Last Updated: September 2, 2026
Information We Collect
Personal Information
We collect personal information that you provide directly to us, such as when you create an account or contact us:
- Email address
- Full name
- Institutional affiliation
Usage Information
We automatically collect certain information about how you use our service, including access times, pages viewed, and your IP address.
How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve our services
- To develop new features and enhance existing functionality
- To send you technical notices, updates, and support messages
- To provide technical support and respond to your requests
- For legitimate academic research purposes (with anonymized data)
Browser Extension
The EZScite browser extension is optional and separate from the website. It only ever acts when you click its icon. This section describes exactly what it does with your data.
What it reads
- The bibliographic metadata already present in the page you have open: title, authors, journal or publisher, year, volume, issue, pages, DOI, PMID and arXiv identifier.
- It reads the page only at the moment you click the EZScite icon, using the browser's activeTab permission. It never reads pages in the background and never runs on pages you have not explicitly asked it to read.
What it sends
- The reference you chose to save, which is stored in your own EZScite library under your account.
- When the page contains a DOI, PMID or arXiv identifier and a field is missing, that identifier alone is sent to our server so the reference can be completed from public bibliographic databases (Crossref, PubMed, arXiv, OpenAlex, DOAJ and BASE). The page content itself is never sent.
What it stores on your device
Your EZScite session token and the name of the last project you saved to, in the browser's private extension storage. Nothing else is kept locally, and both are removed when you sign out.
What it never does
- It does not collect, store or transmit your browsing history, nor the addresses of the pages you visit.
- It contains no advertising, no analytics and no third-party trackers.
- It does not sell your data, and does not share it with anyone beyond the providers listed below that are strictly needed to save your reference.
Information Sharing and Disclosure
We do not sell, rent, or share your personal information with third parties except in the following circumstances:
Academic Partners
We may share anonymized, aggregated data with research institutions for academic studies.
Service Providers
We may share information with trusted service providers who assist in operating our platform.
Legal Requirements
We may disclose information when required by law or to protect our rights and safety.
Providers who process data for us
We use the following providers to operate the service. Each one processes only what its function requires, under a contract that forbids using your data for its own purposes:
- Supabase — database, authentication and file storage. Servers in the European Union (Paris).
- Stripe — payment processing for paid subscriptions. Card details are entered on Stripe's own systems and never reach our servers.
- Resend — delivery of transactional email (account confirmation, password reset, support replies).
- Hostinger — hosting of the website itself. Servers in the European Union.
- Google — Google Analytics 4 for anonymised traffic statistics, loaded only after you consent, and Google AdSense, which is shown on public blog pages only. Advertising is never shown to paying subscribers, never inside the product, and never inside the browser extension or the Word add-in.
Where your data is stored
Your account, your references, your projects and any PDFs you upload are stored in the European Union (Supabase, Paris region), on encrypted infrastructure. Access is restricted by row-level security rules, so each account can only ever read its own data. Where a provider listed above processes data outside the European Union, that transfer is covered by the European Commission's standard contractual clauses.
How long we keep your data
We keep your data only for as long as it serves the purpose it was collected for, or for as long as the law requires:
- Account data (email, name, institutional affiliation): for as long as your account exists.
- References, projects, PDFs and annotations: for as long as your account exists. You can delete any of them yourself at any time, and deletion is immediate.
- Access and security logs (IP address, timestamps): 12 months, after which they are erased.
- Invoices and accounting records: 10 years, as Portuguese tax law requires. This obligation survives the deletion of your account.
To delete your account and everything in it, write to contact@ezscite.com from the email address of the account. We complete the deletion within 30 days and confirm it by email. Only the accounting records described above are kept, because we are legally obliged to keep them.
Your Privacy Rights
You have the following rights regarding your personal information:
- Request access to your personal data we hold
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data
- Request a copy of your data in a portable format
- Object to certain types of data processing
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Cookie Policy
We use cookies and similar technologies to improve your experience, analyze usage patterns and personalize content. You can manage your cookie preferences in your browser settings.
Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
Email: contact@ezscite.com
We will respond to your inquiry within 72 hours
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the 'Last Updated' date.