Privacy Policy
What we collect
When you join a waitlist on this site, we collect your email address and nothing else. We do not collect your name, location, device information, or any other personal data.
When you use a free web tool, the file you upload is processed in memory inside an ephemeral container and discarded the moment your request completes. No copy is written to durable storage or to our logs.
When you use the paid Paper Review tool, we collect: (a) the email address Stripe captures during checkout, (b) the Stripe payment session ID, and (c) the manuscript PDF you upload. The manuscript is sent to Anthropic's Claude API for analysis. The resulting Markdown review report is held in our backend storage only long enough for you to retrieve it on the status page; it is deleted on first retrieval (or automatically after 24 hours if you never retrieve it).
How we use it
Waitlist emails are used for one purpose: to notify you when the app you signed up for launches. You will receive at most one email per app — the launch announcement. We do not send newsletters, marketing emails, or third-party promotions.
Paid Paper Review submissions are used to produce the manuscript review you paid for. The email Stripe captures is also used to issue refunds if you request one, and to send a small number of purchase-related emails: a tip a few days after your review, a check-in asking how the review held up, and — only if you haven't purchased again — an occasional reminder that the tool exists. That's the entire sequence; we do not add you to a newsletter or send unrelated marketing. Every one of these emails includes a one-click unsubscribe link that takes effect immediately.
Who we share it with
Waitlist emails are stored by Netlify (our hosting provider) via Netlify Forms and are not shared with, sold to, or disclosed to any third party for any purpose.
Paid Paper Review data passes through these third parties: Stripe (payment processing; their privacy policy governs the card data you enter on Stripe's hosted checkout — Purplelink never sees it), Anthropic (the Claude API processes your manuscript text and images; per Anthropic's commercial Terms, inputs are retained for up to 30 days for abuse monitoring and are not used for model training), and CrossRef (titles and DOIs of references in your bibliography are sent to verify that the citations exist). We do not share data with advertisers, brokers, or analytics services other than the cookieless Cloudflare Web Analytics described below.
How long we keep it
Waitlist email: retained until the relevant app launches and the notification is sent, at which point it is deleted.
Paid Paper Review: the manuscript and the review are deleted from Purplelink's storage when you retrieve the result (or after 24 hours, whichever comes first). The Stripe customer record (email + payment session ID) persists in Stripe's systems per their retention policy; Purplelink keeps the Stripe session ID for as long as the review-token redemption window is open (7 days). Anthropic separately retains the inputs of the API call for up to 30 days as described above. The email address used for the purchase-related email sequence described above is kept until that sequence finishes (roughly 90 days) or until you unsubscribe, whichever comes first.
You may request deletion at any time by emailing ben@purplelink.llc with the subject line "Delete my data."
Your rights
If you are located in the European Union or United Kingdom, you have rights under GDPR including the right to access, correct, or delete your personal data. To exercise any of these rights, email ben@purplelink.llc.
If you are a California resident, you have rights under CCPA. We do not sell personal information.
Analytics and cookies
This site does not use cookies. We use Cloudflare Web Analytics to count aggregate page views — total visits, popular pages, and referring sites — so we can tell whether anyone is reading. It is a privacy-respecting analytics service: it does not use cookies, does not fingerprint visitors, does not track you across other sites, and does not store or share data identifying individual users. No personal data is collected, so no consent banner is required under GDPR.
Cloudflare retains the aggregate analytics data for up to six months; Purplelink LLC keeps no separate copy.
We do not use Google Analytics, Meta Pixel, session recorders, or any other tracking technology.
Contact
Questions about this policy? Email ben@purplelink.llc.