Privacy Policy
Effective Date: March 28, 2026 | Last Updated: March 28, 2026
1. Who We Are
Oryn ("we," "us," or "our") provides an AI-powered screening and data extraction platform for systematic reviews and meta-analyses, accessible at useoryn.com (the "Service").
Privacy Contact: admin@useoryn.com
2. Information We Collect
We collect the following categories of information depending on how you interact with our Service:
Account and profile information — name, email address, password (managed by our authentication provider), and optionally your institutional affiliation, role, ORCID, and profile photo.
Research data — bibliographic metadata (titles, abstracts, authors, publication year, journal, DOI, language, publication type) imported from reference manager files you upload; full-text PDF documents you upload or that we retrieve from open-access repositories on your behalf; project names, descriptions, and screening criteria.
Screening and extraction data — your include, exclude, or maybe decisions; reviewer notes and exclusion reasons; AI-generated recommendations, confidence scores, and reasoning; and any corrections you make to AI outputs.
Payment information — billing details processed securely by our payment processor. We do not see or store your full card number.
Usage and analytics data — pages visited, features used, device type, browser, operating system, approximate geographic location (country level), and interaction patterns.
Communications — the content of emails or messages you send to us.
Cookies — see Section 8.
3. How We Use Your Information
- Provide and operate the Service (performance of a contract)
- Process research papers using AI models (performance of a contract)
- Improve the Service using aggregate usage patterns (legitimate interest)
- Send product updates and communications (consent)
- Process payments (performance of a contract)
- Ensure security and prevent abuse (legitimate interest)
- Analytics and product improvement (legitimate interest, subject to cookie consent)
- Comply with legal obligations (legal obligation)
Where we rely on legitimate interest, you have the right to object at any time (see Section 6).
4. AI Processing
When you use AI-powered features, the content of your research papers and your screening criteria are sent to third-party AI model providers for analysis. We do not send your name, email, account credentials, or payment information to AI providers.
Under our commercial agreements with these providers, your data is not used to train their AI models. Providers may temporarily retain data for a limited period for trust and safety purposes, after which it is deleted.
You choose whether to use AI-powered features or screen manually. You can override any AI recommendation and delete your project data at any time.
5. How We Share Your Information
We do not sell your personal information. We share your information only with the following categories of service providers, solely to the extent necessary to operate the Service:
- AI model providers — to process research papers for screening and extraction
- Cloud infrastructure and database providers — to host and store application data
- Authentication providers — to manage user accounts and login
- Payment processors — to handle billing and transactions
- Analytics providers — to understand usage and improve the Service
- Email and communication providers — to send transactional and product emails
We may also disclose your information if required by law, regulation, or legal process.
6. Your Rights
Depending on your location, you have the right to access, correct, delete, restrict processing of, or receive a portable copy of your personal data. You may also object to processing based on legitimate interest and withdraw consent at any time.
To exercise your rights, contact us at admin@useoryn.com. We will respond within 30 days.
If you believe we have not handled your data properly, you may lodge a complaint with your local data protection authority, including the UK Information Commissioner's Office (ico.org.uk).
7. International Data Transfers
Our service providers process data primarily in the United States. Where your data is transferred outside your jurisdiction, we rely on appropriate safeguards including standard contractual clauses and data processing agreements.
8. Cookies
We use essential cookies (such as authentication cookies) to operate the Service, and non-essential cookies (such as analytics cookies) to understand usage and improve the experience. We will ask for your consent before placing non-essential cookies.
9. Data Retention
We retain your information for as long as necessary to provide the Service. When you delete a project, all associated data is removed. When you delete your account, your personal data is deleted within 30 days. Payment records are retained as required by applicable tax and financial regulations.
10. Prohibited Data
Oryn processes published academic research papers only. You must not upload documents containing identifiable patient data or Protected Health Information. Oryn is not a medical device and is not intended for clinical decision-making.
11. Children's Privacy
Our Service is intended for professional researchers and is not directed at anyone under 18.
12. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will notify registered users by email at least 14 days before changes take effect.
13. Governing Law
This Privacy Policy is governed by the laws of England and Wales.
14. Contact Us
Oryn
Email: admin@useoryn.com
This Privacy Policy was last reviewed on March 28, 2026.