Privacy Policy

1. Who we are

The operator of PaperX (paperx-ai.com) is the personal information processor. This Privacy Policy explains how we collect, use, store, and share personal information under the PIPL, the Data Security Law, the Cybersecurity Law, and related rules on generative AI.

Using the service means you understand this Policy. We will obtain separate consent where the law requires it for sensitive personal information.

2. Information we process

We may process:

• account data: mobile number, SMS verification result, display name, session;
• research materials you upload: PDFs, drafts, notes, prompts, library and writing records;
• transactions: amount, channel, order id, ledger (card data stays with WeChat Pay / Alipay);
• device and logs: IP, browser, time, coarse region, security logs;
• feedback you submit.

3. Purposes and legal bases

We process data to perform the service contract, with consent, to meet legal duties, or as needed to keep the service secure without overriding your rights.

Your mobile number is sensitive personal information used for sign-in and essential notices, not unrelated marketing without consent.

4. Cookies

Essential cookies such as paperx_session keep you signed in. Disabling them may block login. Optional analytics run only when configured.

5. Processors and third parties

We may engage, as needed:

• SMS providers for login codes;
• WeChat Pay and Alipay for recharge;
• cloud hosting and object storage;
• model and retrieval providers, receiving only the context required for your request;
• open scholarly metadata APIs and lawful OA helpers.

6. Location, retention, and cross-border transfer

We generally store personal information in mainland China. Any overseas transfer will follow PIPL requirements (consent, contracts, and/or security assessment).

We keep data only as long as needed for the purpose, then delete or anonymize it, unless law requires longer retention for accounts, tax, or security.

7. Your rights

You may access, copy, correct, delete, withdraw consent, or delete your account via Settings or in-product feedback. We will respond after identity verification within the statutory period.

Some requests may be limited where law, contract performance, or security so require.

8. Children

The service is intended for adult researchers. Personal information of children under 14 is processed only with guardian consent.

9. Security

We use access control, encryption in transit, least privilege, and logging. No system is perfectly secure. We will notify you and regulators of incidents as required by law.

10. Updates and complaints

Updates appear on this page. Material changes will be highlighted or re-consented.

Contact us via in-product feedback or https://paperx-ai.com. You may also complain to competent cyberspace or public-security authorities.