SLReviewFlow privacy policy

Who we are

SLReviewFlow is a web application for systematic literature reviews, run by Research Mind LLC at www.slreviewflow.com. Research Mind decides how the personal data described here is used and is responsible for it.

What we collect

• Your account: your email address, your full name, and your password, which our sign-in provider stores only as a secure hash. We also record whether an administrator has approved your account, your plan, and when you signed up and last signed in.
• Google or Microsoft sign-in: if you choose to sign in with Google or Microsoft, that provider shares your name, email address and an account identifier with us. We ask only for basic sign-in details; we never receive your Google or Microsoft password and get no access to your mail, files, contacts or calendar.
• Your profile photo: if you add one, a 400 × 400 pixel copy cropped in your browser, which leaves out the camera and location details stored in the original file. It is shown beside your name in the app and, while your public profile is on, on your public page. You can replace or remove it at any time.
• Your review projects: everything you add to a project, including protocols, searches, imported files and their records, duplicate, screening and eligibility decisions, notes, full-text PDFs, studies, extracted data, selections and releases.
• Error reports: when something fails, the page and the technical details of the error are sent to our error-monitoring service with your email address removed.
• Page views: anonymous counts of which pages are visited, with project and file identifiers removed from addresses. These use no cookies and are not linked to your account.
• Problem reports: if you send a report with Report a problem, it includes your message, a screenshot you can review first, and a short recording of the page with all text and form inputs masked.

How we use it

We use this data to run your account and your projects, to let administrators approve and manage accounts, to send account emails (confirmation, password reset and approval messages), to keep the service secure, and to find and fix problems. We do not sell personal data, use it for advertising, or share it with anyone except the service providers below.

Who can see your projects

Your projects are visible only to you, unless you publish a review or turn on a public profile; the publishing terms say what those pages show. SLReviewFlow administrators can see account details so they can approve and manage accounts, and may open project data only to fix a problem you report or to keep the service secure.

Service providers

We use these providers to run SLReviewFlow. Each processes data only on our behalf:

• Supabase: database, sign-in and file storage for accounts and projects.
• Vercel: hosting and anonymous page-view counts.
• Sentry: error reports and problem reports.
• Resend: delivery of account emails.
• Google and Microsoft: sign-in, only if you choose them.
• OpenAI: checks each profile photo for unsuitable content before it is saved. Only the cropped photo is sent, and OpenAI does not use it to train its models.

When you use Find available full text, we send the DOI, PubMed ID or PMC ID of each report to Unpaywall, Europe PMC and the US National Library of Medicine to look for open-access copies. Only these identifiers are sent, never your name, email or other project data.

Cookies and browser storage

We set only the cookies needed to keep you signed in and to complete password changes. Your browser also stores preferences such as light or dark theme and your last screening view. We use no advertising or cross-site tracking cookies.

How long we keep it

We keep your account and projects while your account exists. When you ask us to delete your account, we delete it together with your projects and their files. Error and problem reports are kept for a limited period by our error-monitoring service and then deleted automatically.

Your choices

You can export your project data from each project at any time. You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account, by emailing accounts@slreviewflow.com from the address you sign in with.

Browser extension

The SLReviewFlow PDF Sender extension has its own privacy policy.

Changes and contact

If we change what we collect or how we use it, we will update this page and its effective date before the change takes effect. Questions about this policy go to Research Mind LLC at accounts@slreviewflow.com.