Legal

Privacy policy

Last updated: 3 October 2026

In short

  • Your manuscripts and drafts are private to your account. They are never published, indexed or sold.
  • Neither we nor our AI provider use your content to train models.
  • We send search keywords and reference titles to open scholarly databases, never your manuscript.
  • You can ask us to export or delete your data at any time: hello@publyxo.com.

1. Who we are

Publyxo (publyxo.com and app.publyxo.com) is an online service (“Publyxo”, “we”). For any question about this policy or your data, write to hello@publyxo.com.

2. What we collect

DataWhy
Name, email address, password (stored hashed, never in plain text), interface language, sign-up dateTo create and secure your account and to write to you
If you choose “Continue with Google”: your Google account ID, name and verified email address. We never receive your Google password.To create your account and let you sign in with Google
Whether your email is confirmed, and a normalised form of your email addressTo grant the free welcome credits once per person
Credit balance and a history of credit changesTo run the credit system and answer billing questions
What you put into a dossier: research ideas, notes, drafts, uploaded manuscripts (Word or text files), images of figures and tables, reference lists, and the results the tool producesTo provide the service you asked for
Your IP addressTo limit repeated sign-in and sign-up attempts. It is kept in a hashed form for about one hour. Our host also keeps standard server logs.
If you use the team quote form on publyxo.com: email, institution, team size, messageTo reply with a quote

We do not use advertising trackers. We do not sell or rent personal data.

3. How your content is processed

To draft, analyse or review, the relevant part of your dossier is sent to our AI model provider, Anthropic, through its commercial API. Under Anthropic’s commercial terms, content sent through the API is not used to train its models. We do not use your content to train models either.

To find literature, check references and suggest journals, we send search keywords, reference titles, DOIs and journal names to OpenAlex, Semantic Scholar and Crossref. We never send your manuscript to these services.

Your dossier is not published, and the app is excluded from search engines. It cannot appear as a source in someone else’s similarity check.

4. Service providers

  • Hostinger: hosting of the website and the app, and sending of emails.
  • Google: only if you choose “Continue with Google”, to confirm who you are. Nothing from your dossiers is sent to Google.
  • Anthropic: AI model processing, as described above.
  • OpenAlex, Semantic Scholar, Crossref: public scholarly metadata, queried with keywords and references only.
  • Google Fonts: our pages load typefaces from Google’s servers, which therefore receive your IP address.
  • Formspree: receives the team quote form on publyxo.com.
  • Umami: cookie-free visitor statistics (pages viewed, buttons clicked, country, device type, referring site). It sets no cookie, does not identify you, and receives no email or name.
  • Payment provider: paid credits are sold through Stripe’s Managed Payments service, where Link (Stripe) is the merchant of record. Stripe and Link receive the details needed to process the payment, calculate tax and send your receipt, under their own privacy policies. We receive your email, the pack you bought and the amount; we never see or store your card details.

These providers may process data outside your country, including in the European Union and the United States.

5. Cookies and local storage

  • Sign-in cookies, which keep you signed in to the app.
  • A language cookie, px_lang, which remembers your language.
  • On publyxo.com, your language choice is saved in your browser’s local storage.

These are needed for the service to work. We do not use cookies for advertising, and our visitor statistics (Umami) work without cookies.

6. How long we keep data

We keep your account and dossiers while your account is open. When you ask us to delete your account, we delete it within 30 days. Copies may remain in our host’s rolling backups for up to 30 more days, after which they are overwritten. Records of paid transactions may be kept longer where the law requires it.

7. Your rights

You can ask us to give you a copy of your data, to correct it, or to delete it. Email hello@publyxo.com from the address on your account and we will reply within 30 days. If you live in the European Union or the United Kingdom, you may also complain to your data protection authority.

8. Age

Publyxo is meant for researchers and students aged 16 and over. We do not knowingly collect data from younger children.

9. Changes

If we change this policy in a way that matters, we will update the date above and tell registered users by email before the change takes effect.