Privacy Notice

1. Who we are

Kiss Boglárka, Individual Entrepreneur (sole proprietor) registered in Hungary, registered office at Csehov utca 27., 3104 Salgótarján, Hungary, individual entrepreneur registration number UEVB-00229168, decides why and how personal data is processed in Methrica (https://methrica.com) and is therefore the controller. Contact: support@methrica.com.

2. What we collect and why

• Account data (name, email, login credentials, institution, country, experience level) — to create and secure your account. Legal basis: performance of our contract.
• Research content (projects, questions, literature records, uploaded datasets, transcripts, documents, analyses, drafts) — to provide the service. Legal basis: performance of our contract. You are responsible for the lawfulness of any personal data about research participants that you upload; where possible, upload pseudonymised material.
• AI usage records (operation type, model, token counts, credits charged, timestamps) — to meter credits, prevent abuse and support billing. Legal basis: contract and legitimate interests.
• Subscription and purchase records (plan, status, period, credit packs) — to grant entitlements. Card details are never seen or stored by us. Legal basis: contract and legal obligation.
• Technical data (IP address, device and browser information, error logs) — for security, fraud prevention and reliability. Legal basis: legitimate interests.
• Support messages — to answer you. Legal basis: legitimate interests.

3. AI processing

When you request AI assistance, the relevant project text is sent to our AI provider to generate a draft. Content is sent only for the operation you trigger and is not used by us to train models. Deterministic statistics are computed on our own infrastructure and never sent to an AI provider.

4. Who we share data with

• Cloud hosting, database and file-storage providers (application infrastructure).
• Our AI model provider, for the generation operations you trigger.
• Scholarly metadata services (OpenAlex, Crossref) — search terms only, never your research content.
• Paddle.com, our Merchant of Record, for the sale, subscription management, payment, tax compliance and invoicing of your order. See Paddle’s privacy notice.
• Professional advisers (legal, accounting) and authorities where the law requires it.

5. International transfers

Some providers process data outside the EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses with appropriate supplementary measures.

6. Retention

Account and research data are kept while your account is active and for 30 days after deletion, so accidental deletions can be recovered. Billing and tax records are retained for the period required by law (typically 8 years in Hungary). Usage logs are kept for up to 24 months. Data no longer needed is deleted or anonymised.

7. Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests; you may withdraw consent where processing relies on it. Write to support@methrica.com and we will respond within one month. You may also complain to your national supervisory authority (in Hungary, the NAIH).

8. Security

We use encryption in transit, encrypted storage, row-level access control so users can only reach their own projects, private file storage, and least-privilege access to production systems.

9. Cookies

Methrica uses only essential cookies and local storage needed to keep you signed in and to protect forms against cross-site request forgery. We do not use advertising or cross-site tracking cookies. If we introduce analytics, we will ask for consent first.

10. Changes

We will announce material changes to this notice in the application before they take effect.