Privacy Policy

1. What RunPaper does

RunPaper is a tool that lets you upload ML/AI research papers (PDFs) or supply an arXiv URL and receive a runnable Python code scaffold, reproducibility checklist, and interactive Q&A about the paper. This privacy policy explains what data we collect, how we use it, and your rights.

2. Data we collect

• Uploaded PDFs. When you upload a paper, the raw PDF bytes are stored temporarily in our cloud storage (Supabase Storage). Files are retained for up to 30 days and then deleted automatically.
• Paper text. We extract the full text from your PDF and send up to 50 000 characters to our LLM provider (Anthropic) to generate structured analysis, code scaffolds, and answers to your questions. We do not retain paper text in any database; it is used only for the duration of the analysis request.
• Account information. If you sign in with Google, we store your Google user ID, display name, email address, and profile picture URL in our database (Supabase PostgreSQL). This data is used solely to associate your papers with your account.
• Anonymous trial ID. Users who have not signed in are assigned a random UUID stored in their browser's localStorage. This is used to enforce the one-paper free trial limit. No personal information is linked to this ID.
• Chat messages. Questions you ask in the Chat tab are sent to our LLM provider for answering. We store the Q&A pairs in our database so the chat history persists during your session; they are deleted when the associated paper is deleted.
• Usage logs. Our servers log the HTTP method, path, response status, and latency of each request (no request bodies). These logs are retained for 30 days and are used only for debugging and abuse detection.

3. Third-party services

• Anthropic — We send paper text and chat messages to Anthropic's Claude API for analysis and code generation. Anthropic's privacy policy governs their handling of API data. By default, Anthropic does not train on API data.
• Supabase — We use Supabase for database storage and file storage. Data is stored in the US (AWS us-east-1). See Supabase's privacy policy.
• Google OAuth — Sign-in is handled by Google. We receive only the standard OpenID Connect profile (name, email, picture). Google's privacy policy applies to the OAuth flow.
• Sentry (optional) — If configured, we use Sentry for error monitoring. Error payloads may include stack traces and request metadata but never paper content.
• arXiv — When you import a paper via arXiv URL, we fetch the PDF from arxiv.org on your behalf. No personal data is sent to arXiv.

4. How we use your data

• To generate code scaffolds, reproducibility checklists, and architecture diagrams for papers you submit.
• To authenticate you and associate papers with your account.
• To enforce the free trial limit for anonymous users.
• To debug errors and detect abuse.

We do not sell, rent, or share your data with third parties beyond the services listed above. We do not use your data for advertising.

5. Data retention

• Uploaded PDFs: deleted within 30 days of upload.
• Paper analysis results (extraction JSON, code scaffold, etc.): retained until you delete the paper.
• Account data: retained until you request deletion.
• Server logs: retained for 30 days, then deleted automatically.

6. Your rights

You may request deletion of your account and all associated data at any time by emailing us at privacy@runpaper.app. We will respond within 30 days.

You can delete individual papers at any time from your dashboard. Deleted papers are soft-deleted (marked as deleted) and permanently removed after 30 days.

7. Security

Data at rest is encrypted by Supabase (AES-256). Data in transit is encrypted via TLS. We use short-lived signed URLs for PDF access. Our backend API rate-limits all requests to mitigate abuse. Nevertheless, no system is perfectly secure; please do not upload documents containing sensitive personal or confidential information.

8. Children

RunPaper is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this policy from time to time. Material changes will be noted at the top of this page with a new “Last updated” date. Continued use of the service after changes constitutes acceptance of the revised policy.

10. Contact

Questions about this privacy policy? Email us at privacy@runpaper.app.