Data & Privacy Overview
What's shared, with whom, and what you can do about it.
This is a plain-language summary; our full Privacy Policy and Terms of Service are the legally governing documents.
What's sent for AI screening
When a paper is AI-screened, Zynthia sends its title, abstract, and keywords, along with your review's own criteria and topic, to Google's Gemini API to generate a decision, RI score, and evidence quotes. Your name, email, and institution are never included in that request.
Third parties
- Google, Gemini for AI screening, and Google OAuth if you sign in that way.
- ORCID, OAuth sign-in for researchers who prefer it.
- Resend, transactional email (invites, notifications).
- Railway, application hosting.
Cookies
Zynthia uses two HTTP-only cookies for authentication: a short-lived session cookie (8 hours) and a longer-lived refresh cookie (7 days). Neither is used for tracking or advertising.
Your rights
You can access, correct, delete, restrict, or export your data, and withdraw consent, at any time. Most of this is self-service:
- Export a project's data from its Export page (see Exporting & the Audit Trail).
- Delete your account from Settings → Danger Zone, deactivates immediately with a 30-day recovery window before permanent deletion.
- For anything not covered by account settings, contact [email protected].