Privacy Policy
SVELA AI SOFTWARE LABS PRIVATE LIMITED operates RefRight, including its web application, reference API and Microsoft Word add-in. This policy describes the information processed when you use these services.
1. Information processed
- Accounts: your name, email address, organisation details, password hash, session records and API-key records.
- Reference content: reference text, identifiers, bibliographic metadata, and documents you submit to the features you use.
- Saved work: references, collections, formatting preferences and custom styles you save.
- Billing and usage: credit balances, payment/order records, request counts and service usage.
- Technical information: network and request information used for security, rate limits, diagnostics and service operation. Authentication uses HTTP-only session cookies.
- Support: information you include when contacting us.
2. How information is used
We process information to provide reference parsing, formatting and verification; maintain your account and saved work; manage credits and payments; respond to support requests; and investigate errors or abuse.
Email verification and password reset use time-limited codes. Pending signup information includes a password hash. Verification codes are stored as keyed hashes; completed or expired challenges cannot be reused.
3. Service providers and integrations
The data sent depends on the feature you choose:
- Reference lookup services: services such as Crossref, PubMed, arXiv, Open Library and DOI resolvers receive reference identifiers or search text to retrieve or verify bibliographic information.
- Email delivery: Zoho ZeptoMail processes recipient addresses and transactional email content for verification and password reset when email delivery is enabled.
- Payment processing: enabled checkout providers process payment information under their own policies. RefRight stores order and payment-status records; payment-card entry is handled by the provider. The checkout identifies the provider in use.
- Infrastructure: hosting, database and network providers process data needed to run the service. The production service uses a Hostinger VPS in Mumbai, India, with a separate application database.
- Microsoft Word: Microsoft provides the Office host for the Word add-in. RefRight processes content sent by the add-in's features. Marketplace publication is not yet complete.
External providers apply their own privacy policies. Avoid submitting confidential information that is unnecessary for the feature you are using.
4. Storage and retention
Account and service records are stored in the application's database; saved files and custom styles may also use application storage. Retention depends on the type of record and the service operation. Operational backups are maintained to support recovery. Backup copies may retain records after removal from the active service; contact us for a data-deletion request.
For data access, correction, export or deletion requests, contact support@refright.app. We may need to verify ownership and identify records that must be retained to meet applicable obligations before completing a request.
5. Security
Public hosted access uses HTTPS. Passwords are hashed with scrypt and per-user salts. API keys are hashed before storage. Verification and reset codes expire, have attempt limits, and are single-use. No security measure eliminates every risk; keep your passwords, API keys and verification codes private.
6. Policy updates and contact
Changes will be reflected in this page's last-updated date. Contact us about this policy or your information:
SVELA AI SOFTWARE LABS PRIVATE LIMITED
support@refright.app
Business contact: +91 9345604320
Registered office: No. 1, Emerald Nagar, SIPCOT, Ranipet, Tamil Nadu, 632403, India.