Privacy Policy

1. Scope

This Privacy Policy applies to BGPT services operated through bgpt.pro, including the website, accounts, API, payment and support flows, and integrations such as Model Context Protocol connectors.

Third-party platforms and clients that connect to BGPT process information under their own privacy policies and terms.

2. Information we process

• Requests and tool inputs: scientific search terms, DOI values, filters, requested result counts, output settings, and other information submitted to perform a request.
• Technical information: IP address, user agent, timestamps, endpoint activity, response status, rate-limit signals, errors, and security events.
• Account and billing information: email address, account or subscription identifiers, usage totals, payment status, invoices, and limited payment metadata. BGPT does not receive full card numbers from Stripe.
• Support information: messages and files you choose to send when requesting help.
• Website information: essential session, security, preference, and checkout data.

BGPT integrations do not request full conversations, unrelated files, contacts, calendars, private repositories, precise location, biometric information, or data from other accounts unless a future feature clearly asks for it and you authorize that access.

3. How we use information

• Provide scientific searches, DOI lookups, evidence records, accounts, and billing.
• Authenticate access, meter usage, enforce limits, and administer subscriptions.
• Operate, secure, debug, and improve the reliability and relevance of BGPT.
• Prevent fraud, abuse, scraping, attacks, and violations of law or our terms.
• Respond to support, privacy, and security requests.
• Meet legal, tax, accounting, and compliance obligations.

4. When we share information

We do not sell personal information. We may disclose information only as reasonably necessary:

• Service providers: vendors that support hosting, databases, security, monitoring, email, analytics, customer support, and related infrastructure.
• Stripe: to process payments, subscriptions, invoices, and fraud controls under Stripe's own privacy policy.
• Your chosen client or platform: when it sends a request to BGPT and receives the response you requested.
• Legal and safety reasons: to comply with law, valid legal process, protect users or the public, enforce our rights, or investigate security incidents.
• Business changes: in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to continued protection of the information.
• At your direction: when you ask or authorize us to disclose information.

5. Retention

We retain information only as long as reasonably necessary for the purposes described above, then delete or de-identify it unless a longer period is required for security, fraud prevention, billing, tax, legal compliance, or dispute resolution.

• Search and DOI input content is processed to answer the request and is not intentionally stored in persistent application logs.
• Technical and security logs are kept for a limited period appropriate to operating and protecting the service.
• Account and subscription records are kept while the relationship is active and afterward only as reasonably needed.
• Billing, tax, and transaction records are kept for the period required by applicable law.
• Support records are kept only as long as needed to resolve the matter and protect BGPT and its users.

Deleted information may remain temporarily in encrypted, access-restricted backups until those backups are overwritten.

6. Cookies

BGPT may use cookies or local storage for security, sessions, preferences, analytics, checkout, and account functions. We do not use API or connector inputs to track people across unrelated websites or create advertising audiences.

7. Privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; object to or restrict certain processing; withdraw consent; or appeal a denied request.

BGPT does not sell personal information or share it for cross-context behavioral advertising. To make a privacy request, email [email protected] with the subject “Privacy Request.” We may need to verify your identity or authority.

8. Security, transfers, and children

BGPT uses reasonable administrative, technical, and organizational safeguards, including encrypted transport, access controls, restricted credentials, monitoring, rate limiting, and data minimization. No internet service can guarantee absolute security.

BGPT is operated from the United States. Information may be processed in the United States and other countries where our service providers operate, using legally recognized safeguards where required.

BGPT is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Where local law requires a higher age, that requirement applies.

9. Changes

We may update this policy as BGPT, applicable law, or our service providers change. We will post the revised policy here and update the effective date. We will provide additional notice of material changes where required.

10. Contact BGPT

For privacy questions, rights requests, security reports, or complaints:

You may also have the right to complain to your local data-protection authority or state regulator.