Your Research Data Privacy: Our Highest Priority

Our data collection is purposefully limited to what is essential for delivering, maintaining, and improving the robust functionality of Quill & Key Systems. We categorize the data we collect to ensure clarity and purpose, always putting your privacy first:

• Platform Functionality Data: Information necessary for account management, service access, and core feature operation (e.g., login credentials, subscription details).
• Research Content: Your intellectual property, such as research documents, notes, and citations. We implement a zero-knowledge architecture, meaning we cannot access the content of your research. You retain full ownership and control, with granular permissions for sharing.
• Technical & Performance Data: Non-personal data collected for system optimization, security monitoring, and bug resolution (e.g., device information, error logs).
• Aggregated Usage Analytics: Anonymized and aggregated data on how features are used to inform product development and enhance user experience. This data cannot be traced back to individual users.
• Optional Data: Certain features may offer optional data collection (e.g., feedback surveys). These always come with clear opt-in and opt-out mechanisms.

Our commitment to data protection is underpinned by robust security architecture and rigorous operational protocols. We employ a multi-layered defense strategy to shield your information from unauthorized access, disclosure, alteration, and destruction:

• Advanced Encryption: All data, both at rest and in transit, is protected using industry-standard AES-256 encryption. This includes your documents, research notes, and personal credentials.
• Strict Access Controls: We employ role-based access controls (RBAC) and multi-factor authentication (MFA) to ensure that only authorized personnel can access sensitive systems, with privileges granted on a need-to-know basis.
• Continuous Monitoring & Incident Response: Our systems are monitored 24/7 for suspicious activities. We have a dedicated incident response team equipped to rapidly detect, contain, and remediate any potential security events.
• Regular Audits & Penetration Testing: We engage independent third-party experts to conduct regular security audits and penetration tests, identifying and resolving vulnerabilities proactively.
• Employee Training & Protocols: All Quill & Key employees undergo mandatory, recurring security and privacy training. Strict internal policies govern data handling and access.

Quill & Key Systems primarily processes data directly. When third-party services are integrated to enhance functionality or provide essential infrastructure, we apply the strictest standards to protect your data:

• Limited Integrations: We only integrate with third-party service providers essential for platform operation or services you explicitly enable. Data sharing is limited to the minimum necessary.
• Rigorous Vendor Agreements: All our vendors and processors are contractually bound by stringent privacy protection agreements and undergo thorough security vetting.
• User Consent for Optional Sharing: Features involving optional data sharing with third parties (e.g., specific analytics or external integrations) require your explicit consent and offer clear opt-out mechanisms.
• Legal Requirements: We may disclose information if legally compelled to do so, such as in response to a court order or valid governmental request. We strive to notify users of such requests when legally permissible.
• Integration Privacy Controls: Our platform provides granular controls allowing you to manage permissions for integrated services and decide which data, if any, is shared.