Last updated September 28, 2026

Privacy Policy

This policy explains what personal data reviseus collects, why, who it is shared with and the rights you have. It also serves as our information notice under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, where it applies, the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

reviseus is operated by reviseus team (the data controller). For any privacy question or request, contact [email protected].

2. What we collect

  • Account data: your name, email address, password (stored only as a salted hash), role, lab memberships and permissions, and optional research interests.
  • Lab data: lab name, logo and branding, provided by the lab coordinator.
  • Research and review content: manuscripts (PDF files), titles, abstracts, author lists, Overleaf links, target venues and deadlines, reviews, rubric scores, review evaluations and comments. Unpublished manuscripts may contain your co-authors' personal data as well.
  • Security and usage records: your last sign-in time and an activity log of sign-ins (including failed attempts) and key actions, together with the IP address they came from.
  • Bug reports you submit through the in-app assistant.

3. Why we use it

  • To create and run your account and your lab's workspace (performance of our contract with you).
  • To run the review workflow: assigning reviewers, collecting reviews, tracking deadlines and sending related emails such as invitations, assignment notices and password resets.
  • To provide the AI-assisted features described below.
  • To keep the service secure, prevent abuse and investigate problems (our legitimate interest).
  • To comply with legal obligations.

We do not sell your personal data and do not use it for advertising.

4. AI-assisted features

Some features (for example AI review drafts, venue recommendations, extraction of venue review criteria, empirical-standards checks and citation checks) send the text of the relevant manuscript, review or venue page to the Microsoft Azure OpenAI Service. The request is processed only to produce the result shown to you. Under Microsoft's terms for this service, the content is not used to train AI models, but it may be kept for a limited time for abuse monitoring.

Citation checks also look up the references listed in a manuscript (titles, authors and identifiers such as DOIs) in public scholarly databases such as OpenAlex. The manuscript itself is not sent to these databases.

AI output can be wrong. It supports reviewers and does not replace their judgement.

5. Who can see your data

  • Members of your lab, according to their role: coordinators manage lab papers and members, and reviewers see the papers assigned to them.
  • Users in other labs, only when a paper is shared with them: for example an external coordinator who accepts an invitation to a paper, or a reviewer from a lab that a paper is opened to for voluntary review.
  • The platform administrator, who can access account and lab records to approve labs, moderate accounts and provide support.
  • Our service providers, who process data only on our instructions:
ProviderPurpose
RenderApplication hosting
SupabaseDatabase hosting (account, lab, paper and review records)
Microsoft Azure Blob StorageStorage of uploaded manuscripts and lab logos
Microsoft Azure OpenAI ServiceAI-assisted features (see “AI-assisted features” below)
BrevoDelivery of transactional email (invitations, assignments, password resets)

We may also disclose data when required by law or by a competent authority.

6. International transfers

Some of the providers above store or process data on servers outside Türkiye and outside your country. By using the service you acknowledge that your data may be transferred abroad for the purposes in this policy, subject to the safeguards those providers offer (such as standard contractual clauses).

7. Cookies and local storage

We use only what the service needs to work. There are no analytics, advertising or third-party tracking cookies, so we do not show a cookie banner.

  • theme (cookie, 1 year): remembers whether you chose light or dark mode.
  • Sign-in token and profile (browser local storage, until you log out): keeps you signed in.

If we ever add optional cookies, we will ask for your consent first.

8. How long we keep it

We keep account, lab and paper data for as long as your account or lab exists. When an account is deleted, its profile and login are removed. Papers you co-authored remain available to the lab under your name. Activity logs are kept for as long as they are needed for security and may be cleared by the platform administrator. Backups kept by our providers are overwritten over time.

9. Your rights

Depending on the law that applies to you (including Article 11 of KVKK and the GDPR), you can ask us to:

  • confirm whether we process your data, and give you a copy of it;
  • correct inaccurate data (you can edit your name and email in Settings);
  • delete your data or your account;
  • restrict or object to certain processing;
  • give you your data in a portable format;
  • tell you which third parties received it.

Email [email protected] with your request. We will answer within 30 days. You can also complain to your data protection authority. In Türkiye this is the Personal Data Protection Authority (KVKK).

10. Security

Passwords are stored as salted hashes. Traffic is encrypted in transit, and access to papers and reviews is limited by lab membership and role. No system is perfectly secure, so please use a strong, unique password and tell us about any suspected misuse.

11. Children

reviseus is built for academic researchers. It is not intended for anyone under 16.

12. Changes to this policy

When we change this policy in a material way, we will update the date above. You are asked to accept the current version whenever you submit a paper. The Terms of Service also apply to your use of the service.

See also the Terms of Service and the Privacy Policy.