Privacy and data

Your account, chats, projects, Studio outputs, documents and literature reviews are stored on RBAi’s servers, so they follow you from one device to another. So are your messages in Connect, your requests, and the people you share a document with. Section 5 of the Privacy Policy explains how messages, requests and shared documents are handled.

Only what you publish is public: your public page shows what your site’s design shows and the items you publish, never your email. A result you send to a member opens only for the two of you. Website

Nothing in Settings → Profile is public unless you publish your website. Each field reaches only these:

With Use memory off in Settings → Memory, nothing about you is sent with a chat. Memory

Getting started

A welcome when you verify your email, and two short tips in your first week.

Weekly paper digest

Off unless you turn it on, at sign-up or in Settings → Email. On Monday mornings (India time), up to 8 new papers close in meaning to the research interests in your profile and the papers in your projects. Each paper says what it is close to and has Add to a project. A week with nothing close sends nothing.

Message notifications

One email when a message in Connect stays unread for 10 minutes. Connect

Turn each off in Settings → Email, or with the one-click link at the bottom of every email, which works without signing in. RBAi does not track whether you open these emails or click their links.

To produce an answer, a request’s text (your message, its context and the tool results) is sent to the AI model RBAi uses for that part of the app. RBAi uses AI models hosted on Microsoft Azure, and we change them as better ones come out. The search of a review’s chat uses an embedding model and a reranker on Azure AI Foundry as well.

A visual summary, and a picture the presentation AI adds to a slide, is drawn by an image model on Azure AI Foundry, and a visual summary’s drawing is reviewed by an AI model on Microsoft Azure. A review’s figure images are fetched from the PMC Cloud Service and read in memory; no copy is kept. When you name a site for the site designer to follow, RBAi’s server reads that address, and the AI gets only its headings, colours and fonts. Images you attach in the designer’s chat bar go to the AI with your request.

Tool calls send their inputs, such as a gene name, a sequence or a search query, to the database they query. That might be UniProt or NCBI BLAST, for example.

Code runs in E2B cloud sandboxes, in a sandbox of your own and never on your computer. Galaxy jobs run on the Galaxy server you choose, under your own account there, and your Galaxy API keys are stored encrypted.

Settings → Data & privacy has three actions:

• Export: this browser’s copy of your workspace and all your conversations in Connect, with the results and reviews you sent to members or received, and your Connect requests, listed services and the emails you kept, as a JSON file;
• Import: replace this browser’s copy with an export file;
• Delete all data.

Delete all data permanently deletes everything you made in RBAi, on RBAi’s servers and in this browser: projects, chats, memories, cloud computers with everything on them, literature reviews, Report Writer pages, visual summaries, files, skills, tool jobs, notifications, experiment logs and the emails you kept in Connect from your own email app. The items you published are removed from your public page.

These stay: your account, profile, settings and API keys; your public page, with its design and domain; your messages with other people, the emails RBAi sent for you and the pages others shared with you, which are theirs too; and your plan, payments and usage records, which billing needs. If some files cannot be removed at that moment, the page says so, and running Delete all data again removes them. A cloud computer that is slow to shut down is removed within an hour, and the page says how many are left until they are gone.

Backups are kept for 7 days and then deleted automatically.

Settings → Account & security → Delete account deletes your account and everything in it, your public page and your messages with other people included. It asks for your password, or a Google sign-in if your account has no password, and for your email. A paid plan is cancelled first; the rest of its period is not refunded, and the Cancellation and Refund Policy still covers a payment from the last 5 days. Payment records (amounts, dates and payment references) are kept for tax purposes, without your name or email. An admin account is deleted by another admin.

Withdraw page, in Settings → Website, takes your public site down at once: the page, its design and its domain. Unpublish removes one published item instead, and Delete all data removes all your published items but keeps the page with its design and domain. The first Publish after a withdrawal asks you again to confirm what becomes public. Unpublish and delete

Payments are processed by Razorpay, by UPI AutoPay or card.

The binding terms are in the Privacy Policy, the Terms and Conditions, the Cancellation and Refund Policy, the Shipping and Delivery Policy and the Disclaimer. The Disclaimer covers the limits of AI-generated research output.