Privacy Policy

01 Scope

This Policy applies to the Essarion marketing website and to the Essarion family of products and interfaces listed above, whether you use them as a visitor, a registered user, or on behalf of an organization. It does not apply to third-party websites, services, or model providers that we link to or that process your data under their own policies.

Where a specific product (for example, ResearchAnything, Sourcipedia, or Agents) provides its own privacy notice inside that product, that notice supplements this Policy and, to the extent it directly conflicts, governs the handling of data within that product.

02 Information we collect

Depending on which Services you use, we may collect:

• Account information. When you register for a product that offers accounts, we collect your email address and, optionally, your name. If you sign up with a password, we store it only as a salted bcrypt hash. If you sign in with a third-party identity provider (such as Google), we receive your email, basic profile details, and an account identifier from that provider.
• Content you submit. The queries, prompts, messages, files and documents you upload, notes, projects, and other material you provide, together with the outputs, reports, citations, and intermediate reasoning our Services generate for you. This content is stored so you can return to your work.
• Connected-account data. If you authorize an integration (for example, Google or Notion in Agents), we receive and store access tokens and the data you authorize us to access on your behalf, in encrypted form, to perform the tasks you request.
• Usage, plan, and metering data. Your subscription tier and status, usage counters and limits (such as run counts and AI token usage), and quality signals we use to operate and improve the Services.
• Technical and log data. Information generated automatically when you use the Services, such as IP address, browser and device information, and request logs. IP address and email may be used transiently to enforce rate limits and protect against abuse; some products store network and device metadata in hashed form for security auditing.
• Cookies. Essential cookies that keep you signed in and secure your session. See Section 6.
• Communications. If you contact us (for example, at hello@essarion.com), we keep your messages and contact details to respond.

Please avoid submitting sensitive personal information or confidential third-party data unless you are authorized to do so, since that content will be processed by the third-party providers described in Section 4.

03 How we use information

We use the information we collect to:

• provide, operate, and personalize the Services, and store your work;
• authenticate you, keep you signed in, and secure your account;
• enforce plan limits, meter usage, and manage subscriptions where applicable;
• maintain, debug, and improve the Services, including retrieval and output quality;
• prevent, detect, and respond to fraud, abuse, security incidents, and violations of our Terms; and
• comply with legal obligations and respond to your support requests.

We do not sell your personal information, and we do not use the content of your queries, documents, or connected accounts to serve you advertising.

04 AI & third-party providers

Delivering our Services requires sending parts of your content to third-party providers. Depending on the product and features you use, these may include:

• AI model providers (such as OpenRouter, which routes to underlying large-language-model providers, xAI/Grok, and Anthropic) receive your prompts and relevant content so they can plan, analyze, and generate outputs.
• Web-search providers (such as You.com and Tavily) receive search queries to return web results.
• Academic databases (such as arXiv, PubMed, Semantic Scholar, OpenAlex, and CrossRef) receive search terms when you use research features.
• Browser-automation providers (such as Browserbase) run automated browsing tasks you request.
• Identity and integration providers (such as Google and Notion) process sign-in and authorized integrations.
• Infrastructure providers for cloud hosting, managed databases, and file storage host the Services and your stored content.

These providers process your data under their own terms and privacy policies, which we do not control, and which govern whether inputs may be retained or used to improve their own systems. We share only what is reasonably necessary to provide the functionality you request, and we cannot recall content already transmitted to a third-party provider.

05 When we share information

Beyond the providers above, we may share information:

• to comply with law, regulation, legal process, or an enforceable governmental request;
• to enforce our Terms, or protect the rights, property, or safety of Essarion, our users, or the public;
• in connection with a merger, acquisition, financing, or sale of assets, in which case we will seek to ensure the recipient honors this Policy; and
• with your consent or at your direction.

We do not sell your personal information.

06 Cookies

Our products use cookies only for essential functionality. The primary cookie is a secure, HTTP-only session cookie (typically a signed JSON Web Token) that keeps you authenticated between requests. In production these cookies are marked Secure and configured to reduce cross-site exposure. Because they are strictly necessary to sign you in, disabling them will prevent the Services from working. We do not use third-party advertising or cross-site tracking cookies. Note that some pages load web fonts from a third party (Google Fonts), which may expose your IP address to that provider at page load.

07 Data retention

We retain your account information and content for as long as your account is active or as needed to provide the Services. Logs and technical data are kept for a shorter period sufficient for security, debugging, and abuse prevention. We may retain certain information longer where required for legal, accounting, or legitimate-business reasons, or in de-identified or aggregated form that no longer identifies you.

When you delete content or your account, associated records are removed or scheduled for deletion from active systems, subject to backups that age out over time and to any retention the law requires. We cannot recall content already transmitted to third-party providers.

08 Security

We take reasonable technical and organizational measures to protect your information, including hashing passwords with bcrypt, signing session tokens, encrypting sensitive stored tokens, transmitting data over encrypted connections (HTTPS), and restricting access to stored data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at hello@essarion.com.

09 Your rights & choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, to object to or restrict certain processing, or to withdraw consent. You can update your account details, delete individual items of content, and request account deletion within the relevant product.

To exercise any of these rights, email hello@essarion.com. We will respond as required by applicable law and may need to verify your identity first. If you are in the EEA, UK, or a similar jurisdiction, our legal bases for processing include performing our contract with you (providing the Services), our legitimate interests (securing and improving the Services), your consent where required, and compliance with legal obligations.

10 International transfers

We and our providers may process and store information in countries other than the one in which you live, including the United States. Where required, we rely on appropriate safeguards for such transfers. By using the Services, you understand that your information may be transferred to and processed in these locations.

11 Children’s privacy

Our Services are not intended for children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

12 Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the effective date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised Policy.

13 Contact us

For questions or requests about this Privacy Policy or your data, contact us at hello@essarion.com.