Privacy Policy

Overview

Graphical Abstract Lab ("we", "us", or "our") provides tools for creating and managing AI-assisted graphical abstracts. This Privacy Policy explains how we handle personal information when you visit our website, create an account, upload reference material, generate images, purchase credits or subscriptions, or contact support.

This policy applies to the Graphical Abstract Lab website and hosted application. It does not replace the privacy notices of third-party services that you choose to use through the platform.

Information We Collect

Account and authentication information

We may collect your name, email address, profile image, email-verification status, authentication-provider identifiers, and account creation and update timestamps. If you use password authentication, the authentication system stores a protected password representation rather than your readable password.

Research projects and generated content

To provide the graphical abstract service, we process information you submit or create, including:

• Project titles and research briefs.
• Original and optimized prompts.
• Scientific field, visual style, aspect ratio, template, and generation settings.
• Reference images and their filenames, file types, dimensions, and storage metadata.
• Generated images, variants, exports, task status, and error information.

Do not upload confidential, unpublished, restricted, personally identifiable, patient, or protected health information unless you have the right and authorization to process it through our service. Graphical Abstract Lab is not represented as a HIPAA-compliant clinical records service.

Payment and subscription information

We keep transaction records such as the product or plan, amount, currency, billing email, payment provider, order and subscription identifiers, invoice links, payment status, and relevant timestamps. Payment providers process payment-card or account credentials directly; we do not store complete card numbers.

Usage, device, and security information

We may process IP addresses, browser and user-agent information, session identifiers, timestamps, referral or campaign source, requested URLs, rate-limit signals, and security or diagnostic logs. We use this information to operate the service, prevent abuse, investigate errors, and protect accounts.

Support and communications

If you contact us, we receive your email address and the information you include in the message. We may also process verification, transactional, billing, and service emails that we send to you.

Cookies and Local Storage

The service uses essential cookies or browser storage for authentication sessions, security, locale, theme, navigation state, and referral attribution. These technologies are required for account and application functions.

Depending on the configuration selected by the site operator, optional analytics, advertising, or customer-support services such as Google Analytics, Plausible, Google AdSense, Crisp, or Tawk may also be enabled. Those services may receive device, usage, cookie, or interaction data under their own privacy terms. Where required, we will provide additional notice or consent controls before enabling non-essential technologies.

How We Use Information

We use information to:

• Create and secure accounts and sessions.
• Store projects, reference assets, and generation history.
• Analyze research evidence, prepare prompts, request graphical abstract images, and audit generated visual claims through AI providers.
• Track credit use and restore credits when eligible generation tasks fail or are canceled.
• Process purchases, subscriptions, invoices, and payment callbacks.
• Deliver service, verification, security, billing, and support messages.
• Diagnose errors, enforce rate limits, prevent fraud and abuse, and improve reliability.
• Comply with legal obligations and establish or defend legal claims.

Where applicable law requires a legal basis, we rely on performance of our contract with you, compliance with law, our legitimate interests in operating and securing the service, and consent where consent is required.

AI Providers and Research Content

When you start a generation, your research brief, generation settings, and selected reference-image URLs are sent to the configured OpenAI-compatible service for evidence extraction, layout analysis, and prompt processing. This may be a third-party gateway or service provider; use of an OpenAI-compatible interface does not mean the service is operated by OpenAI. The resulting prompt and image-generation settings are then sent to Kie.ai to generate images. A generated image may be sent back to the configured OpenAI-compatible service for visual semantic auditing and, when a high-severity unsupported visual claim is detected, used to request one corrected generation. We use the returned task, audit, and image data to complete the generation and store your result.

Third-party AI providers process submitted content under their own terms and privacy policies. Do not submit content that you are not permitted to disclose to those providers. We do not promise that third-party providers will use submitted content for no purpose other than providing their service unless their applicable terms expressly make that commitment.

How We Share Information

We do not sell personal information for money. We may disclose information to:

• Authentication and identity providers you choose.
• AI generation and prompt-processing providers.
• Hosting, database, object-storage, content-delivery, and security providers.
• Payment processors and subscription-management providers.
• Email, analytics, advertising, and customer-support providers when enabled.
• Professional advisers, authorities, or other parties when required by law or reasonably necessary to protect rights, users, or the service.
• A successor in connection with a merger, financing, reorganization, or sale of the service, subject to appropriate confidentiality protections.

We limit disclosures to information reasonably needed for the relevant purpose.

International Processing

Our providers may process information in countries other than the country where you live. Where required, we use appropriate contractual or legal safeguards for international transfers. Provider locations and safeguards may change as service configurations change.

Data Retention

We retain account, project, generation, asset, support, and transaction information for as long as reasonably necessary to provide the service and fulfill the purposes described above. We may retain transaction, security, and compliance records for longer when required by law, needed to resolve disputes, or necessary to prevent fraud. Deleted information may remain in restricted backups until those backups are rotated.

Security

We use measures designed to protect information, including access controls, transport encryption, private asset ownership checks, credential hashing, and configuration-secret encryption when enabled. No online service can guarantee absolute security. You are responsible for protecting your credentials and for using only reference materials you are authorized to upload.

Your Privacy Choices and Rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about disclosures of your personal information. You may also have the right to withdraw consent or appeal a decision about a privacy request.

To exercise a privacy right, email support@graphicalabstractlab.com from the address associated with your account. We may request information necessary to verify your identity. Some information may be retained where an exception or legal obligation applies.

Children

The service is intended for researchers and other adults and is not directed to children under 13 or the minimum digital-consent age in their jurisdiction. We do not knowingly collect personal information from children in violation of applicable law.

Changes to This Policy

We may update this policy as our service or legal obligations change. We will post the revised version with a new update date and provide additional notice when required.

Contact

For privacy questions or requests, contact support@graphicalabstractlab.com.