritten. 5. Your rights and choices Access and correction: view and edit your profile in Profile; ask us for a copy of your data. Deletion: delete research, Library documents and notes at any time, or ask us to delete your account. Connected apps: see and disconnect apps such as ChatGPT and Claude at any time in Profile → Connected apps. You can also remove CitedEvidence in the app's own settings. Marketing: unsubscribe using the link in any marketing email. Cookies: control cookies in your browser settings. To exercise these rights, contact us using the details below. We respond within 30 days. 6. Cookies and tracking technologies We use cookies to keep you signed in, remember your preferences, measure how the service is used, and measure advertising. Analytics and advertising cookies come from the providers listed in section 3. You can block or delete cookies in your browser. Essential cookies are needed for sign-in to work. 7. Security We protect your data with encryption in transit, access controls and hashed passwords and tokens. Connected apps get only the access you approve. No system is completely secure, but we work to protect your information and respond promptly to security issues. 8. Children CitedEvidence is not directed to children under 13, and we do not knowingly collect their personal data. If we learn we have, we delete it. Users between 13 and 18 should use the service with a parent's or guardian's permission. 9. International transfers We are based in the United States and Uganda, and our service providers process data in the United States and other countries. When we transfer personal data internationally, we use appropriate safeguards, such as contractual protections with our providers. 10. Third-party websites CitedEvidence links to publishers and other websites that we don't control. Their privacy policies apply when you visit them. 11. Changes to this policy We may update this policy. We'll change the effective date above and, for significant changes, notify you by email or in the app. 12. Contact us Videmak, Inc. (CitedEvidence) Email: [email protected] Phone: +256702270442 Address: 1111B S Governors Ave STE 26609, Dover, DE 19904, USA