Privacy Notice

Who operates the service

AIOTOR Research OS is operated by AIOTOR Business & Consulting LLP. Questions or privacy requests can be sent to support@aiotor.com.

What we collect

We collect account information you provide, authentication and security records, subscription/payment references, partner-channel attribution when applicable, and the research content you choose to upload or create. Payment card credentials are entered into the payment provider checkout and are not stored by AIOTOR.

How research and account data are stored

Account records, partner-attribution records and research-state records are persisted in encrypted application storage when production encryption is enabled. Manuscript and research files use the same controlled data-encryption boundary. Passwords are stored as salted password hashes rather than reversible passwords.

The current public deployment is operated from India. International users should understand that their account and research data may therefore be processed and stored in India until a regional service is expressly offered for their account.

How we use data

• Provide research discovery, writing, editing, versioning, publication and account services.
• Secure accounts, investigate abuse and maintain audit/recovery records.
• Process subscriptions and confirm payments with Razorpay or PayPal.
• Attribute a referral to a partner channel when the user has joined through that partner flow.
• Operate support, service notifications and legally required records.

Partner referrals

If you register through a partner channel, the signup screen identifies that partner. With your explicit referral acknowledgement, the partner may see limited lead information such as your name, business contact information, conversion status and attributed sales value. Partners do not receive your manuscript text, uploaded research documents, payment credentials, passwords or private Research OS workspace content through the partner portal.

Service providers

We may use infrastructure, email, payment and scholarly-data providers to operate the service. Payment processors receive the information required to process and reconcile transactions. Aiotor Gateway checks are invoked only for the workflows in which they are used, including the separately requested Publication Readiness flow.

Your choices and rights

Depending on the law that applies to you and to AIOTOR, you may have rights to request access, correction, deletion, a copy of your personal data, withdrawal of consent or information about processing. We do not sell personal information. Send a request to support@aiotor.com; we may need to verify your identity before acting on a request.

Retention and deletion

We retain information for as long as needed to provide the service, protect account/research integrity, meet contractual or legal obligations and resolve disputes. Research projects and versions may have their own retention needs. Backups and security logs can persist for a limited period after an active record is deleted.

Sensitive or regulated research

AIOTOR Research OS is a research-support platform. Do not upload confidential patient records, regulated health information, export-controlled material or other restricted personal data unless you have an appropriate lawful basis, authorization and an AIOTOR deployment/contract suitable for that data.

International and U.S. users

Privacy obligations vary by jurisdiction. Where applicable, AIOTOR will respond to legally required privacy requests. The public policies and product controls are designed to support transparent collection, data minimization, security and user rights, but organizations with sector-specific or state-specific obligations should obtain their own legal/compliance review before using the service for regulated data.

Changes

We may update this notice as the service, providers, regional deployment or applicable law changes. Material changes will be reflected by updating the effective date and, where appropriate, providing an in-product notice.