1. Data controller
EvidenceBee SAS controls the personal data described here. Registered office: 146 rue Guillaume Leblanc, 33000 Bordeaux, France.
This policy covers the website and review platform under GDPR and applicable data-protection law. See the legal notice for company details. Contact support@evidencebee.com.
2. Data we collect
- Account
- Name, email, hashed password and optional profile details. Social sign-in provides basic profile information.
- Research
- References, PDFs, decisions, extracted data, notes and results. We process this content to provide the service.
- Author contacts
- Email addresses retrieved from public sources. You must have a lawful basis for author outreach.
- Technical
- IP addresses, browser details, pages viewed and timestamps for security and troubleshooting.
- Billing
- Once billing is enabled, Stripe processes payments. We retain limited billing records, not full card details.
3. Purposes and legal bases
We use data to operate and secure the service, manage access, send requested email, provide support, process enabled payments and meet legal duties.
- Contract: providing the service.
- Legitimate interests: security and improvements, subject to your rights.
- Consent: where requested, with the right to withdraw.
- Legal obligation: tax, accounting and other required records.
4. Cookies
We use necessary session, authentication and security cookies. We do not use advertising or cross-site tracking cookies.
5. AI and screening models
The optional AI assistant uses your provider API key, stored encrypted. Live assessments, tests and calibrations send selected records or full-text content to that provider under its terms and privacy policy.
Optional screening ranking trains a separate model using project records and decisions by each reviewer. The model prioritises remaining records within the application.
6. Providers and transfers
Service providers process data under appropriate agreements. They include hosting and storage providers, Mailgun for email and Stripe for billing. We do not sell personal data.
PubMed, Crossref and Unpaywall may receive queries or reference identifiers when you use their features. AI requests go to the selected provider.
For transfers outside the European Economic Area, we rely on appropriate safeguards, such as Standard Contractual Clauses issued by the European Commission.
7. Retention
We retain account and project data while the account is active or needed for the service. You can delete projects and content. Some records, including email campaign history, have limited retention periods.
Legal, tax or security duties may require further retention. Backups follow a rotation schedule.
8. Your rights
Subject to applicable law, you may request access, correction, erasure, restriction, objection or data portability. You may withdraw consent at any time.
Email support@evidencebee.com to exercise these rights. You may also complain to a supervisory authority, including the CNIL in France.
9. Security and eligibility
Safeguards include HTTPS, encrypted API keys and access controls. No system can guarantee absolute security.
The service is for researchers and professionals. It is not directed to children, and we do not knowingly collect their personal data.
10. Policy updates
We publish revisions here with an updated date and communicate material changes as appropriate.