Privacy Policy

1. Who we are

INSIGHTS is a product of XIVLabs ("XIVLabs", "we", "us", or "our"). We operate a unified scholarly search and AI synthesis platform at insights.xivlabs.com. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our platform.

For questions about this policy, contact us at: contactus@xivlabs.com

2. Information we collect

2.1 Information you provide

• Account registration data: name, email address, password (hashed), institutional affiliation, and role (student, professor, administrator).
• Contact form submissions: name, email, organization, role, and message content.
• Payment information: processed by our third-party payment processor; we do not store raw card data.

2.2 Information collected automatically

• Search queries you submit to INSIGHTS.
• Papers you view, save, or export.
• IP address, browser type, device type, and operating system.
• Usage patterns: pages visited, features used, session duration.
• Cookies and similar tracking technologies (see Section 7).

2.3 Institutional data

If your access is provided through a university or institutional license, your institution's administrator may share your name, email, department, and role with us for the purpose of granting and managing access.

3. How we use your information

• To create and manage your account.
• To process and respond to your search queries and generate AI-synthesized answers.
• To improve the quality and relevance of our search index and AI models.
• To send transactional emails (e.g., account confirmation, password reset).
• To send product updates and announcements (you may opt out at any time).
• To provide usage analytics to institutional administrators (aggregated and per-user, within the scope of their license).
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

4. Sharing your information

We do not sell your personal information. We share it only in the following circumstances:

• Institutional administrators: If your access is through an institutional license, your usage data (aggregate and per-user) may be visible to your institution's designated administrator within the admin dashboard.
• Service providers: We use third-party vendors for hosting, payments, email delivery, and analytics. These vendors process data on our behalf under data processing agreements.
• Legal requirements: We may disclose information if required to do so by law, regulation, or court order.
• Business transfers: If XIVLabs is acquired or merges with another company, your information may be transferred as part of that transaction.

5. Data retention

We retain your account data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal or compliance purposes.

6. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (right to erasure).
• Restrict or object to our processing of your data.
• Data portability — receive a copy of your data in a machine-readable format.
• Withdraw consent at any time, where our processing is based on consent.

To exercise these rights, email contactus@xivlabs.com. We will respond within 30 days.

7. Cookies

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how you use the platform. You can control cookie settings through your browser settings. Disabling certain cookies may affect the functionality of the platform.

8. Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include TLS encryption in transit, hashed password storage, and regular security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children

INSIGHTS is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us at contactus@xivlabs.com and we will promptly delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the platform. Your continued use of INSIGHTS after changes become effective constitutes your acceptance of the updated policy.

11. Contact

For any questions, concerns, or requests regarding this Privacy Policy, contact:
privacy@xivlabs.com