Privacy Policy

Amroja LLC ("we," "us," or "our") operates the website nowigetit.us and the Now I Get It! service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

Now I Get It! transforms scientific research papers into interactive, easy-to-understand web pages using artificial intelligence. By using our Service, you agree to the collection and use of information in accordance with this policy.

Information You Provide

• Account information: If you create an account, we collect your email address, name, and display name. If you sign in through a third-party provider (such as Google, Facebook, Apple, or Amazon), we receive your email address and name from that provider.
• Uploaded documents: When you upload a PDF for processing, we temporarily store the file to generate your interactive page.
• Feedback: If you submit feedback on a generated page, we collect your rating, any categories you select, and optional free-text comments.
• Waitlist signup: If you join our waitlist, we collect your email address and your consent to be contacted.
• Payment information: If you make a purchase, your payment is processed by Stripe. We share your email address with Stripe to create a customer record for purchase history and saved payment methods. We store a Stripe Customer ID on your account but do not store your credit card number or full payment details on our servers.

Information Collected Automatically

• IP address: We collect your IP address for rate limiting and security purposes. Rate-limiting records are automatically deleted after 2 hours.
• Browser information: When you submit feedback, we record your browser's user-agent string to help detect abuse.
• Analytics data: We use Google Analytics to collect standard usage information such as pages visited, time on site, browser type, and general location. See Section 9 for details.
• Local browser storage: We use your browser's localStorage and sessionStorage to remember preferences (such as whether you've already submitted feedback on a page) and to maintain your session during file uploads. This data stays on your device and is not transmitted to our servers.

Information from Third Parties

• Social login providers: If you sign in with a third-party account, we receive your basic profile information (email and name) as authorized by you during the sign-in process.
• Payment processor: Stripe may provide us with limited transaction information such as confirmation of payment and billing address.

We use the information we collect for the following purposes:

• Providing the Service: Processing your uploaded documents, generating interactive pages, and publishing them for sharing.
• Account management: Creating and maintaining your account, authenticating your identity, and managing your content.
• Communication: Sending transactional emails (such as account verification and waitlist confirmations) and responding to your inquiries.
• Improvement: Analyzing feedback and usage patterns to improve the Service.
• Security: Detecting and preventing abuse, fraud, and unauthorized access through rate limiting and content screening.
• Payment processing: Facilitating purchases and managing billing.
• Legal compliance: Meeting our legal obligations and enforcing our terms of service.

When you upload a PDF, we submit it to Anthropic's AI models via API for content analysis, screening, and generation of your interactive page. Here is what you should know:

• Your uploaded document is temporarily stored on our servers and is deleted after processing is complete.
• The document content is sent to Anthropic's API for processing. Our use of Anthropic's API is governed by their Commercial Terms of Service, which explicitly state: "Anthropic may not train models on Customer Content from Services" and "Anthropic disclaims any rights it receives to the Customer Content under these Terms."
• Your documents are not used to train AI models. Anthropic's commercial terms contractually prohibit them from training on your content.
• AI processing extracts metadata from your document (such as the paper's title, authors, and publication date) which is stored alongside the generated page.

We use the following categories of third-party services to operate and improve the Service:

• Cloud infrastructure providers: We host our Service on cloud infrastructure that provides computing, storage, database, and content delivery services.
• Analytics providers: We use Google Analytics to understand how visitors use our site. Google Analytics collects information such as how often you visit, what pages you view, and what other sites you visited before coming to ours. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
• Font providers: We load fonts from an external font service, which may collect your IP address and browser information when fonts are delivered.
• Email service providers: We use third-party services to send transactional emails such as account verification and waitlist confirmations.
• Payment processors: We use Stripe to process payments. When you make a purchase, your payment information — including your email address — is collected and processed directly by Stripe in accordance with their privacy policy. We store a Stripe Customer ID on your account to enable purchase history and saved payment methods, but we do not store your credit card details.
• AI model provider: We use Anthropic's AI models via API for content analysis and page generation, as described in Section 4.
• Authentication providers: If you use social login, we integrate with third-party identity providers who handle the authentication process.

• Published pages: Generated interactive pages are retained indefinitely unless you request deletion.
• Uploaded PDFs: Deleted automatically after processing is complete. Abandoned uploads (not confirmed within 1 hour) are also automatically deleted.
• Account data: Retained while your account is active. If you cancel your account, your record is marked as cancelled but retained for record-keeping purposes.
• Feedback: Retained indefinitely to help us improve the Service.
• Waitlist signups: Retained until we no longer need them for their stated purpose, or until you request removal.
• Rate-limiting data: IP-based rate-limiting records are automatically deleted after 2 hours.
• Analytics data: Retained according to Google Analytics' standard retention policies.

For California Residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose about you.
• Delete personal information we have collected from you, subject to certain exceptions.
• Opt out of the sale of personal information. We do not sell your personal information to third parties.
• Non-discrimination. We will not discriminate against you for exercising any of your CCPA rights.

In the past 12 months, we have collected the following categories of personal information: identifiers (email, name, IP address), internet activity information (pages visited, feedback submitted), and commercial information (payment records). We have not sold any personal information.

For EEA/UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the right to:

• Access your personal data and receive a copy of it.
• Rectify inaccurate or incomplete personal data.
• Erase your personal data ("right to be forgotten").
• Restrict the processing of your personal data.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time where processing is based on consent.

Our lawful bases for processing your data include: your consent (e.g., waitlist signup), performance of a contract (e.g., providing the Service), and our legitimate interests (e.g., security, analytics, and service improvement).

How to Exercise Your Rights

To exercise any of these rights, contact us at legal@nowigetit.us. We will respond to your request within 30 days (or within the timeframe required by applicable law).

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: With third-party companies that help us operate the Service (cloud hosting, email delivery, payment processing, AI processing, analytics), subject to confidentiality obligations.
• Legal requirements: When required by law, subpoena, or other legal process, or to protect our rights, property, or safety.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With your consent: When you explicitly authorize us to share your information.

Strictly Necessary Cookies

These cookies are required for the Service to function and are set only when you log in. They cannot be disabled. They include an authentication cookie that maintains your login session and signed cookies that allow your browser to access your private pages. These cookies expire after 30 days.

Analytics Cookies (Optional)

We use Google Analytics to understand how visitors use our site. Analytics cookies are only set if you accept them via the cookie consent banner that appears on your first visit. If you choose "Essential Only," no analytics cookies are placed and no usage data is collected by Google Analytics. These cookies collect anonymous usage data such as pages viewed, session duration, and referring site.

You can change your preference at any time by clicking "Cookie Settings" in the footer, or opt out of Google Analytics entirely by installing the Google Analytics Opt-out Browser Add-on.

Browser Local Storage

We store small amounts of data in your browser's localStorage (such as your cookie consent preference, a flag indicating you've signed up for the waitlist, or that you've already rated a page) and sessionStorage (such as your current upload session). This data is not transmitted to our servers and persists only on your device.

We do not use advertising cookies or cross-site tracking.

Our Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information. If you believe a child under 13 has provided us with personal information, please contact us at legal@nowigetit.us.

We are based in the United States, and your data is processed and stored on servers located in the United States. If you access our Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using our Service, you consent to the transfer of your information to the United States. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

We implement appropriate technical and organizational measures to protect your personal information, including:

• All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
• User authentication is handled by a managed identity service with industry-standard security practices.
• Sensitive credentials (such as API keys and tokens) are stored in encrypted secrets management services, not in application code.
• Uploaded documents are deleted promptly after processing.
• We implement rate limiting to prevent abuse.

While we strive to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

Amroja LLC
207 Morrison Ave
Somerville, MA 02144
legal@nowigetit.us