Research GAP

Privacy Notice

Effective date: October 6, 2026
Email: temka4705@gmail.com
Address: Korea, Seoul, Kookmin University / Mongolia, Ulaanbaatar

This Privacy Notice explains how Research GAP collects, uses, stores, discloses, and deletes personal information.

Information we process

Depending on how you use Research GAP, we may process:

• Account information: email address, email-verification status, user identifier, display name, avatar, account status, and authentication information managed by Supabase.
• Research content: research ideas, search queries, selected settings, analysis instructions, paper metadata, abstracts, extracted evidence, limited source quotations, citations, analysis results, and saved history.
• Usage and security information: guest-session identifiers, safe request identifiers, timestamps, rate-limit events, failure categories, IP addresses, user-agent information, and infrastructure or security logs.
• Provider accounting information: model and processing stage, token counts, estimated provider cost, timing, status, and error category. Research GAP’s accounting ledger does not intentionally store prompt or response bodies. External AI providers may separately process and retain submitted content under their own policies.
• Browser storage: authentication/session information, interface preferences, and a temporary account-scoped history cache. The current history cache may remain in session storage for up to 24 hours and is cleared on logout or account change.
• Payment information: live billing is currently disabled. If billing is enabled, we may receive customer, subscription, invoice, transaction, payment-status, and payment-provider identifiers. Research GAP will not directly store complete payment-card numbers.

Why we process information

We process this information to:

• create, authenticate, and administer accounts;
• search for relevant scholarly works;
• generate and save requested analyses;
• maintain research history;
• enforce credits, quotas, and abuse-prevention controls;
• secure, diagnose, and improve the service;
• calculate provider usage and operating costs;
• respond to privacy, support, and account-deletion requests; and
• comply with applicable legal obligations.

AI and research providers

Research ideas, queries, paper metadata, abstracts, selected excerpts, and instructions may be sent to OpenAI to generate an analysis. OpenAI states that API data is not used to train its models unless the customer opts in, but default abuse-monitoring logs may contain prompts and responses for a limited period.

Research GAP may query OpenAlex and, when configured, Semantic Scholar. Links may lead to independent publisher, repository, or author websites. Those services have their own privacy policies and terms.

Service providers and international transfers

We use service providers to operate Research GAP, which may include:

• Supabase — authentication, database, and avatar storage;
• Vercel — website hosting and delivery;
• Render and its infrastructure providers — API and database hosting;
• OpenAI — AI analysis;
• OpenAlex and Semantic Scholar — scholarly search and metadata; and
• email, monitoring, and payment providers when those functions are enabled.

Some recipients process data outside Korea. The applicable provider’s legal name, contact information, destination, transferred information, transfer method, purpose, and retention period will be provided where required.

Retention

Subject to legal or security requirements:

• Guest analyses are scheduled for deletion approximately 72 hours after their expiration.
• Analyses saved to an account remain until the user deletes them or deletes the account.
• Account and profile information remains while the account is active.
• The browser history cache may remain for up to 24 hours and is cleared on logout or account change.
• Temporary search-provider caches may remain for approximately six hours.
• Extracted evidence, source metadata, operational logs, backups, and provider-usage records are retained as reasonably necessary for service operation, security, accounting, and legal compliance.
• Payment and tax records, after billing is enabled, will be retained for the periods required by applicable law.
• Backup copies may remain until they are rotated out through normal backup processes.

Account deletion

A user may request deletion through temka4705@gmail.com.

Deletion removes the Supabase Authentication identity, saved analyses, profile information, and avatar, subject to processing time and backup rotation. An active paid subscription, if billing is later enabled, must first be cancelled or otherwise resolved.

Research GAP may retain limited pseudonymized or de-identified usage, payment, fraud-prevention, security, and audit records when reasonably necessary or legally required. Such records are not retained for recreating deleted research content.

One-time free-credit abuse prevention

To prevent repeated use of a one-time allowance, Research GAP normalizes a verified email address by trimming whitespace and case-folding it and then stores a keyed HMAC identifier. The dedicated key is kept on the backend. The original email address is not stored in this registry.

This marker may remain while needed to determine whether the allowance has already been issued and as permitted by applicable law. It does not prevent registration using an unrelated email address.

Your rights

Subject to applicable law, you may request access to, correction of, deletion of, restriction of, or information about the processing of your personal information. You may also withdraw consent where processing depends on consent.

Submit requests to temka4705@gmail.com. We may need to verify your identity before acting on a request.

Security

We use access controls, secret management, authentication, transport encryption, rate limiting, and other reasonable safeguards. No internet service can guarantee absolute security.

Changes

We may update this notice when the service or legal requirements change. Material changes will be announced through the service or by another appropriate method before they take effect.

Contact

Privacy inquiries or complaints may be sent to: