Privacy

Who we are

Tasman Intelligence Lab Limited, Tāmaki Makaurau Auckland. Our privacy officer is Dr Reju Sam John, r.s.john@tasmanlab.com.

Visiting this website

We use Cloudflare Web Analytics to count visits. It does not use cookies or track you across other sites; it records things like which page was viewed, the referring site and the country, in aggregate. Cloudflare also processes basic connection data (such as IP addresses) to deliver and protect the site.

Using the demo

Questions you type into the demo are sent to our service on Cloudflare, which looks up relevant passages and asks a language model to write the answer: Anthropic’s Claude, with models hosted by Groq and Cloudflare as back-ups. Questions and answers are logged so we can monitor quality and fix faults, and those logs are deleted within 90 days. Please don’t type personal information into the demo.

Emailing us

If you email us, we keep your message and contact details to reply and, if you become a customer, to run your account. Our email is hosted by Zoho in Australia.

Starting with Ask My Papers

If you use the form to start with Ask My Papers, we collect your name, email address, institution or organisation, a rough count of your papers, any links you add, and your country (worked out from your connection; we don’t keep your IP address). We use this only to reply to you and, if you go ahead, to set up your account. When you send a request, we email you a confirmation, and we may send you one follow-up if we haven’t heard back. The confirmation includes your private upload link. It is stored on Cloudflare’s infrastructure and emailed to Reju, and nobody else sees it. The form uses Cloudflare Turnstile to check that it’s being filled in by a person rather than automated software, which involves Cloudflare processing basic browser and connection data. If you don’t become a customer, we delete your request, including the copy emailed to Reju, within 12 months.

Sending your papers

Your upload link is private and expires after 14 days. Your files are encrypted in your browser before they are uploaded, so our storage holds only encrypted data, and the file names are encrypted too. They are decrypted only on our own computer to prepare your assistant. The encrypted copy is deleted from storage when we take the files in, or after 30 days if we never do, and the PDFs themselves are deleted once your assistant is published. Unfinished uploads are deleted after 24 hours.

Papers you add yourself

When you sign up at papers.tasmanlab.com/start, we store the name and one-line description shown on your assistant, and your email address, which we use for receipts and notices and never show. If you sign in with ORCID, we also store your ORCID iD, shown on your assistant as “Verified with ORCID”. These details are also sent to our team in a daily summary so we can review new assistants.

The papers you add are sent over HTTPS and processed on Cloudflare’s network to build your assistant. They are not end-to-end encrypted. The PDF itself is deleted once it has been read precisely, usually within minutes. If a paper is read as plain text (always on the free plan, and on a trial when precise reading fails), we keep its PDF until it can be read precisely, and delete it with the paper. Papers fetched from arXiv or an open-access copy are not kept. Encrypted upload remains available on paid plans.

If you sign in with ORCID, ORCID shares your name, ORCID iD and your public works list with us. We use the works list only to let you pick papers during sign-up and delete it within a day. We never receive or keep your ORCID password, and we don’t keep ORCID’s sign-in token.

To limit abuse we count sign-ups per network address for two days, storing only a one-way keyed hash of the address.

Private library

Papers you add to your private library are visible only to you when you’re signed in. They are never shown to visitors, never searched for anyone else and never used to train models. When you ask a question, the question and the passages needed to answer it are sent to Anthropic, or to our back-up providers Groq and Cloudflare, under their API terms. We don’t keep these questions in our own logs, and answers aren’t stored. Your PDFs are stored encrypted and deleted within 24 hours of you removing them.

Customers’ documents

• Documents you give us are used only to provide your assistant. They are not used to train our models or anyone else’s.
• We delete the PDFs you send once they have been processed. Only the extracted text passages and the search index are kept, on Cloudflare’s infrastructure, and your assistant is served from papers.tasmanlab.com and, when embedded, from embed.tasmanlab.com. To answer a question, the question and a few relevant passages are sent to Anthropic in the United States, or, if it is unavailable, to Groq in the United States or to Cloudflare.
• If your documents contain personal information, tell us before we index them so we can agree how to handle it. Institution plans can run inside your own cloud account.
• A trial or preview runs for 14 days. If you don’t subscribe, the assistant moves to Free: 3 papers stay, and the rest are hidden, then deleted 30 days later.
• When a paid plan ends, the assistant moves to Free at the end of the period you paid for: 3 papers stay, and the rest are hidden, then deleted 30 days later.

Researchers can embed their assistant on their own websites. Embedded assistants set no cookies and don’t track visitors. We keep daily counts of which sites questions come from (the site’s address only) and of visits from badges, QR codes and email signatures, for 90 days, to keep the service reliable. During unusual traffic, an embedded assistant may use Cloudflare Turnstile to check for automated use.

Payments

Payments are processed by Stripe (Stripe Payments Europe Ltd and Stripe, Inc.). You enter your card details on Stripe’s own page; we never see or store them. We keep your Stripe customer and subscription identifiers, your plan and your payment status, and after you leave we keep that billing record for seven years, as New Zealand tax law requires. See Stripe’s privacy policy.

Information sent overseas

Cloudflare operates globally, Anthropic, Groq and Stripe are based in the United States (Stripe also in Ireland), and our email is hosted by Zoho in Australia. These providers may not be subject to privacy laws that give the same protection as the New Zealand Privacy Act. We choose providers that commit contractually to protect the information and not to use it for their own purposes.

Your rights

You can ask to see or correct personal information we hold about you by emailing our privacy officer. If you’re not happy with our response, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.