is a product of ABS Nexus LLC ("ABS Nexus", "we", "us" or "our"). This Privacy Policy explains how we collect, use, share and protect personal information when you visit the BiblioCite website, create an account or use the research platform, including its bibliometric analysis, screening, meta-analysis, Literature Intelligence, reporting, training and affiliate features (together, the "Services").

ABS Nexus LLC is a limited liability company organised under the laws of the State of Wyoming, United States, with its registered address at 30 N Gould St, STE R, Sheridan, WY 82801, USA. ABS Nexus LLC is the controller of the personal information described in this Policy. By using the Services you acknowledge this Policy. If you do not agree with it, please do not use the Services.

1. Information we collect

Information you give us

Account details: your name, email address, password (stored only as a one-way hash), institution, department, country and profile preferences.
Billing details: plan, billing term, currency, billing name and address, tax identifiers and invoice history. Card and bank details are entered directly with our payment processors (Stripe and Chip); we never see or store full card numbers.
Research content: files you upload (for example Scopus, Web of Science, PubMed, Lens, Dimensions, BibTeX or RIS exports), screening decisions, extraction forms, meta-analysis data, reports, figures and notes you create.
Communications: support requests, contact-form messages, workshop registrations, survey answers and any other messages you send us.
Affiliate and institution details: payout details for affiliates, and organisation, domain and invoicing contacts for institutional plans.

Information collected automatically

Device and log data: IP address, browser type, operating system, pages requested, referring URL, and the date and time of each request.
Security data: sign-in history, active sessions, two-step verification events and suspected abuse signals.
Usage data: features used, analyses run, AI credits consumed and error reports, which we use to operate, secure and improve the Services.
Browser storage: a small number of essential cookies and local-storage entries, described in our Cookie Policy.

Information from third parties

Single sign-on: if you sign in with Google, ORCID or LinkedIn, we receive your name, email address, account identifier and, where you allow it, your profile picture or ORCID iD.
Payment processors: confirmation of payment status, the last four digits and brand of your card, and fraud-screening results.
Your institution: if your organisation buys an institutional plan, it may give us your name and email address so we can create or link your account.

2. How we use information

To provide, maintain and secure the Services, including storing and processing your datasets and generating the analyses and reports you request.
To create and manage your account, authenticate you and keep your account safe.
To process payments, issue invoices, manage subscriptions and prevent fraud.
To provide AI features you choose to use, such as extraction, summaries, screening suggestions and report drafting.
To respond to support requests and send service messages, such as receipts, security alerts, renewal notices and changes to our terms.
To send marketing emails about new features or workshops, where permitted by law. You can unsubscribe at any time using the link in each email.
To understand how the Services are used so we can fix problems and improve them.
To run the affiliate programme, including attributing referrals and paying commissions.
To comply with legal obligations, enforce our Terms of Use and protect the rights, property and safety of our users, our company and others.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

3. Your research data and AI features

Your uploaded datasets, screening decisions, extractions and reports belong to you. We process them only to provide the Services to you and to the collaborators you invite.

When you use an AI feature, the relevant text (for example titles, abstracts or the passage being analysed) is sent to our AI provider, OpenAI, to generate the result. We use OpenAI's business API, under which submitted content is not used to train OpenAI's models. We do not use your research content to train any AI model.

Do not upload information you are not entitled to share, or sensitive personal data such as health records about identifiable individuals. The Services are designed for published bibliographic records and research data, not for protected health information.

We share personal information only as described below:

Service providers that host, process or support the Services on our behalf, under contracts that limit their use of your data. These include cloud hosting and database providers, payment processors (Stripe and Chip), our AI provider (OpenAI), email delivery providers and customer-support tools.
Sign-in providers (Google, ORCID, LinkedIn), when you choose to use them.
Collaborators you invite to a project, who can see the content you share with them.
Your institution, if you join through an institutional plan. Institution administrators can see your name, email address, membership status and plan usage, but not the content of your private projects unless you share it with them.
Affiliates who referred you, who see only that a referral converted and the commission earned, not your identity or content.
Legal and safety: when required by law, subpoena or court order, or when we believe disclosure is necessary to protect rights, property or safety, or to investigate fraud or security incidents.
Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this Policy or a policy at least as protective.
With your consent or at your direction.

5. Data retention

We keep personal information for as long as your account is active and as needed to provide the Services. When you delete a dataset or your account, we delete the associated content from our active systems within 30 days, and from backups within a further 90 days.

We keep some records for longer where needed for legitimate business or legal purposes. Billing records are kept for at least seven years for tax and accounting. Security logs are kept for up to 180 days, and audit logs for up to two years.

6. Security

We use administrative, technical and physical safeguards designed to protect personal information. These include encryption in transit (TLS), hashed passwords, optional and admin-enforced two-step verification, role-based access controls, session management and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

7. Your choices and rights

Everyone can:

Access and update account details in Settings.
Export your data and delete your account from Settings → Privacy, where enabled, or by emailing [email protected].
Opt out of marketing emails using the unsubscribe link.
Control browser storage as described in our Cookie Policy.

California residents. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), you have the right to:

know what personal information we collect, use and disclose, and to receive a copy of it;
request deletion of personal information we hold about you;
correct inaccurate personal information;
opt out of the sale or sharing of personal information (we do not sell or share it);
limit the use of sensitive personal information (we only use it for purposes permitted by the CCPA);
not be discriminated against for exercising these rights.

In the past 12 months we have collected the categories described in section 1: identifiers, customer records, commercial information, internet activity, approximate geolocation derived from IP address, professional or educational information, and inferences drawn from your use of the Services. We disclosed these categories for business purposes to the service providers described in section 4.

Residents of other US states. If you live in a state with a comprehensive privacy law (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others), you may have similar rights to access, correct, delete and obtain a portable copy of your personal information, and to opt out of targeted advertising, sale and certain profiling. You may also appeal if we decline your request by replying to our decision.

How to make a request. Email [email protected] or use the in-app privacy settings. We will verify your identity by confirming control of your account email. You may use an authorised agent, who must provide written permission from you. We will respond within 45 days, or tell you if we need more time as permitted by law.

Do Not Track and Global Privacy Control. We do not use advertising or cross-site tracking, so there is nothing for these signals to switch off. We treat a Global Privacy Control signal as a valid opt-out of sale and sharing where required by law.

Users outside the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, we process your information to perform our contract with you, based on our legitimate interests in operating and improving the Services, to comply with legal obligations, or with your consent. You may have rights to access, correct, delete, restrict or object to processing, and to data portability, as well as the right to complain to your local data protection authority.

8. International transfers

We are based in the United States and process information in the United States and other countries where our service providers operate. These countries may have data protection laws different from those in your country. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Children's privacy

The Services are intended for researchers, students and professionals, and are not directed to children under 13. We do not knowingly collect personal information from children under 13, in line with the Children's Online Privacy Protection Act (COPPA). If you believe a child has given us personal information, contact [email protected] and we will delete it.

10. Third-party links and services

The Services may link to third-party websites, databases and journals, such as publisher pages and DOIs. Their privacy practices are governed by their own policies, and we are not responsible for them.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or through the Services before the changes take effect. The "Last updated" date above shows when this Policy last changed.

12. Contact us

If you have questions about this Policy or our privacy practices, contact:

ABS Nexus LLC Attn: Privacy 30 N Gould St, STE R, Sheridan, WY 82801, USA Email: [email protected]

Privacy Policy