This Privacy Policy explains how SIDERA LOGIC LIMITED ("JointTex," "we," "us," or "our") processes personal data when you use the JointTex website, collaborative LaTeX workspace, and related services (the "Service"). JointTex is the controller for the personal data described here unless we tell you otherwise in a separate agreement.

1. Information we process

We process information needed to operate, secure, and improve the Service:

• Account information: email address, display name, account identifier, preferred language, authentication status, optional profile image, and optional research field and profile description. If you choose Google sign-in, our identity provider receives the account information that Google provides for that sign-in.
• Workspace and collaboration content: project names, LaTeX source, uploaded files, templates, compile outputs and diagnostics, version-history data, review comments, collaboration presence, invitations, and associated project metadata. Your collaborators can see the content and identity information that you share with a project.
• AI feature inputs: when you use an AI feature, we send the prompt and context needed for your request to the configured model provider. Agent context includes your name, email, preferred language, and optional research profile, plus other project members' names, roles, languages, and research profiles (not their email addresses). For speech input, short audio segments are sent to the configured speech-recognition provider. JointTex does not save the audio recordings or raw audio segments; for quota and duplicate-request checks, we record the duration, model, request identifiers, and a cryptographic fingerprint of each audio segment. A transcription becomes workspace content if you insert it. Formula screenshots are sent to the configured model provider for recognition. JointTex saves compressed screenshots and recognition results in your per-project history (the latest 50 entries), which you can delete individually. Agent conversations and their attachments are saved so you can resume and export them, subject to the retention period below.
• Billing information: plan, subscription status, payment-provider customer and subscription identifiers, and billing events. Payment-card and other payment-method details are collected and handled by Stripe or another selected payment provider, not by JointTex.
• Technical and security information: session cookies, IP-address and device/browser information that are normally generated when a service is used, request and security-event metadata, access-token metadata, and records needed to detect abuse, investigate incidents, and protect the Service.
• Community forum: the JointTex community forum (forum.jointtex.com) is a separate site that we host ourselves. When you sign in to it with your JointTex account, we pass it your account identifier, email address, display name, profile picture (if you uploaded one), a suggested username, and whether you are a JointTex administrator; your JointTex profile description is not shared. The forum keeps its own profile for you, its own session cookies, the IP addresses it sees, and what you post there. It does not automatically look up your email address with external avatar services such as Gravatar. Topics, replies, your forum username, your display name, and your profile picture are public (a picture you later remove from JointTex stays on the forum until you upload a new one or delete your account), so do not post unpublished work, private project content, or personal information you do not want to share. A bug report started from JointTex is prefilled with the app version, your browser and operating system, and your interface language, and is published only if you submit it.
• Communications: the information in account, verification, password-recovery, invitation, billing, and account-deletion messages we send or receive.

2. How we use information

We use personal data to provide and maintain the Service; authenticate users; enable collaboration, compilation, search, and optional AI features; process subscriptions; send transactional communications; enforce our Terms; prevent fraud and misuse; comply with legal obligations; and improve the reliability and security of the Service. We do not sell personal data or use workspace content for targeted advertising.

JointTex does not use your workspace content, AI prompts, audio, screenshots, transcriptions, or AI outputs to train our own models, sell them, or use them for advertising or unrelated commercial purposes. We send AI inputs to configured providers only to fulfill the feature you request. Provider handling of those inputs, including any retention or model-training use, depends on the provider's terms and our agreement with that provider.

Where applicable, our legal bases are performance of our contract with you, our legitimate interests in running a safe and effective service, compliance with legal obligations, and your consent where we ask for it. You can withdraw consent at any time, though that will not affect processing already performed.

3. How information is shared

We share personal data only as needed to operate the Service:

• with people you invite to, or who otherwise have access to, a shared project;
• with everyone who visits the community forum, for what you post there;
• with service providers acting for us, including hosting and infrastructure providers, our identity and email providers, payment providers, and, when enabled and used, AI model providers;
• with professional advisers, law enforcement, regulators, or other third parties when required by law or necessary to protect rights, safety, and security; and
• in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

Service providers may process data in countries other than your own. Where data-protection law requires it, we use an appropriate transfer mechanism or safeguard for such transfers. Contact us to request information about the applicable safeguards.

4. Cookies and local storage

JointTex uses only essential cookies: the session cookies that sign you in and protect the Service. We do not use advertising, analytics, referral, or other tracking cookies. In your browser’s own storage we also keep your preferences (such as language, theme, and your cookie choice) and, once you are signed in, what lets JointTex open without a connection: your account details (identifier, email address, name, role, plan, and language and color preferences, trusted for up to 30 days after the last successful sign-in check) and copies of the projects you have opened. Signing out removes the account details and the project copies. Blocking essential cookies may prevent sign-in and other core features from working.

On your first visit we ask for your cookie choice. Essential cookies are set either way, because the Service cannot sign you in without them. Browser error reports are sent only if you choose “Accept all”: each report names the kind of error, the kind of page (never a project, file, or link), the part of the page and the part of our code that caught it, the app version, your browser family, the identifier of any server request that failed, up to three positions in the app’s own published code where the error happened (a file of our code and a line and column in it, never the error’s text or anything you wrote), and, if you are signed in, your account identifier. With the same choice, the desktop app also reports each compile it runs on your own computer, which our servers otherwise take no part in: whether it ran or why it could not, how long it took, where the TeX came from (installed or a container), the versions of the web app and the desktop app, your operating system, and your account identifier — never the project, a file, or the compile log. Choosing “Reject all” sends none. You can change your choice at any time: Cookie settings.

5. Retention and deletion

We retain data for as long as needed for the purposes above, including to meet legal, accounting, security, and dispute-resolution requirements. In the current Service configuration, deleted projects are retained for up to 30 days before permanent removal; generated artifacts and compilation caches are ordinarily retained for up to 7 days; and AI-agent session records are ordinarily retained for up to 30 days. These operational periods may be adjusted by the Service operator.

You can request account deletion from Account Settings after recent re-authentication. A deletion request has a 30-day cooling-off period and is cancelled if you sign in again during that period. Once deletion is completed, we remove your account and owned workspace data from JointTex systems, and we then anonymize your community forum account: your forum profile, email address, and username are replaced, the IP addresses stored with the account are overwritten, and your posts remain under an anonymous name. The forum's sign-in security logs are kept. Some information may remain where legally required, in security records, in other users’ independently controlled content, or with payment providers that maintain their own records.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent. You may also have a right to complain to your local data-protection authority. You can exercise available rights by contacting us at [email protected]. We may need to verify your identity before responding.

Right to object: where we rely on legitimate interests, you may object to that processing by contacting us at [email protected]. We will stop the processing unless we have compelling legitimate grounds or another lawful basis to continue.

7. Security

We use reasonable technical and organizational measures designed to protect personal data. For example, JointTex uses authenticated access controls and isolates document compilation from the main application environment. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

8. Children

The Service is not directed to children. Do not use the Service if you are not legally able to agree to these terms in your jurisdiction. If you believe a child has provided us personal data without appropriate authorization, contact us at [email protected].

9. Changes and contact

We may update this Privacy Policy from time to time. We will post the revised version here and update the "Last updated" date; for material changes, we will provide additional notice where required by law.

For privacy questions or requests, contact [email protected]. The controller is SIDERA LOGIC LIMITED.