Privacy Policy | GAAbstract | AI Graphical Abstract Maker

Introduction

Welcome to GAAbstract. This Privacy Policy explains how we collect, use, store, and protect your information when you visit https://gaabstract.com and use our AI‑powered graphical abstract maker and related services (collectively, the "Services").

Protecting your privacy and personal data is important to us. We process your information in accordance with applicable data protection laws and this Policy.

By using the Services, you agree to the practices described in this Policy. If you do not agree, please stop using the Services.

Information We Collect

Depending on how you interact with the Services, we may collect the following categories of information.

Account and Contact Information

Account details: Name, email address, and authentication information when you register or sign in (including via third‑party providers).
Profile information: Optional details you choose to add to your profile.
Support communications: Information you provide when you contact us for help, feedback, or inquiries.

Usage and Graphical Abstract Data

Service usage: Information about how you use the Services, such as generated graphical abstracts, prompts, layouts, exports, and feature usage.
Content you submit: Text, figures, diagrams, and files you upload or paste into the Service, including paper abstracts and other research materials.
Generation metadata: Model settings, timestamps, processing duration, and technical logs related to your generations.

Device and Technical Information

Device data: IP address, browser type and version, operating system, device identifiers, language, and similar technical information.
Log data: Access times, pages viewed, referrer URLs, error logs, and performance data.
Cookies and similar technologies: Information collected via cookies, local storage, and similar tools for authentication, preferences, and analytics. For more details, please refer to our Cookie Policy.

Payment and Billing Information

When you purchase a paid plan or credits, our payment processors collect billing details such as your name, billing address, and payment method information.

We do not store complete payment card numbers on our own systems. We only receive limited information necessary to confirm payment status (e.g., last digits of the card, expiration date, and transaction IDs).

How We Use Your Information

We use the information we collect for the following purposes:

Providing and Maintaining the Services

To create and manage your Account.
To provide AI graphical abstract generation, editing, storage, and export features.
To process your prompts, inputs, and uploaded content in order to generate outputs.
To process payments, manage subscriptions and credits, and provide invoices or receipts.

Improving the Services

To understand how users interact with the Services and identify improvement areas.
To monitor performance, reliability, and quality of our models and infrastructure.
To develop new features, templates, and workflows for graphical abstract creation.
Where allowed by law and your settings, to use aggregated or de‑identified data for analytics and model improvements.

Communication

To respond to your questions, support requests, and feedback.
To send you important service‑related notifications, such as security alerts, policy updates, or changes to your account or plan.
With your consent, to send newsletters, product updates, or promotional messages. You can opt out of marketing communications at any time by following the unsubscribe instructions in the emails.

Security, Compliance, and Enforcement

To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activities.
To enforce our Terms of Service and other agreements.
To comply with applicable laws, regulations, legal processes, and law‑enforcement requests.

Legal Bases for Processing (If Applicable)

Where data protection laws require us to identify a legal basis for processing your personal data, we rely on one or more of the following:

Contract: Processing is necessary to provide the Services and fulfill our agreement with you.
Legitimate interests: To maintain and improve the Services, ensure security, and communicate with you about the Services.
Consent: For certain optional activities, such as sending marketing communications or using cookies where required by law.
Legal obligations: To comply with applicable laws and regulations.

Cookies and Similar Technologies

We use cookies and similar technologies to:

Keep you signed in and maintain session security.
Remember your language, theme, and other preferences.
Understand how visitors use the website and which features are most helpful.

You can control cookies through your browser settings and, where available, through our cookie banner or preference center. Some cookies are essential for the basic operation of the Services; disabling them may affect functionality.

For more information, please see our Cookie Policy.

We do not sell your personal information. We may share your information with:

Service Providers

We work with trusted third‑party providers who help us operate the Services, including:

Cloud infrastructure and storage providers.
Payment processors.
Email and communication service providers.
Analytics and monitoring tools.
AI model and processing providers.

These providers only receive the information necessary to perform their services on our behalf and are required to protect your information and use it only for the specified purposes.

Legal and Safety

We may disclose information if we believe in good faith that doing so is reasonably necessary to:

Comply with applicable law, regulation, legal process, or governmental request.
Protect the rights, property, or safety of GAAbstract, our users, or the public.
Detect, prevent, or address fraud, security, or technical issues.

Business Transfers

If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will take reasonable steps to notify you (for example, via email or a notice on our website) if your information becomes subject to a different privacy policy.

Data Retention

We retain your information only for as long as necessary to fulfill the purposes described in this Policy or as required by law, including:

Account data: Retained while your Account is active and for a reasonable period after closure, for backup, audit, and legal purposes.
Graphical abstracts and content: Retained according to your account settings, plan limits, and deletion requests.
Usage and analytics data: Retained for a limited period to help us understand trends and improve the Services.
Legal and transactional records: Retained as required by applicable laws and regulations.

If you request deletion of your Account, we will delete or anonymize your personal data, unless we are legally required or permitted to keep certain information.

Data Security

We implement reasonable technical and organizational measures designed to protect your information against unauthorized access, loss, misuse, or alteration, including:

Encryption in transit (e.g., TLS) and at rest where appropriate.
Access controls and authentication mechanisms for internal systems.
Monitoring for suspicious activity and security incidents.
Regular updates and maintenance of our infrastructure and software.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

If we become aware of a data breach that affects your personal information, we will take appropriate steps to investigate and, where required by law, notify you and relevant authorities.

International Data Transfers

Depending on your location and the services we use, your information may be processed and stored in countries outside your country of residence. These countries may have different data protection laws than your country.

When we transfer personal data across borders, we take appropriate safeguards to protect it in accordance with applicable laws, such as using standard contractual clauses or relying on other lawful transfer mechanisms.

Your Rights and Choices

Depending on your jurisdiction and applicable laws, you may have some or all of the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate or incomplete information.
Deletion: Request that we delete your personal data, subject to legal exceptions.
Restriction: Request that we limit certain types of processing.
Objection: Object to certain processing activities based on our legitimate interests.
Portability: Request a copy of your data in a structured, commonly used, machine‑readable format where technically feasible.
Withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.

You can exercise many of these rights within your account settings. You may also contact us at support@gaabstract.com to submit a request. We may need to verify your identity before responding.

You also have the right to lodge a complaint with your local data protection authority if you believe our processing of your personal data violates applicable law.

Children's Privacy

The Services are not directed to children under the age at which they can provide valid consent to data processing in their jurisdiction. We do not knowingly collect personal information from such children.

If you believe that a child has provided us with personal information without appropriate consent, please contact us at support@gaabstract.com, and we will take steps to delete the information as required by law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or data practices. When we do, we will update the "date" in the frontmatter of this page or provide notice through the Services (for example, via email or an in‑app message).

Your continued use of the Services after the updated Policy becomes effective means you accept the changes. If you do not agree with the updated Policy, you should stop using the Services.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@gaabstract.com
Website: https://gaabstract.com