Privacy Policy

1. Introduction

Welcome to ResearchBanana ("the Service"), operated by Integrated Intelligence ("we", "us", "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what data we collect, how we process it, and your rights regarding your personal information.

By using the Service at researchbanana.com, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account information: Email address, display name, and profile picture provided through Google OAuth or email/password registration via Supabase Auth.
• Research content: Methodology text, communicative intent descriptions, raw data, and other inputs you provide for figure generation.
• Uploaded files: Images, documents (PDF, DOCX), and data files (CSV, JSON, Excel) that you upload for contextual generation or polishing.
• Payment information: Processed securely by PayPal. We do not store credit card numbers, bank account details, or other financial credentials on our servers.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, generation parameters, credit consumption patterns, and interaction timestamps.
• Device information: Browser type, operating system, screen resolution, and language preferences.
• Network data: IP address, approximate geographic location (country/region level).

3. How We Use Your Information

• Service delivery: Process your inputs through AI models to generate figures, diagrams, plots, and polished images.
• Account management: Create and maintain your account, manage credits, process transactions, and provide customer support.
• Service improvement: Analyze aggregated, anonymized usage patterns to improve generation quality, user experience, and system performance.
• Communication: Send essential service notifications (account changes, billing confirmations, security alerts). We do not send marketing emails without explicit opt-in consent.
• Security: Detect and prevent fraud, abuse, and unauthorized access to the Service.

4. AI Processing and Data Handling

Important: Your research content (methodology text, uploaded data, and images) is sent to third-party AI model providers (Google Gemini, Google Imagen) for processing. These providers may process your data according to their own privacy policies.

• We transmit only the minimum data necessary for generation to AI model providers.
• Generated outputs are stored temporarily for delivery and in your generation history.
• Uploaded files are stored on Amazon S3 and associated with your account.
• We do not use your individual research content to train our own machine learning models. Any model improvement is based on aggregated, anonymized usage statistics only.

5. Third-Party Services

The Service integrates with the following third-party providers, each with their own privacy policies:

6. Data Retention

• Account data: Retained for the lifetime of your account and deleted within 30 days of account deletion.
• Generation history: Stored indefinitely for your reference while your account is active. Deleted upon account deletion.
• Uploaded files: Retained as long as your account is active. You may delete individual files at any time.
• Transaction records: Retained for 7 years for legal and accounting compliance.
• Server logs: Retained for 90 days for security monitoring and debugging.

7. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between your browser and our servers is encrypted via TLS/HTTPS.
• Authentication is handled by Supabase with secure token management.
• Database access is restricted through role-based access control.
• API keys and credentials are stored in encrypted environment configurations, never in source code.

Despite our efforts, no electronic transmission or storage mechanism is 100% secure. We cannot guarantee absolute security of your data.

8. Cookies and Tracking

The Service uses essential cookies for authentication and session management. We do not use third-party advertising cookies or tracking pixels.

• Authentication cookies: Required for maintaining your login session (essential, cannot be disabled).
• Preference cookies: Store your UI preferences such as theme settings.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data and account.
• Portability: Request a machine-readable export of your data.
• Restriction: Request that we limit processing of your personal data.
• Objection: Object to processing of your personal data for specific purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. Our third-party providers operate globally. Where required by law, we ensure appropriate safeguards are in place for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

For questions, concerns, or requests related to your privacy, contact us at: