Privacy policy

Who we are

topographlab (“we”) runs the website and app at ai-slr.com.

For questions or requests about your data, write to [email protected].

What we collect

Your Google account basics when you sign in with Google: email address, name, profile picture link and Google's account identifier. We never see your Google password.

What you upload and create: the bibliographic files you import (titles, abstracts, authors, years, DOIs and similar fields), your review names and descriptions, stop words and column mappings, and the analysis results we compute from them.

Account records: your plan and its expiry, how many analyses you have run, when you signed up and last signed in, and the share links you create with their view counts.

Technical data: like any website, our servers and Cloudflare process your IP address and browser details to deliver pages, keep the service secure and limit abuse. Error reports include the page and browser type, but not cookies, sign-in tokens or request bodies.

Cookies and browser storage

We do not use advertising or cross-site tracking cookies.

Your browser keeps your sign-in tokens and display preferences (theme, colours you pick on the map) in local storage, and your language choice in a cookie named aislr-locale.

Signing in loads Google's sign-in script, which may set Google's own cookies under Google's privacy policy. Page statistics, when enabled, come from a self-hosted Umami instance that sets no cookies.

Why we use it

To provide the service you signed up for: storing your reviews, running analyses, showing results and applying your plan's limits.

To keep it working and secure: diagnosing errors, preventing abuse and helping you when you contact us. Our administrators can see account details, review names and analysis status. Opening a summary of an analysis result requires a written reason and is logged, and that summary contains no paper titles or abstracts.

To understand usage in aggregate, for example how many people import a dataset. We do not sell your data or use it for advertising.

Who helps us

• Google: sign-in.
• Cloudflare: domain, content delivery and security, and storage of uploaded files, results and exports (Cloudflare R2).
• Our hosting provider in the European Union: the application servers and database.
• Sentry (EU data region), when enabled: error reports from the website and servers, relayed through our own domain.
• Umami, self-hosted on our own servers, when enabled: cookie-free page statistics.

Share links

When you create a share link, anyone who has it can view that analysis: its topic map, topic summaries and the list of papers with their titles and abstracts. Method parameters are not included. You can revoke a link at any time and it stops working immediately.

AI topic naming

Naming topics with a large language model is currently switched off. Turning it on would send each topic's keywords and the titles of a few representative papers to a model provider; we will update this policy and name that provider before doing so.

How long we keep it

We keep your account and content until you delete them. Deleting a review removes its dataset, analyses, share links and stored files.

Deleting your account removes your profile, all reviews, datasets, results, share links and sign-in sessions. We keep usage counts that no longer identify you, and our administrators' activity log, which may still refer to your account for security and accountability.

Your choices and rights

You can rename yourself and delete reviews at any time, and delete your whole account yourself on the Account page of the workbench.

You can ask us for a copy of your data, to correct it, or to stop a particular use of it, by writing to [email protected]. We reply within one month.

If you are in the EU or UK and think we have mishandled your data, you can also complain to your local data protection authority.

Where your data is processed

Our servers are in the European Union. Google and Cloudflare operate worldwide, so some processing, such as sign-in and content delivery, may happen outside the EU under their own data transfer safeguards.

Changes to this policy

When we change this policy we update this page and the date at the top.