Privacy Policy

Information we collect

• Account information: your email address, account identifiers, and profile details such as your name and image when supplied by you or a sign-in provider.
• LinkedIn signup: if you choose LinkedIn, we receive your email, name, profile photo, LinkedIn identifier, email verification status, and locale when available. These details are held temporarily with your sign-in link and added to your account after you verify your email. Expired pending profile details are removed during scheduled cleanup. We do not store LinkedIn access tokens or request permission to post on your behalf.
• Workspace content: projects, flows, datasets, charts, analyses, documents, literature reviews, uploaded files, notes, checklists, comments, and sharing permissions you save or submit.
• Technical information: session and security records, request information such as IP addresses and browser details, errors, and operational logs needed to run and protect the service.
• Communications and contributions: information you send when contacting us and payment or receipt information available through our payment provider when you make a voluntary contribution.

How we use information

We use information to authenticate users, save and retrieve work, run requested analyses, support collaboration and access controls, respond to requests, process contributions, troubleshoot problems, prevent abuse, and meet legal obligations.

Where applicable data protection law requires a legal basis, we rely on providing the service you request, our legitimate interests in operating and securing the service, compliance with legal obligations, or consent where required. If processing relies on consent, you may withdraw it by contacting us; this does not affect earlier lawful processing.

Cookies and browser storage

We use cookies for sign-in and session security, and browser storage for preferences and working drafts. Guest drafts may remain on the same device between visits. Signing out or closing a tab does not necessarily remove them. Other people using the same browser profile may be able to access locally stored work.

You can remove local copies using your browser’s site-data controls. Download work you want to keep first. Clearing site data may sign you out and remove drafts and preferences; it does not delete work saved to your account. Guest access does not mean all processing stays on your device: features that send requests to our servers also process the information needed to fulfill those requests.

Sharing and service providers

Work you share is available to the people granted access. Collaboration may show your identity, edits, comments, and presence to other participants. Recipients may retain copies they download or export.

We use service providers to host the application, store data, deliver sign-in emails, and process payments. These include Cloudflare for infrastructure, storage, and email delivery, and Stripe for contributions. Payment card details are entered with Stripe rather than in LifeScio. If you use an external sign-in provider, that provider also handles information under its own privacy policy.

We may disclose information when required by law or when necessary to protect the security, rights, or safety of our users and service. Hosting and service providers may process information in countries other than your own. Applicable transfer requirements and safeguards depend on the service and jurisdiction; contact us for details before using LifeScio for work with specific location requirements.

Retention and deletion

We retain information for as long as needed to provide your workspace, maintain saved versions and shared work, resolve support or security issues, and meet legal obligations. Retention depends on the type of information and its use. Deleted content may remain temporarily in backups, version history, or operational records, and copies held by collaborators are not automatically removed.

Use available workspace controls to manage your content. To request deletion of an account or information you cannot remove in the app, email contact@citingale.com. We may need to verify your identity and clarify the scope of the request.

Your choices and rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information, restrict or object to processing, and complain to your local data protection authority. Contact us to exercise these rights. Some requests may be subject to legal exceptions or the rights of other users.

Research data and security

Only upload information you are authorized to use and share. Use de-identified or synthetic research data where possible. Do not assume that the public service meets a particular clinical, regulatory, or organizational requirement for identifiable patient information.

We use access controls and technical measures to protect information, but no system can guarantee absolute security. Protect your sign-in email account, review sharing permissions, and contact us if you suspect unauthorized access.

Organization-hosted deployments

If your organization hosts or administers LifeScio, its privacy notices, agreements, and retention rules may govern your workspace. Contact your administrator about access, storage locations, and deletion for that deployment.

Changes to this policy

We may update this policy as the service or legal requirements change. The date above identifies the latest version. We will provide additional notice of material changes where required by applicable law.