Privacy policy

Who handles your information

This notice covers information handled by ChemAI Atlas when you browse the site, create an account, submit a resource or contact us. It does not cover linked third-party tools. We use information to operate the service, maintain content, respond to enquiries and protect accounts and infrastructure.

Account and profile information

We store your email, display name, preferred account language, account status and relevant security records. Local passwords are stored as hashes rather than readable passwords. An optional avatar is stored for profile display; avoid uploading a confidential image. Google sign-in, when enabled and used, provides an external account identifier, email, email-verification status and name to authenticate or link your account.

Resource submissions and editorial work

A submission includes its URL, optional type and note, submitting account, timestamps and review status. Administrators use it to assess additions, duplicates and corrections. Your account email is not published as part of a submission. Accepted resource facts or useful corrections may be incorporated into public content. Do not submit personal information, credentials, unpublished research or material you have no right to share.

Transactional email and contact messages

In production, account verification, password recovery and security messages are sent through Resend. Delivery requires the recipient address and message content, including a temporary action link where applicable. Account emails follow the account’s saved language. Messages you send to support are used to investigate and answer your request; include only necessary information.

Cookies and browser preferences

Cookies support sign-in, anti-forgery protection and authentication flows. Browser storage also holds display preferences such as theme. Disabling necessary cookies may prevent sign-in or form submission. Preferences apply to the current browser and may be lost when you clear site data or switch devices.

Aggregate usage statistics

We count events such as resource views, searches, filter use and clicks to improve discovery. The statistics store date, event, resource, language and source category, not raw search terms, full URLs, account identifiers or persistent visitor identifiers. These are event counts, not unique-visitor counts. Aggregated counts cannot be attributed to you for individual removal. This describes the usage-statistics dataset, rather than all operational logs.

Security and operational records

To protect the service, we process authentication challenges, token-use records, email-queue state and audit records. Submission rate limits use keyed hashes of account or daily IP-related values. Network and server logs may contain IP addresses, request paths and technical error details; these operational records are distinct from aggregate usage statistics. Access is limited according to operational responsibilities.

Service providers and external links

Hosting, network protection, email delivery and optional Google authentication involve external providers. Editorial AI features may send resource descriptions, source excerpts or article briefs to a configured AI provider for drafting or translation. Public resource submission itself does not invoke AI. Visiting an external resource is subject to that provider’s privacy policy. Information may be processed outside Japan; contact us for details about a particular provider or transfer.

Retention and deletion

The scheduled cleanup policy removes processed submissions after 90 days from processing, pending submissions after 180 days from submission, submission rate-limit buckets older than 7 days, and daily usage aggregates older than 13 months. Cleanup depends on the scheduled worker running successfully; it is not an immediate-deletion guarantee.

Account data is kept while needed to provide the account and handle security or legal obligations. Support correspondence, operational logs and backups have separate operational retention requirements. Contact us for the applicable period and deletion scope. A deletion from the live service does not immediately erase every backup copy.

Your requests and policy changes

You can edit your display name and avatar in account settings. For access, correction, deletion, account closure or concerns about data use, email the team. We may ask for proportionate identity verification and will explain the handling of your request under applicable law. Please do not send a password or identity document in the initial email. Material changes to this notice will be published here with an updated date.

Support and enquiries

Operated by the ChemAI Atlas team, based in Japan.

[email protected]