Privacy Policy

1. Controller and contact

Goyo Drive operates Scholar Monster and controls the personal information described here. For access, correction, deletion, or other privacy requests, email support@scholarmonster.com.

2. Information we process

Account information includes your name, email address, verification status, hashed password for email accounts, and the Google identity information needed for Google sign-in. Authentication records include sessions, expiry dates, and security information such as IP addresses and browser details. Google account credentials used for sign-in are protected on the server.

Project information includes manuscripts, uploaded files, reference libraries, comments, invitations, member roles, compile output, saved versions, and the authors attached to changes. We store the document versions you save and aggregate edit-provenance evidence, such as the web or MCP source, update counts, largest update size, elapsed editing time, and any AI-assistance declaration. We do not record a separate keystroke stream for edit labeling.

Writing-style examples are optional. When you explicitly enable them for a project, we retain selected original and revised manuscript passages with their author and version references. Authorized members and MCP tools can request them for that project’s writing style. We do not pool these private examples into a global model-training dataset. You can turn this off and delete your stored examples.

Consent records contain the versions of the documents you accepted, your account identifier, the time, and the acceptance path. Security controls use request limits and account status. Product activity records describe actions and resource usage without storing manuscript text as analytics events.

3. Why we use it

We use this information to create and secure your account, send verification and password-reset or account-deletion codes, notify the operator of new accounts, provide collaboration and authorized MCP access, compile papers, preserve versions, enforce access controls, and respond to support requests. Your name and email are included in the new-account notice sent to the operator. The administrator can view account details and suspend or restore accounts.

Required account information and agreement are needed to provide the service. If you do not agree, you cannot use the private product. We do not bundle marketing permission with registration.

4. Providers and sharing

The service runs on AWS infrastructure in the Seoul region. Google Workspace provides outgoing email, and Google provides Google sign-in when you choose it. These providers process the information necessary for their functions under their own infrastructure and service terms; Google services may process information internationally.

Project members see the content and identity information their role permits. External AI tools receive only the information allowed by the MCP token you authorize. Your use of those tools is also subject to the tool provider’s privacy practices. We do not sell your personal information. We may disclose information if legally required or necessary to protect the service and users.

5. Storage and deletion

We keep account information while the account is active. Deleting an account removes sign-in credentials and sessions, revokes tokens, removes memberships and the private reference library, and replaces the profile with a deleted-user record. Existing shared project contributions and immutable Git author details remain part of collaborative history. Sole-owned projects become inaccessible; stored file objects and backups may persist until maintenance removes them.

Consent records and limited security or activity records may be retained where needed to establish agreement, investigate abuse, or comply with law. Contact support@scholarmonster.com to request erasure of remaining personal information; we will explain any information that must remain and the reason.

6. Cookies and security

We use essential cookies for sign-in sessions, OAuth security, and administrator access. The interface stores your light or dark theme preference in your browser. Private pages are excluded from search indexing. We use HTTPS, access controls, password hashing, expiring verification codes, scoped MCP tokens, and session revocation. No online service can guarantee absolute security.

7. Your choices and rights

You can revoke MCP tokens, sign out other sessions, change or reset a password, export projects, leave collaborations, and delete your account. For personal-data access, correction, restriction, objection, or deletion requests, contact support@scholarmonster.com. Rights and exceptions depend on applicable law.

Do not upload unnecessary sensitive personal information about yourself or others. If you believe a child or unauthorized person has provided personal information, contact us so that we can review and remove it as appropriate.

8. Policy updates

The effective date and version appear at the top of this policy. Material updates require renewed acceptance before continued product access. We will keep the accepted version and time in your consent record.