Effective Date: April 6, 2026
This Privacy Policy describes how ReviewPanel™ ("we," "us," "our"), operated by Algomittens LLC, collects, uses, and protects your personal information when you use our platform at reviewpanel.ai (the "Platform"). ReviewPanel™ is an AI-powered academic manuscript revision platform that helps researchers respond to peer review and panel feedback.
When you create an account or use our services, we may collect: your name and email address; password (stored in hashed form by our authentication provider); document tier selection (Paper or Grant); and payment information (processed and stored by our payment processor — we never receive or store your full credit card number).
As you use the Platform, we automatically collect: manuscript text you upload for processing; reviewer comments and decision letters you provide; AI-generated deliverables; processing status and job metadata; and timestamps associated with your submissions.
When you access the Platform, our servers and hosting infrastructure may automatically record standard log data, including: your IP address; device type and operating system; browser type and version; timestamps of requests; referring URLs; and approximate geographic location derived from your IP address. This data is used for security, debugging, and aggregate analytics purposes.
ReviewPanel™ uses email and password authentication only. We do not use Google OAuth or any other third-party authentication provider. We do not receive your information from social login services.
We use your information to: provide, maintain, and improve the Platform; process your manuscripts and reviewer comments through our AI features; generate deliverables; process payments; send transactional emails (account confirmation, password resets, payment receipts); communicate important updates about the Platform; analyze aggregate usage patterns to improve our services; detect and prevent fraud, abuse, and security threats; and enforce our Terms of Service.
We share personal information with the following categories of third-party service providers that process data on our behalf. These providers may change over time; we select providers that offer data protection commitments consistent with this policy.
Cloud Infrastructure and Hosting Providers — host your account data, manuscript content, generated deliverables, and serve the Platform. These providers may process standard server logs including IP addresses and request timestamps.
Payment Processors — process and store your payment information. We do not receive or store your full credit card number.
AI Service Providers — process manuscript text, reviewer comments, and decision letters to generate deliverables through our AI features. We select AI providers whose published API data usage policies state that data submitted through their APIs is not used to train their models by default. We rely on these published policies, which may be updated by the providers; we recommend you review them directly for the most current information.
Email and Communication Providers — send transactional emails on our behalf, such as account confirmations, payment receipts, and platform notifications.
We do not sell your personal information to any third party. We do not share your data with advertisers. We do not use advertising cookies, retargeting pixels, or cross-context behavioral advertising tools.
4.1 Manuscript Analysis. When you submit a manuscript for processing, the full text is sent to our AI service providers for content analysis. This allows the system to understand your manuscript and generate relevant deliverables.
4.2 AI Processing Pipeline. Reviewer comments from your decision letter are processed through our multi-agent AI pipeline. Your manuscript text and reviewer comments are sent to AI service providers as part of this process.
4.3 Deliverable Generation. AI generates deliverables based on the pipeline output and your manuscript content. These deliverables are generated by AI service providers and stored in your account for download and export.
4.4 No Training on Your Data. ReviewPanel™ represents and warrants that it shall not use your manuscripts, reviewer comments, generated rebuttals, or any other user data to train, fine-tune, or improve its own AI models or datasets. We do not provide your data to any third party for the purpose of model training.
Completed papers — including manuscript text, reviewer comments, generated rebuttals, and edit manifests — are automatically deleted 30 days after processing is complete. If you delete your account, we will delete your personal data within 30 days, subject to the following exceptions: (a) data may persist in encrypted backups for a limited period (typically up to 30 additional days) before being purged; (b) transaction records, invoices, and payment history may be retained for up to 7 years as required by tax and accounting obligations; (c) data we are required by law to retain; and (d) anonymized, aggregate analytics data (which cannot identify you) may be retained indefinitely.
We implement commercially reasonable technical and organizational measures designed to protect your data, including: encryption in transit (HTTPS/TLS) for all data transmitted to and from the Platform; encryption at rest for stored data; row-level security policies designed to limit access so that users can only access their own data; secure authentication with hashed passwords; and PCI-compliant payment processing through our payment processor. No security measures are perfect or impenetrable. While we strive to protect your data using industry-standard practices, we cannot guarantee absolute security, and you acknowledge that no method of electronic storage or internet transmission is completely secure.
In the event of a data breach that compromises your personal information, we will notify affected users without unreasonable delay and in no event later than 72 hours after confirming the breach, or within the timeframe required by applicable law, whichever is shorter. Notification will include a description of the breach, the types of data involved, and the steps we are taking in response. We will also notify relevant regulatory authorities as required by applicable law.
Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate personal data; request deletion of your personal data; export your data in a portable format; opt out of non-essential communications; and withdraw consent where processing is based on consent. To exercise any of these rights, contact us at support@algomittens.com. We will respond within 30 days (or within the timeframe required by applicable law).
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us at support@algomittens.com.
The Platform uses essential cookies and local storage for authentication, session management, and remembering your preferences. These are strictly necessary for the Platform to function properly. If you disable cookies or local storage in your browser settings, the Platform may not function correctly and you may be unable to log in or use key features.
We also use Google Analytics 4 to collect anonymous usage statistics such as page views and session duration. Google Analytics may set cookies (e.g., _ga, _gid) to distinguish unique visitors. This data is aggregated and cannot be used to identify you personally. We do not use advertising cookies, third-party tracking pixels, cross-context behavioral advertising tools, or session replay software. We do not serve ads on the Platform.
We additionally operate a first-party analytics beacon (hosted on our own infrastructure at iptracer.algomittens-bfa.workers.dev) that records aggregate visit data: the page address (origin and path, with any document or project identifiers redacted), page title, referring page, UTM campaign parameters, screen dimensions, browser language, and time zone, together with randomly generated visitor and session identifiers stored in your browser's local and session storage. This beacon never transmits the contents of your URL query string or fragment, and we do not use it to identify you personally. Because it relies on your browser's local and session storage, blocking storage (or scripts) for the Platform stops the beacon from sending; clearing storage only resets the random identifiers rather than disabling it.
The Platform allows you to upload manuscript text and reviewer comments for AI-powered processing. You are solely responsible for the content you upload. Please do not upload: (a) manuscripts or documents containing personal data of other individuals (such as patient records, participant data, or confidential peer reviewer identities) unless you have proper authorization and have anonymized such data; (b) confidential or proprietary information that you do not have the right to share; (c) manuscripts for which you do not hold authorship rights or appropriate permissions; or (d) content that violates any applicable law or third-party rights. We may remove uploaded content that violates these guidelines or our Terms of Service. Uploaded content is processed by third-party AI services as described in Section 4.
California Residents (CCPA/CPRA): You have the right to know what personal information we collect, the purposes for which it is used, and to whom it is disclosed. You may request deletion of your personal information and opt out of the sale or sharing of personal information. We do not sell or share (as defined by the CCPA/CPRA) your personal information for cross-context behavioral advertising purposes. Because we do not sell or share personal information, a "Do Not Sell or Share My Personal Information" link is not required; however, you may contact us at support@algomittens.com with any privacy requests. We will not discriminate against you for exercising your CCPA/CPRA rights.
Other U.S. States: Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws may have similar rights, including the right to access, correct, delete, and port their data, and to opt out of targeted advertising (which we do not engage in). Contact us at support@algomittens.com to exercise these rights.
The Platform is operated from and hosted in the United States and is primarily intended for users in the United States. If you access the Platform from outside the United States, please be aware that your data will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to this transfer. We do not currently target or market to users in the European Union, European Economic Area, or the United Kingdom. If you are located in those regions and use the Platform, you do so on your own initiative and are responsible for compliance with applicable local laws.
In addition to the third-party service providers described in Section 3, we may disclose your personal information in the following circumstances: (a) in response to lawful requests by public authorities, including to meet law enforcement or national security requirements; (b) to comply with a subpoena, court order, or other legal process; (c) to protect the rights, property, or safety of ReviewPanel™, our users, or the public; (d) to enforce our Terms of Service; (e) to investigate potential violations of our policies; or (f) with your explicit consent.
Business Transfers. If ReviewPanel™ is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your personal information becomes subject to a different privacy policy.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or by emailing you at least 15 days before the changes take effect. The "Effective Date" at the top of this policy indicates when it was last revised. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your data is handled, contact us at:
Operator: Algomittens LLC
Email: support@algomittens.com
Website: reviewpanel.ai