Xeuron Privacy Policy

Effective: July 23, 2026

Xeuron is built for researchers, and we've modeled our approach to your data on the data-minimization practices of academic infrastructure like arXiv: we collect what's needed to run the Service, we don't sell your data, and we tell you plainly where it goes.

1. Information We Collect

• Account information: email, username, display name, avatar, bio
• Content you create: posts, comments, publications, workplace notes/collections, event registrations
• Usage data: pages visited, features used, via Vercel Analytics (aggregated, not tied to identity beyond what's needed for product metrics)
• Uploaded files: PDFs and images you upload, stored on our S3 infrastructure

2. How We Use Information

• Operate and improve the Service
• Compute product metrics (e.g. weekly active researchers) from aggregated usage
• Send account-related emails (confirmation, password reset)
• Enforce these Terms and our Code of Conduct

3. Third-Party Sharing — including AI providers

We share data with:

• Supabase (database and authentication infrastructure)
• AWS S3 (file storage for uploaded PDFs and images)
• AI providers (Anthropic, OpenAI, Google) — when you trigger AI metadata extraction or paper Q&A on a publication, the publication's PDF content is sent to the selected provider's API to generate results. We select providers based on cost and capability; we do not control their data-retention practices beyond their published API terms. We do not send your account information (email, etc.) to these providers — only the publication content you've chosen to extract.
• Stripe (payment processing, if/when applicable)
• We do not sell your data to advertisers or data brokers.

4. Cookies & Tracking

We use essential cookies for authentication (Supabase session cookies) and Vercel Analytics for aggregated, privacy-respecting usage metrics. We don't use third-party ad-tracking cookies.

5. Data Retention

We retain your data while your account is active. Deleted posts/comments are soft-deleted (content replaced, not immediately purged) to preserve thread integrity, consistent with standard forum practice; full removal on request is available via account deletion.

6. Your Rights

You can access, correct, or delete your account data at any time from your profile settings, or by contacting support@xeuron.com. You can request a copy of your data.

7. Security

We use RLS (row-level security) at the database layer, encrypted connections (HTTPS/TLS) throughout, and restrict administrative access to authorized personnel only.

8. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect data from anyone under 18.

9. Changes to This Policy

We'll post updates here with a new effective date, same as our Terms of Service.

10. Contact

Questions or data requests: support@xeuron.com