Privacy Policy

Wenora is operated by Wenora Technologies Inc., a corporation incorporated in Delaware, United States. Company information

1. Scope

This Privacy Policy applies to wenora.ai and the Wenora research workspace. It covers visitors, account holders, and people whose institution provides access to Wenora.

2. Information we collect

Account information

When you sign in with Google, we receive the basic account information Google makes available with your permission, such as your name, email address, and profile image. We do not receive or store your Google password.

Research workspace content

When you register with email and password, we store your name, email address, language preference and a salted password hash. Passwords are not stored as plain text. Verification and password reset links expire and can only be used once.

We process the prompts, messages, project instructions, documents, datasets, references, reviewer comments, and other files you choose to submit. We also store the outputs and project history created for your workspace so you can continue and review your work.

Service and billing information

We collect operational information needed to run the service, including project identifiers, credit usage, plan or institution details, support messages, request timing, and diagnostic records. We also receive ordinary technical data such as IP address, browser type, device information, and security events.

Payments are processed by Stripe. Wenora receives payment references, amounts, currency, and payment status to fulfil purchases and handle support. Card details are entered on Stripe Checkout; Wenora does not store your full card number or security code.

3. How we use information

• Provide, personalize, and maintain your research workspace.
• Authenticate users and protect accounts, projects, and the service.
• Process files and generate the analyses or deliverables you request.
• Measure credit usage, administer plans, and support institutions.
• Respond to support, privacy, and security requests.
• Diagnose failures, prevent abuse, and improve reliability.
• Meet legal obligations and enforce our Terms of Use.

4. Google user data

Wenora uses Google OAuth for account sign-in. We use Google account data only to identify your account, create your Wenora profile, display your identity in the workspace, and keep project access tied to the correct user. We do not use Google user data for advertising and do not sell it.

Wenora's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

5. Service providers and disclosures

We share information only when needed to operate Wenora, fulfill your request, protect the service, or comply with law. Providers may include cloud hosting and storage services, database and infrastructure services, authentication services, and AI model providers that process the content required to perform a task. They may process information only for the services they provide to Wenora and under applicable contractual or legal safeguards.

We may also disclose information if required by law, to protect users or the public, during a corporate transaction with appropriate safeguards, or when you direct or consent to the disclosure. Wenora does not sell personal information.

6. Cookies and sessions

We use Brevo to send account verification, password reset, security notification and welcome emails. Brevo processes the recipient name, email address, email language and message content for this purpose.

Wenora uses cookies and similar local storage that are necessary for sign-in, session security, user preferences, and core workspace functions. Blocking required cookies may prevent sign-in or other features from working.

7. Retention

We retain account information, project content, and operational records for as long as needed to provide the service, maintain security and continuity, meet legal obligations, resolve disputes, and enforce agreements. Retention periods can differ by data type, workspace status, institutional requirements, and backup cycle.

8. Security

We use administrative and technical safeguards designed to protect information, including HTTPS, Google-based authentication, access controls, environment separation, monitoring, and backups. No online system can guarantee absolute security. See our Security page for more information.

9. Your choices and rights

You may ask to access, correct, export, or delete personal information, or object to or restrict certain processing where applicable law provides those rights. Institutional users may need to make a request through their institution. To submit a request, email office@wenora.ai. We may need to verify your identity before completing it.

You can revoke Wenora's access to your Google account through your Google Account permissions. Revoking access stops future Google sign-in until you authorize it again; it does not automatically delete your existing Wenora projects.

10. Researcher responsibilities

Only upload information you have the right and authority to use. Do not submit highly sensitive, regulated, confidential, or identifiable research data unless your institution has approved the use and any required agreement is in place.

11. International processing and changes

Wenora and its providers may process information in countries other than your own. Where required, we use appropriate safeguards for those transfers. We may update this policy as the service or law changes. We will post the revised version here and change the date above.

12. Contact

For privacy questions or requests, contact office@wenora.ai.