Privacy & data handling.
What this open-source version actually does with your manuscript.
Manuscript processing
When you upload a manuscript or paste text, the server processes the content to extract text and return an analysis. The application does not implement user accounts, a manuscript database, or server-side long-term file storage. However, your hosting provider may operate application, access, error, or security logs according to its settings.
Browser session storage
The manuscript text and analysis are stored in your browser's sessionStorage so you can move between tabs in the research workspace without uploading again. This data is scoped to the browser tab session, is not encrypted by this application, and may persist through a reload or session restoration. Use the “Clear workspace” button to remove it. Avoid using public or shared devices with confidential research.
Optional Anthropic integration
If the deployment operator sets ANTHROPIC_API_KEY, portions of manuscript text and submission questions are sent through the application server to Anthropic's Messages API for processing. Anthropic's processing and retention terms apply independently; consult Anthropic's privacy information before using AI features. Without an API key, manuscript AI analysis is not invoked.
Journal searches
Search terms derived from a research topic or manuscript title are transmitted to the OpenAlex API when you request journal discovery. Do not submit confidential or patent-sensitive titles until you have reviewed the relevant service policies.
Security limitations
This is an early-stage open-source project. It includes file-size and format checks and basic security headers, but not user authentication, per-user rate limits, privacy agreements, enterprise audit controls or an independent security audit. Do not deploy publicly with valuable paid API credentials without adding authentication, rate limiting, monitoring and abuse protection.
Deployment responsibility
The person operating the deployment is responsible for configuring production security, privacy notices, applicable consent and data protection compliance, retention policies and contact details. This page is product documentation, not a substitute for legal advice or an organization-specific privacy policy.