Privacy Policy

How Literature Review AI handles your data, including files uploaded to Lit Review Outline
Oct 10, 2026

Last updated: October 13, 2026

This policy explains what personal data Literature Review AI (literaturereviewai.online, "we") collects, why, who processes it for us, and the choices you have. Contact: .

1. What we collect

  • Account data: when you sign in with Google (or another sign-in method we offer), we receive your name, email address and profile picture.
  • Project data (Lit Review Outline): your review questions and settings, the bibliography entries you import, the text extracted from your PDFs page by page, and what we produce from it (evidence quotes with page references, topics, coverage results, suggestions and outlines). Your original PDF files are parsed in your browser and are never uploaded to or stored on our servers.
  • Free tools: the research topic or question you type into a free generator, and the results produced.
  • Purchases: Creem, our merchant of record, collects your payment details. We receive the order record (amount, product, date, your email) but never your full card number.
  • Feedback and support: answers to in-product questions, error reports you send, refund requests (your answers plus a short diagnostic summary of the project: status, counts, dates and processing cost, never your page text), emails you exchange with us, and messages and contact details you submit through our support chat.
  • Technical data: IP address, browser type, pages visited and timestamps in server logs; cookies needed for sign-in, language and preferences; and, if enabled, analytics cookies (see Section 6).

2. How we use it

  • To provide what you asked for: build your project, show it to you, export it, and send transactional emails (for example payment confirmations or a short follow-up asking how the outline worked).
  • To keep the Service secure and prevent abuse, including enforcing usage limits and refund rules and responding to payment disputes.
  • To improve quality (see Section 3).
  • To meet legal and accounting obligations.

We never use your files or project data to train AI models, and we never sell your data. Requests to AI providers are sent with data-collection and training opt-out settings.

Legal bases (where GDPR or similar laws apply): performance of our contract with you; our legitimate interests in security, abuse prevention and service improvement; your consent for optional analytics cookies; and legal obligations.

3. Quality checks during the Beta

While Lit Review Outline is in Beta, we check output quality in two ways: an automated daily re-check that compares quotes in newly generated outlines with the stored page text of your papers; and occasional manual review by our team of a small sample of items in a project (for example about ten evidence items and ten points or sentences). Manual review is used only to find and fix errors, is done on our own systems, and is never shared. You can opt out at any time by emailing us; opting out does not affect your refund rights.

4. Who processes data for us

We share data only with providers that help us run the Service, and only what they need:

ProviderPurposeData involved
VercelWebsite and API hostingRequests, technical logs
NeonDatabaseAccount and project data
OpenRouter and the AI model providers it routes toEvidence extraction, summaries, outline draftingExcerpts of your page text, your questions; sent with training opt-out
OpenAlex, Crossref, UnpaywallScholarly metadata, citation and open-access lookupsSearch queries built from your questions, titles and DOIs (not your files)
Search and AI providers used by free toolsGenerating free-tool resultsThe topic you type
CreemPayments, invoices, tax (merchant of record)Order and payment data
ResendTransactional emailYour email address and the message
tawk.toWebsite support chat, offline messages and support ticketsMessages and contact details you submit, and chat-related technical data such as IP address, browser, visited page and timestamps
InngestBackground processing of projectsProject identifiers and job status
GoogleSign-inAccount identifiers

Some providers are located outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

Support chat is separate from your review project. We do not automatically send your bibliography, PDF text or generated outline to tawk.to. Please do not send passwords, payment details or unpublished manuscripts through chat. You can contact us by email instead. See tawk.to's privacy information.

5. How long we keep it

  • Project data stays available for 30 days after purchase and is then deleted automatically by a daily clean-up job. You can delete a project yourself at any time; deletion takes effect immediately and cannot be undone.
  • Account data is kept while your account exists. Email us to delete your account and any remaining project data.
  • Order records are kept as long as tax and accounting laws require.
  • Refund requests (your answers and the diagnostic summary) are kept for up to 24 months after the request, even after the project is deleted, to handle refunds, prevent abuse and improve the product.
  • Server logs are kept for a limited period by our hosting provider.

6. Cookies and analytics

We use cookies that are necessary for sign-in, security and your language setting. If analytics are enabled, we use them only to understand aggregate usage of the site; you can block or delete cookies in your browser at any time without losing access to core features.

The support chat uses cookies and browser storage to maintain conversations across pages. Where its consent prompt is shown, you can accept or decline before starting a chat. Blocking chat storage may prevent chat from working; email support and the review tools remain available.

7. Your rights

Depending on where you live, you can ask to access, correct, export or delete your personal data, object to or restrict certain processing, and withdraw consent. Email us and we will respond within 30 days. You can also complain to your local data protection authority.

8. Unpublished material

If you upload preprints or unpublished manuscripts, they follow the same path: parsed in your browser, stored only as page text for your own project, sent to AI providers only to produce your deliverable, and deleted as described above.

9. Security

Traffic is encrypted with HTTPS, secrets are kept on the server side only, and access to production data is restricted. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.

10. Children

The Service is not intended for anyone under 16, and we do not knowingly collect their data.

11. Changes

We will post updates here with a new date and notify account holders of material changes by email or in the product.