Data Handling

Your research stays yours.

We built Paper Wizard for researchers who care deeply about their work. Here is exactly what happens to your data, with nothing left out.

Our commitments

Encrypted end-to-end

TLS 1.2+ in transit. AES-256 at rest. Your manuscript is encrypted from the moment it leaves your browser to the moment it's stored.

Not used for AI training

Your research is not used to train, fine-tune, or improve any AI model. This is a contractual guarantee in our Terms of Service (Section 6.3), not a toggle.

You own everything

All uploaded documents and generated reviews remain your intellectual property. Paper Wizard claims no ownership rights over your research content or findings.

Commercial API tier

We route requests through providers' commercial and enterprise API tiers under contractual no-training terms. Brief automated safety retention (up to 30 days) applies under standard provider terms, segregated from training systems.

Delete anytime

Remove documents from your workspace at any time. Deletion propagates across our entire infrastructure, including cloud storage and processing caches.

How it works

The lifecycle of your document

From upload to review, every step is designed around minimal data exposure and maximum researcher control.

01

Upload

Your PDF uploads directly to encrypted cloud storage via a time-limited signed URL. The file never passes through our application servers.

02

Analysis

Document text is extracted and sent to AI providers via their commercial API for review generation. No training on your content; brief automated safety retention (up to 30 days) applies under standard provider terms.

03

Review delivery

Your completed review is stored in your account, encrypted at rest. Only you and authorised members of your organisation can access it.

04

Your control

Delete any document or review from your workspace at any time. Deletion is immediate and propagates across all storage layers. After account closure, any remaining data is purged within 90 days.

Compliance

Safety monitoring

Uploads may be retained for up to 30 days for safety monitoring and compliance purposes, as required by our AI processing partners. This retention window is strictly for abuse prevention and is separate from your workspace data.

Enterprise

Organisation controls

Enterprise customers manage data controls and retention policies across their organisation from the account dashboard. Custom data processing agreements are available on request.

Learn about Enterprise

Questions about your data?

Reach our team at support@paper-wizard.com

Paper-Wizard