← Back to sinapilot.ai

Last updated: June 2026

Privacy Policy

1. Introduction

SinaPilot (“we”, “us”, “our”) operates the platform accessible at https://www.sinapilot.ai. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy describes what data we collect, how we use it, and what rights you have under the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and applicable national data protection laws. By using SinaPilot, you acknowledge having read and understood this policy.

2. Data We Collect

We collect the following categories of personal data:

  • Account data: name, email address, and hashed password created during registration.
  • Usage data: uploaded scientific papers, Discovery search queries, generated outputs (summaries, reviews, syntheses), AI credits consumed, and workspace activity.
  • Payment data: billing events, subscription plan, and transaction identifiers. Payment processing is handled exclusively by Stripe — SinaPilot never stores card numbers, CVV codes, or other sensitive payment credentials.
  • Technical data: IP address, browser user agent, session cookies, and server access logs generated when you use the service.

3. How We Use Your Data

  • Service delivery — providing access to the SinaPilot platform and all its features. Legal basis: performance of contract (Art. 6(1)(b) GDPR).
  • Product improvement and bug detection — analysing aggregate usage patterns, identifying errors, and improving our algorithms. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). You may object to this processing at any time.
  • Billing and subscription management — processing payments, issuing invoices, and meeting our accounting obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Transactional communications — sending receipts, password reset emails, service alerts, and critical product announcements. Legal basis: performance of contract (Art. 6(1)(b) GDPR).

4. Data Sharing

We do not sell your personal data to third parties. We share data only with the following processors, under contractual data processing agreements:

  • Stripe — payment processing and subscription management. Stripe is certified PCI-DSS compliant.
  • Amazon Web Services (AWS) — infrastructure hosting. All data is stored in the AWS EU region (Europe), within the European Economic Area, in compliance with GDPR Chapter V requirements on international transfers.
  • Anthropic — AI analysis of scientific content submitted through our platform via the Claude API. Content you upload or generate may be processed by Anthropic in accordance with Anthropic's Privacy Policy.

5. Data Retention

  • Account data: retained for the duration of your subscription and deleted 3 years after account closure, unless a longer retention is required by law.
  • Payment data: retained for 10 years to comply with EU accounting and tax obligations.
  • Technical logs: retained for 12 months, then automatically purged.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: you may obtain a copy of the personal data we hold about you.
  • Right to rectification: you may correct inaccurate or incomplete data.
  • Right to erasure: you may request deletion of your data, subject to legal retention obligations.
  • Right to data portability: you may receive your data in a structured, machine-readable format.
  • Right to object: you may object to processing based on legitimate interests at any time.
  • Right to restriction: you may request that we restrict processing of your data in certain circumstances.

To exercise any of these rights, contact us at contact@sinapilot.ai. We will respond within 30 days.

EU/EEA users may also lodge a complaint with their national data protection authority. In France, this is the CNIL: www.cnil.fr. US users may have additional rights under applicable state privacy laws (e.g., CCPA in California).

7. Cookies

SinaPilot uses strictly necessary cookies only: session authentication tokens and CSRF protection cookies. These cookies are essential for the service to function and do not require your consent under ePrivacy rules. We do not use advertising cookies, analytics cookies, or any third-party tracking technologies.

8. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify registered users by email at least 14 days before any material change takes effect. The date at the top of this page indicates when the policy was last revised. Continued use of SinaPilot after the effective date constitutes acceptance of the updated policy.

9. Contact

For any question or request relating to your personal data, contact us at: contact@sinapilot.ai