Privacy Policy

ResearchOrg, Inc. (“ResearchOrg,” “we,” “us,” or “our”) operates the ResearchOrg platform, accessible at researchorg.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

If you have questions, contact us at privacy@researchorg.com.

Information you provide directly:

• Account information: Your name, email address, and password when you register.
• Payment information: Billing details processed securely through Stripe. We do not store full card numbers — Stripe handles all payment data under PCI DSS compliance.
• Profile information: Any optional details you choose to add to your profile.
• Communications: Messages you send us through support or contact forms.

Information collected automatically:

• Usage data: Pages visited, features used, search queries, companies viewed, and time spent on the platform.
• Device data: Browser type, operating system, IP address, and device identifiers.
• Cookies and tracking: Session cookies, preference cookies, and analytics identifiers. See our Cookie Policy for details.

Information from third parties: If you sign in via a third-party provider (e.g., Google OAuth), we receive basic profile information such as your name and email address from that provider, subject to your settings with them.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and manage your subscription
• Send transactional emails (account confirmation, password reset, billing receipts)
• Respond to support requests and communicate with you
• Monitor usage patterns to improve the platform and fix bugs
• Enforce our Terms of Service and prevent abuse
• Comply with legal obligations
• Send product updates and announcements (you may opt out at any time)

We do not sell your personal data to third parties. We do not use your data to train AI or machine learning models.

We share your information only in the following circumstances:

• Service providers: Trusted vendors who help us operate the Service, including Supabase (database and authentication), Stripe (payments), and analytics providers. These parties process data only on our behalf and are bound by data processing agreements.
• Legal requirements: When required by law, court order, or government authority, or when necessary to protect our rights, property, or safety.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via email or a prominent notice on the Service before any transfer.
• With your consent: In any other case where you have given explicit consent.

We do not share your personal data with advertisers, data brokers, or any third party for their own marketing purposes.

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: Retained for the lifetime of your account plus 30 days after deletion to allow for account recovery.
• Usage data: Aggregated and anonymized usage statistics may be retained indefinitely; identifiable usage logs are retained for up to 12 months.
• Billing records: Retained for 7 years to comply with financial and tax regulations.
• Support communications: Retained for 2 years after the last interaction.

To request deletion of your account and associated data, visit your Account Settings or email privacy@researchorg.com. We will process deletion requests within 30 days.

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how the Service is used. For a full breakdown of the cookies we use and how to control them, see our Cookie Policy.

You can control cookie behavior through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (“right to be forgotten”).
• Portability: Request an export of your data in a machine-readable format.
• Objection: Object to processing of your data for direct marketing purposes.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at privacy@researchorg.com. We will respond within 30 days. For EU/EEA residents, you also have the right to lodge a complaint with your local supervisory authority.

We implement industry-standard security measures to protect your personal data, including:

• TLS/HTTPS encryption for all data in transit
• Encrypted storage via Supabase (PostgreSQL with row-level security)
• Password hashing using bcrypt
• Payment processing via Stripe (PCI DSS Level 1 compliant)
• Regular security reviews and access controls

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

The Service is not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us at privacy@researchorg.com and we will take steps to delete such information.

ResearchOrg is operated from the United States. If you are located outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate.

For transfers from the European Economic Area (EEA) or United Kingdom, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure your data is protected in accordance with applicable law.

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Sending an email to the address associated with your account, and/or
• Displaying a prominent notice on the Service prior to the change taking effect.

The updated policy will be effective as of the “Last updated” date shown at the top of this page. Continued use of the Service after that date constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: privacy@researchorg.com
• Address: ResearchOrg, Inc., 548 Market St, San Francisco, CA 94104

We aim to respond to all privacy-related inquiries within 5 business days.