Privacy Policy

WINSOR UK LIMITED ("we", "us") operates the RevSphere platform. This policy explains what personal data we process, why, and the rights you have under the UK GDPR and EU GDPR. We are the data controller. For any privacy request, contact support@revsphere.uk.

What we collect

Account data: your name and email address, and a securely hashed password (we never store passwords in readable form). If you sign in with Google or ORCID, we receive your basic profile and identifier from that provider. Research data: the projects, references, screening decisions, extracted data and analyses you create. Technical data: minimal server logs needed to operate and secure the service.

How we use it

We use your data solely to provide the platform: to authenticate you, store and sync your projects, enable collaboration you initiate, and keep the service secure. We do not sell your data, we do not use it to train third-party AI models, and we do not serve advertising.

Legal bases

We process account and research data to perform our contract with you (providing the service), and security and logging data on the basis of our legitimate interest in operating a safe platform.

Storage and security

Data is stored on secure cloud infrastructure with encryption in transit (TLS) and at rest. Sensitive fields such as authentication tokens are additionally encrypted. UK and EU customer data is hosted in the UK/EU region. Access is restricted by role-based permissions and logged.

Sharing

We share data only with the sub-processors needed to run the service (cloud hosting, and, if you enable them, email delivery and sign-in providers). We do not share your research data with anyone else. If you invite collaborators to a project, they can see that project's contents.

Your rights

You have the right to access, correct, export, or delete your personal data, to restrict or object to processing, and to withdraw consent. You can delete your projects at any time, and request full account deletion by emailing support@revsphere.uk. You may also complain to the UK Information Commissioner's Office (ICO).

Retention

We keep your data while your account is active. When you delete a project or your account, the associated data is removed from live systems; encrypted backups are rotated on a rolling schedule.

Contact

WINSOR UK LIMITED, United Kingdom. Email: support@revsphere.uk.