Privacy Policy

Who We Are

Fukurō is operated by CINELLI E TRINDADE TECNOLOGIA LTDA (trading as "HalTuring"), CNPJ 46.909.927/0001-40, Rua Comendador Torlogo Dauntre, 74, sala 1207, Cambuí, Campinas – SP, 13027-250, Brazil ("we", "us"). We are the controller of the personal data described in this policy. For privacy questions or to exercise your rights, write to privacy@fukuro.review.

Information We Collect

Account information: Your name, email address, and, if you provide it, your institutional affiliation. If you sign in with Google or through your institution's single sign-on, we receive your name and email address from that provider.

Manuscripts and related content: The files you upload (PDF, DOCX, DOC, TXT), the text extracted from them, reviewer comments you paste into a rebuttal, and the messages you send in review or rebuttal chat. This content may contain personal data about you and about other people — see "Content about other people" below.

Usage data: Which features you use, when reviews are requested, token counts and costs per request, and technical logs such as IP address and browser type. We use these for billing, security, and diagnosing faults.

Payment information: Billing name, address, tax identifiers, and transaction records. Card details are entered directly with Stripe, our payment processor, and never reach our servers.

Why We Process Your Data, and On What Basis

Under the LGPD (Brazil) and the GDPR (EU/EEA) we need a lawful basis for each purpose:

• Producing the reviews, rebuttal analyses, and comparisons you request — necessary to perform our contract with you.
• Billing, credits, invoicing, and tax records — contract performance and compliance with legal obligations.
• Account security, fraud prevention, abuse detection, and content safety screening — our legitimate interests and legal obligations.
• Diagnosing faults and analysing aggregate usage — our legitimate interests in keeping the service working.
• Optional marketing messages — your consent, which you can withdraw at any time.
• Sending your content to an AI provider that trains on it — your explicit consent, which we record and you can withdraw.

AI Providers and Other Recipients

We do not sell your data. To run the service we share it with the processors below, each contractually limited to processing it on our instructions:

Generating your review: Your manuscript text is sent to OpenAI (GPT-5.1) to produce the review. If that model is unavailable we fall back to Anthropic (Claude Sonnet). Where figure analysis is enabled for your manuscript, figures and images extracted from it are analysed by Anthropic. Neither provider trains on content submitted through their APIs.

Safety screening: Every manuscript and rebuttal is screened by OpenAI's moderation service before processing. This happens on every submission, including when a different provider generates the output.

Review and rebuttal chat: Chat runs on OpenAI by default. Chat context includes excerpts of your manuscript — not only the review report — and rebuttal chat can include several thousand characters of your paper. You may optionally choose a chat model from a provider that retains and trains on what it receives; those models are labelled in the selector and cannot be used until you give explicit consent.

Storage and document processing: Uploaded files are stored with Amazon Web Services (S3, US East region). Where optical character recognition is needed, page images may be processed by Amazon Textract. Document structure extraction runs on our own infrastructure.

Payments, email, and error monitoring: Stripe processes payments. Our email provider delivers transactional messages. Sentry receives application error reports; it is configured not to collect personal data, but diagnostic details from a failed request may incidentally include fragments of content.

International Transfers

We are based in Brazil. The providers above process data in the United States and, only if you explicitly opt in to one of the labelled chat models, in China. Neither country is covered by an EU adequacy decision. For transfers from the EU/EEA we rely on the European Commission's Standard Contractual Clauses with our processors. For the optional providers we rely on your explicit consent under Article 49(1)(a) GDPR, which we request only after telling you what is transmitted and that the provider may retain and train on it.

Use for AI Training

We do not use your manuscripts to train our own models. The providers that generate your reviews do not train on content submitted through their APIs. The only way your content can be used to train a third party's model is if you deliberately select one of the labelled optional chat models and consent; we record that consent and you can withdraw it at any time.

How Long We Keep Things

Uploaded files and extracted text: Deleted automatically within 3 days of the review or rebuttal being created. The countdown starts when you submit, not when the analysis finishes.

Manuscript comparisons: Deleted automatically after 30 days.

Reviews and chat history: The review report, its findings, and your chat messages stay in your account until you delete the review, the project, or your account. The report quotes short passages of your manuscript, so those quotations remain after the source file has been deleted.

Account and billing: Kept while your account is active. When you delete your account we cancel any active subscription and delete your account data immediately. Invoices and payment records are retained by us and by Stripe for the periods required by tax and accounting law.

Credits: Purchased credits expire one year after they are granted.

Cookies

By default: our marketing site sets no cookies, and our analytics (Umami) works without cookies.

Referral cookies: if you arrive through an affiliate referral link and consent, we set fukuro_ref (90 days), which records which affiliate referred you so they can be credited if you sign up, and fukuro_ref_consent (180 days), which remembers your choice. If you decline, we set only fukuro_ref_consent so we do not ask again.

Security

We protect your data with:

• TLS encryption for all data in transit between you, us, and our providers.
• Server-side encryption for files stored in Amazon S3.
• Two-factor authentication, including authenticator apps and passkeys.
• Access controls and audit logging of account activity.
• Automatic deletion of uploaded files and extracted text on the schedule above.

No system is perfectly secure. We do not offer end-to-end encryption: your content is decrypted on our servers because it has to be readable in order to be analysed and forwarded to the AI providers named above.

Your Rights

Under the LGPD and the GDPR you may:

• Confirm whether we process your data and obtain a copy of it.
• Correct incomplete or inaccurate data.
• Request deletion of your account and associated data.
• Receive your data in a portable format.
• Object to processing based on our legitimate interests.
• Withdraw consent at any time — including consent for the optional AI providers — without affecting processing already carried out.
• Ask how our automated analyses are produced and request human review of a decision that significantly affects you.
• Complain to Brazil's ANPD or, in the EU/EEA, to your local supervisory authority.

You can delete your account from your account settings. To exercise any other right, write to privacy@fukuro.review. We reply within 15 days as required by the LGPD, and within one month under the GDPR.

Content About Other People

Manuscripts often contain personal data about people other than you — co-authors, and in some research, participants. You are responsible for ensuring you may lawfully share that content with us and with the providers named above, including under any confidentiality obligations you owe to a journal, employer, or ethics committee. Do not upload a manuscript that you are peer-reviewing for someone else under confidentiality.

Age

Fukurō is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a minor has given us personal data, write to privacy@fukuro.review and we will delete it.

Changes to This Policy

We update this policy as the service changes. When a change materially affects how we handle your data we will tell you by email or in the app before it takes effect. The date at the top of this page shows the current version.

Get in touch

Privacy questions and rights requests: privacy@fukuro.review

Data protection officer (encarregado, LGPD art. 41): Mauricio Andre Cinelli — mauricio@halturing.com

Postal address: Rua Comendador Torlogo Dauntre, 74, sala 1207, Cambuí, Campinas – SP, 13027-250, Brazil