1. What Information We Collect

Information You Provide

Registration Information: Your name, email, profile details and sign-in information.
User Content: Prompts, images, documents and table data you submit, and the figures, edits and project records you create.
Payment Information: Stripe processes payments. We keep purchase, subscription and billing records, including billing details you provide, but not your full payment card information.
Correspondence Information: Messages and information you send when requesting support or giving feedback.
Education Discount Verification: Education discount applications include your name, institution, eligibility category and proof images. We use them to check eligibility. Proof images are deleted within 30 days of a review decision; you can also delete them on the education discount page. Application details and review records stay with your account. Account deletion removes them, except for a verification marker needed to prevent repeat claims.

Information We Collect Automatically

Technical and Device Information: IP address, browser and device information, and security records needed to operate and protect the service.
Usage Information: Visits, feature usage, clicks, access times and referring websites.
Location Information: An approximate region inferred from your IP address. We do not request your browser's precise location.
Cookies and Similar Technologies: Used for sign-in, preferences, service measurement and referral attribution. We also keep records needed to protect accounts and prevent reward misuse. Browser signals do not reliably identify a unique person or physical device. See our Cookie Policy.
Marketing Attribution Cookie: A marketing-source cookie lasts 30 days and records how you reached SciFig. If you register, that source information is linked to your account to measure which channels lead to sign-ups.

Information From Other Sources

If you sign in with Google, we receive the account information you authorize for sign-in and account linking.

2. How We Use Your Information

We use information to provide drawing tools, manage accounts and payments, offer support, verify discount eligibility, deliver requested messages, measure service use and prevent abuse.

Legal Grounds for Processing

Performance of a Contract: To provide the service, manage your account and process payments.
Consent: For activities that require your consent, such as marketing messages. You can withdraw that consent.
Legal Obligations: For required financial records and responding to lawful requests.
Legitimate Interests: For security, fraud prevention, service improvement and resolving disputes, where those interests are not overridden by your rights.

Service improvement uses operational statistics, such as feature use and errors. It does not include training AI models on your content; see Section 3.

3. AI Models and Model Training

Your research content is used to fulfil your requests, not sold or assembled into training datasets. Access for support, security or legal obligations is limited to what is necessary.

We Do Not Train AI Models on Your Content

We do not use your prompts, uploads or generated figures to train or improve any AI model, whether our own or a third party's. This applies to all plans, including free accounts.

Third-Party AI Model Providers

We send content needed for your drawing request to third-party AI providers. For charts, AI planning uses a limited data preview; the original table is processed on our servers for calculations and plotting. We do not authorize providers to train models on your content. Their processing and retention are governed by their terms.

Deleting Your Content

Deleted projects leave your account immediately, and their conversations are permanently deleted after 30 days. You can use Clear History in Settings to remove generation history. When you delete your account, your uploaded files are removed from our storage as part of the deletion process, not just hidden. Deletion may take time to complete; records we must retain and backup copies are handled as described in Section 7.

4. How We Share Your Information

We do not sell your personal information. We share it only for the purposes below.

Services We Use

Stripe handles payments; Cloudflare hosts the service and stores files; AI providers process drawing requests; email and analytics services support communications and service measurement. We share the information needed for those tasks.

Legal and Compliance Obligations

We may disclose information when required by law or necessary to investigate abuse, protect rights and safety, or resolve legal claims.

Sale or Merger

If the business is transferred or reorganized, the recipient must respect this policy or provide equivalent protection.

With Your Consent

We may share information when you ask us to or give consent where required.

International Data Transfers

Our providers may process information in other countries. Where required, we use contractual and other safeguards for international transfers. Contact us for details of the safeguards relevant to your data.

Affiliate Referrals and Commissions

We share referral identifiers and account emails with PromoteKit for purchase attribution. Stripe payment information is used to calculate partner commissions.

5. Your Rights and Choices

Depending on the law that applies to you, you may request:
Access: confirmation of processing and a copy of your personal information.
Correction of inaccurate or incomplete information.
Deletion, subject to records we must keep for legal obligations or other lawful reasons.
Limits on processing in qualifying circumstances.
A copy in a commonly used format, where the right to data portability applies.
Withdrawal of consent, without affecting lawful processing already completed.
Applicable U.S. state privacy rights, including opting out of sale or targeted-advertising sharing. We do not sell your personal information.
An objection to certain processing, including direct marketing.
A complaint to your local data protection authority.
Email hello@scifig.ai to make a request. We aim to respond within 15 days after verifying your identity and will follow any applicable legal deadlines.

6. Data Security

We use access controls, secure connections and other reasonable measures to protect information. No online service can guarantee complete security. Keep your sign-in details secure.

7. Data Retention

We retain account and project information while needed to provide the service, unless you request deletion. The project and education-proof deletion periods are described in Sections 3 and 1. After account deletion, required financial records are retained for 7 years. Completed security, reward and email-operation records are generally cleared after 90 days; unresolved records remain until the issue is resolved or a legal retention requirement applies. Account-linked reward context is removed with the account. Backup copies are removed through the normal backup cycle. Data retained for accounting, fraud prevention or legal claims is limited to what those purposes require.

8. Information Relating to Minors

SciFig is not intended for children under 13, or the higher minimum age required locally. Contact hello@scifig.ai if you believe we hold a child's information in breach of this policy.

9. Privacy Policy Updates

We update this policy as the service or our practices change. We notify you of significant changes and update the effective date.

10. Contact Us

For privacy questions, requests or an alternative accessible version of this policy, email hello@scifig.ai.

11. Company Information

SciFig is operated by AI META TECH LTD, a private limited company registered in England and Wales. It is the controller responsible for personal information handled through this service.

SciFig Privacy Policy