Beta Logo

Privacy Policy

Last Updated: 8 July 2026

1. Introduction

ResearchPal ("ResearchPal," "we," "us," or "our") is a company registered in the United Kingdom with its registered office at Level 1, Devonshire House, One Mayfair Place, London, United Kingdom. This Privacy Policy explains what personal information we collect through researchpal.co and our AI-powered research assistant platform (together, the "Service"), how we use and share it, and the rights available to you.

This Privacy Policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you access the Service from the European Economic Area ("EEA"), the EU GDPR may also apply to our processing of your personal data.

By accessing or using ResearchPal, you agree to the collection and use of information as described here. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

  • Account information: name, email address, password (stored hashed), institution/organization (optional), and any profile details you add.

  • Uploaded content: documents, PDFs, research papers, notes, and other files you upload for AI analysis, summarization, or querying.

  • Communications: support messages, feedback, and survey responses.

  • Payment information: if you subscribe to a paid plan, billing details are collected and processed by our payment processor, Stripe. We do not store full card numbers on our own servers.

2.2 Information Collected Automatically

  • Usage data: pages visited, features used, search queries, session duration, and interaction with AI outputs.

  • Device and log data: IP address, browser type, operating system, device identifiers, referring URLs, and timestamps.

  • Cookies and similar technologies: functional and analytics cookies only, as described in our Cookie Policy. We do not use advertising or retargeting cookies.

2.3 Information From Third Parties

  • If you sign in via a third-party account (e.g., Google Sign-In), we receive basic profile information as permitted by your settings with that provider.

  • Analytics tools may supply aggregated or technical usage data.

3. How We Use Your Information

We use personal information to:

  • Provide and operate the Service, including processing uploaded documents through ResearchPal's proprietary AI to generate summaries, citations, and AI-assisted answers.

  • Create and secure your account.

  • Process payments and manage subscriptions via Stripe.

  • Improve, personalize, and develop new features.

  • Communicate updates, security alerts, and support responses.

  • Send marketing communications, where permitted, with an opt-out available at any time.

  • Detects, investigates, and prevents fraud, abuse, and security incidents.

  • Comply with legal obligations and enforce our Terms & Conditions.

4. Legal Basis for Processing

Under UK/EU GDPR, we rely on:

  • Contractual necessity — to deliver the Service you signed up for.

  • Consent — for optional analytics cookies and marketing emails.

  • Legitimate interests — to secure and improve the Service and prevent fraud, balanced against your rights.

  • Legal obligation — where processing is required by law.

5. How Your Content Is Processed by AI

ResearchPal combines proprietary platform technologies with carefully selected third-party AI models to deliver its AI-powered features. When you use features such as literature reviews, paper analysis, writing assistance, or PDF chat, your content may be securely processed by trusted AI service providers solely to generate the requested output. ResearchPal does not use your content to train its own AI systems, and we do not permit third-party AI providers to use your submitted content for model training where contractual and technical safeguards are in place. For more information about how AI processes your data, please refer to our AI & Data Usage Policy, which is incorporated into these Terms by reference.

6. How We Share Your Information

We do not sell your personal information. We may share it with:

  • Service providers: cloud hosting/infrastructure, analytics, customer support tooling, and payment processing (Stripe), all bound by confidentiality and data-protection obligations. These providers support our infrastructure — they do not independently access or use your content for their own purposes.

  • Legal and safety purposes: to comply with law, respond to valid legal requests, or protect the rights and safety of ResearchPal, our users, or the public.

  • Business transfers: in connection with a merger, acquisition, or asset sale, under standard confidentiality terms.

  • With your consent: for any other purpose disclosed at the time of collection.

7. Data Retention

We retain personal information and uploaded content while your account is active and as necessary to provide the Service. After account deletion, we delete or anonymize personal data within 30 days, except where longer retention is required for legal, tax, security, or dispute-resolution purposes. You may request earlier deletion via Section 9.

8. International Data Transfers

ResearchPal is headquartered in the United Kingdom. If you access the Service from outside the UK, your information may be transferred to and processed in the UK (and, where our infrastructure providers operate elsewhere, in other countries). Where required, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs) for international transfers.

9. Your Privacy Rights

If you are in the UK or EEA: you may access, correct, or request erasure of your data; restrict or object to processing; request data portability; and withdraw consent at any time. You may also lodge a complaint with the UK Information Commissioner's Office (ICO) or your local EU data protection authority.

All users, regardless of location: you may request access to, correction of, or deletion of your personal data, or export of your uploaded content, by contacting info@researchpal.co. We respond within the timeframe required by applicable law (generally one month under UK/EU GDPR).

10. Data Security

We use administrative, technical, and physical safeguards — including encryption in transit and at rest, access controls, and regular security reviews — designed to protect your information. No system is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

ResearchPal is not directed to, and is not intended for use by, individuals under 13. We do not knowingly collect personal information from children under 13. If we learn we have inadvertently done so, we will delete it promptly. Parents or guardians may contact info@researchpal.co.

12. Third-Party Links

The Service may link to third-party websites, academic databases, or citation tools. We are not responsible for their privacy practices and encourage you to review their policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notice before taking effect. The "Last Updated" date above reflects the most recent revision.

14. Contact Us

ResearchPal
Level 1, Devonshire House
One Mayfair Place
London, United Kingdom
Email: info@researchpal.co