Who we are
LitLit (“LitLit”, “we”, “us”) is run by LitLit AI Limited. This policy covers litlit.ai and the LitLit app. If anything here is unclear, write to hello@litlit.ai.
What we collect
Your account
Your email address, and the name and profile picture that Google or GitHub share when you sign in with them. We don’t use passwords: you sign in through Google, GitHub or a link sent to your email.
What you make in LitLit
The questions you ask, the maps built from them, your conversations with a map, the papers you save, and the notes and tags you add.
Memory
While memory is on, LitLit keeps short notes about you and how you like answers, such as your field or that you prefer recent work, so later answers fit. You can read, edit and delete every note, or turn memory off, in Settings.
Plan and payments
Your plan, its renewal date, and the credits you use. Payments are taken by Stripe: we receive a customer reference and the state of your subscription, never your full card number.
How the app is used
- Product events, such as a map being built or a question asked, linked to your account once you sign in. We don’t record your screen.
- Error reports when something breaks, with your account ID but without your session token, cookies or what you typed.
- Your IP address, briefly, to limit how often one address can call the service. These counters expire after a minute.
How we use it
- To run LitLit: build maps, answer questions, keep your library, and apply your plan’s credits.
- To personalise answers with memory, while it’s on.
- To bill you for a paid plan and send receipts (Stripe sends these).
- To email you. We send sign-in links when you ask for them, and service notices when something about your account changes. We also send an occasional email about new features. You can unsubscribe from any of them, or switch them off in Settings.
- To keep LitLit working and safe: fix errors, prevent abuse, and see which features are used, in aggregate.
We use what you write only to provide LitLit to you. We don’t sell personal data, share it for advertising, or use your content to train AI models.
Who processes it for us
These companies process data on our behalf, only to provide their part of the service:
| Service | What for |
|---|---|
| Supabase | Sign-in and the database that holds your account and content |
| AI model providers | Reading your question with the papers involved and writing the answer |
| Stripe | Payments, invoices and the billing portal |
| Resend | Sending sign-in links and product emails |
| PostHog | Product analytics |
| Sentry | Error reports |
| Cloud hosting | Running the website and servers |
To find papers, LitLit sends search terms and paper identifiers to scholarly databases, including OpenAlex and Semantic Scholar, and fetches open-access full texts from publishers and preprint servers. These requests come from our servers and don’t include your name or email.
We may also disclose information if the law requires it, to protect people from harm, or to a company that takes over LitLit, which would remain bound by this policy.
Trying LitLit without an account
Before you sign in, LitLit gives your browser a temporary session so you can try a few maps. What you make there is kept with that session and moves to your account when you sign in. We may remove trial sessions that haven’t been used for a long time.
Cookies and local storage
LitLit stores your sign-in session and preferences, such as theme and search mode, in your browser. Product analytics keeps an identifier there too. We don’t use advertising or cross-site tracking cookies.
Where data is kept, and for how long
Our database and servers are in the United States, and the companies above may process data in other countries. Where data leaves your country, we rely on these providers’ contractual safeguards.
We keep your account and content until you delete them. When you delete your account, your maps, conversations, saved papers, memory and usage are removed straight away, and any subscription is cancelled. Copies in backups are overwritten within 30 days. Payment records are kept by Stripe and us for as long as tax and accounting law requires.
Your choices and rights
- See and change your content in the app, and export papers as BibTeX, RIS or CSV.
- Read, edit or delete what memory keeps, or turn memory off, in Settings.
- Stop product emails from any email, or in Settings.
- Delete your account in Settings.
Depending on where you live, including under Hong Kong’s Personal Data (Privacy) Ordinance, the GDPR in the EU and the UK, and laws in some US states, you may also have the right to a copy of your data, to correct it, to object to or restrict how we use it, and to complain to your data protection authority. Write to hello@litlit.ai and we’ll reply within 30 days.
Where the GDPR applies, we rely on our contract with you to run LitLit and bill you, and on our legitimate interests for memory, security, analytics and product emails. Memory and product emails each have a switch in Settings; to object to anything else, write to us.
Children
LitLit isn’t meant for anyone under 16, and we don’t knowingly collect their data. If you think a child has signed up, tell us and we’ll delete the account.
Changes
If we change this policy, we’ll update the date above. If a change matters, we’ll tell you by email or in the app before it applies. The Terms of Service explain the rest of how LitLit works.
Contact
Questions, requests or complaints about privacy: hello@litlit.ai.