Last updated: September 11, 2026
This Privacy Policy explains how Scholarly, based in the United States (USA), collects, uses, discloses, and retains information when you use our website, applications, AI features, and shared workspaces (the Services), including when you:
Questions or concerns? You can use the privacy controls described below or contact us with questions or requests at hello@scholarly.so.
We collect information you provide when creating an account, using the Services, subscribing, joining a team, connecting a service, recording audio, or contacting support. Uploaded material may contain information about other people; provide it only when you have the necessary rights and permissions.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include:
Social Media Login Data. If you use Google sign-in, we receive the profile information needed to authenticate you, such as your name, email address, and profile picture. Connected-file access is separate from sign-in; see section 6.
Please keep your account information current. Do not submit sensitive personal information unless you have authority to do so and the Service is appropriate for your use.
As you use the Service, we receive technical and usage information. This information can identify you or be linked to your account. Product analytics operates independently of the optional advertising cookie choice. Information may include:
We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases:
If you are located in Canada, this section applies to you.
We may process your information if you have given us specific permission (express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (implied consent). You can withdraw your consent at any time.
We may share information in specific situations and with specific third parties, including:
Essential cookies and similar storage support sign-in, security, language, and requested preferences. PostHog measures product use and may record session replays with text and inputs masked; this product analytics stays active whether you accept or deny optional advertising cookies and is not used for advertising. Optional advertising uses Google Ads, campaign and click identifiers, and hashed email matching where available to measure ads. Advertising tracking stays off until accepted. Use Accept or Deny in the cookie banner, or open Cookie preferences from the footer, Settings, or the top of this page to change the advertising choice. Choices apply to this browser and are stored for up to 180 days; advertising attribution cookies last up to 90 days. Provider cookie lifetimes vary. Blocking all storage in your browser may affect sign-in or prevent a choice from surviving a reload.
Google sign-in supplies identity and profile information for authentication. If you separately connect Google Drive, we receive authorization tokens and access the files you select through the picker, including their contents and metadata. Existing grants may have broader read permissions. We use selected files to answer your requests and create outputs; relevant material may be sent to AI and infrastructure providers that support those features.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy and the Google Workspace API user data and developer policy, including Limited Use requirements. Google Workspace data is not used to train or improve general-purpose AI models or for advertising. Human access is limited to the exceptions those policies permit. Disconnect in Connections or revoke access in your Google account to stop future access. Disconnecting does not itself delete files already imported, chat history, or generated outputs; delete those separately or request account deletion.
We retain account information and saved content while needed to provide the Services or until you delete them, subject to the exceptions below. Retention depends on the information, its purpose, your settings, the life of a support request or dispute, and applicable legal duties. Billing and transaction records may outlast account closure for tax, accounting, and fraud-prevention obligations. Operational logs and backups follow their applicable retention cycles.
Deletion starts removal from active systems and associated storage. Processing may take time across systems and providers, and backup copies may persist until their normal expiry; retained copies are not a license for unrelated use or general model training. We may retain limited information for legal duties, security, fraud prevention, or resolving claims, with access restricted to those purposes. De-identified information is treated as outside personal-data rules only when it meets the applicable legal standard; removing a name or hashing an identifier alone does not establish anonymity.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.
In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protection laws. These may include the right to: (i) request access and obtain a copy of your personal information, (ii) request rectification or erasure, (iii) restrict the processing of your personal information, and (iv) if applicable, data portability. In certain circumstances, you may also have the right to object to the processing of your personal information.
Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us at hello@scholarly.so.
Account Information. You can update account details and request account deletion in Settings. Export the material you need before deleting your account; deletion removes access and initiates the cleanup described in section 7. Copies downloaded by other people, independently duplicated content, and organization-controlled material may remain subject to their control.
Cookies and similar technologies. Use Cookie preferences to accept or deny optional advertising cookies. Product analytics stays active with either choice. You can also manage browser storage directly. Withdrawal applies to future advertising processing.
When this browser sends Global Privacy Control (GPC), we disable optional advertising tracking even if a stored preference allows it. GPC does not turn off essential functionality or product analytics. Older Do Not Track signals are distinct from GPC; use Cookie preferences to control optional advertising.
Where applicable state privacy laws cover our processing, residents may have rights to access, correct, delete, and obtain a portable copy of personal information; opt out of sale, sharing for cross-context behavioral advertising, targeted advertising, or certain profiling; and limit specified uses of sensitive information. We do not discriminate for exercising applicable rights. Submit requests or an appeal of a denied request to hello@scholarly.so. We verify requests when required, accept authorized agents with appropriate proof, and respond within the applicable legal deadlines. Cookie preferences and GPC control the browser advertising described above.
Advertising disclosures may constitute sale or sharing under some state laws even when no money changes hands. Our collected categories, purposes, and recipient categories are described in sections 1–6. California residents may also request information about disclosures for third-party direct marketing under the Shine the Light law. Any additional rights and exceptions depend on the law that applies.
The Services are not directed to children under 13, and they may not create an account. Users below the age of legal majority must have a parent or guardian’s permission and meet any higher minimum age required locally.
If you believe a child has provided personal information without the necessary authorization, contact hello@scholarly.so so we can investigate and take appropriate action, including deletion where required.
You retain your rights in your content. Providing the Service requires processing that content, but does not give Scholarly unrestricted rights to publish it or use it for unrelated purposes.
User Content includes documents, PDFs, images, notes, recordings and transcripts, prompts, chat history, connected files you select, and generated outputs such as slides, video, podcasts, quizzes, and research. Team membership, sharing permissions, usage, and activity records are also processed.
We use User Content for the following purposes:
Sharing a link or publishing content may make it available to others according to the selected access settings. Recipients may download or independently duplicate material. Revoking a link cannot recall copies already obtained. In Teams, administrators manage membership, roles, billing, and activity reporting; access to shared content follows workspace and project permissions. Your organization may control material placed in its workspace and retain it when a member leaves. Leaving a team and deleting an individual account are different actions.
Scholarly operates from the USA and uses providers that may process information in the USA and other countries. The provider and processing location depend on the feature, selected model, and routing. Selecting an EU-hosted model does not, by itself, mean all storage, support, analytics, or other processing stays in the EU. Where law requires transfer safeguards, the applicable arrangements must support those transfers, such as adequacy decisions or appropriate contractual safeguards. Contact us for information about a specific workflow or your organization’s requirements before submitting data subject to location restrictions.
For account administration and our own service operations, Scholarly determines the purposes of processing. For personal data an organization supplies for processing on its behalf, its instructions and applicable data-processing agreement govern. Contact your organization first about access or deletion of organization-controlled information; we assist as required. This policy does not replace a required data-processing agreement or make consent to unrelated uses a condition of using the Service.
We will post updates with a revised date and provide notice of material changes through the Service or by email as required. Changes do not retroactively authorize unrelated uses of previously collected information. Where a new purpose requires consent, we will request it before that processing.
Scholarly, United States (USA). For privacy questions, contact hello@scholarly.so.
To exercise applicable rights, request details about retention or transfers, or appeal a request decision, email hello@scholarly.so. We may request information reasonably necessary to verify identity or authority. We respond within the deadlines set by applicable law, explaining any permitted extension or refusal. You may also complain to your local data-protection authority; you do not have to contact us first.