01Who we are
This notice explains how thericerca (“we”, “us”) handles personal data when you use the Service. For privacy questions, contact [email protected].
02Information we collect
- Account data — your email address and a securely hashed password; whether your email is verified.
- Your Content — the datasets you upload and the reports generated from them. Datasets may contain personal data that you control; you are the controller of that data and are responsible for having a lawful basis to upload it.
- Usage and audit records — projects, analysis jobs, credit transactions, and security-relevant events (such as sign-in and job completion), used to operate the Service and keep it secure.
- Payment metadata — when you buy credits, our payment provider processes your card. We receive confirmation and limited metadata (such as a session identifier and amount); we do not receive or store full card numbers.
03How we use information
We use information to:
- provide the Service — profile datasets, assess feasibility, run analyses, and generate your reports;
- maintain your account, process credit purchases, and provide support;
- secure the Service — authenticate sessions, enforce rate limits, and detect abuse;
- meet legal obligations.
We do not sell your personal data, and we do not use Your Content for advertising or to train third-party models.
04AI processing
Statistical results are always computed by scientific libraries in an isolated sandbox — never by an AI model. Where AI assistance is enabled, a language model may receive your study description and the computed results in order to map objectives to a plan and phrase the write-up. It is never used to generate numbers, and every figure is validated against the computed results before a report is issued.
When AI assistance is off, no data is sent to any model. You can review this under Your privacy choices.
07Data retention
We keep your account and Your Content while your account is active. You can delete individual projects and their data, or delete your account at any time from your account settings. We may retain limited records where required for legal, accounting, or security purposes, for no longer than necessary.
When you delete your account, we remove your account and Your Content. We retain only a one-way hash of your email address — not the address itself, and it cannot be reversed — to prevent repeated claiming of the one-time sign-up credit bonus. It is never used to contact you or to restore your account.
08Security
We protect data with measures appropriate to its sensitivity: passwords are hashed with bcrypt; sessions use short-lived access tokens with rotating, single-use refresh tokens revoked on sign-out; sensitive endpoints are rate-limited; and each analysis runs in an isolated sandbox. Uploaded datasets are stored immutably and addressed by content hash. No system is perfectly secure, but we work to keep yours safe.
09Your rights and choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise them, use Your privacy choices or email [email protected]. You also have the right to complain to your local data-protection authority.
10International transfers
We and our service providers may process data in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards as required by applicable law.
11Children's privacy
The Service is not directed to children, and we do not knowingly collect personal data from anyone under the age required by your jurisdiction. If you believe a child has provided us data, contact us and we will delete it.
12Changes to this notice
We may update this notice as the Service evolves. When changes are material, we will update the effective date and, where appropriate, notify you.
13Contact
For any privacy request or question, email [email protected] or write to Batangas, Philippines.