Privacy policy

Who we are

Corroborum is operated by Founderproof, Inc., a Delaware corporation (“we”, “us”), 2810 N Church St STE 90880, Wilmington, DE 19802, United States. For any privacy question or request, email support@corroborum.com.

The short version

• We do not store the text of your queries.
• To answer a search, your query is sent to OpenAlex (the scholarly catalogue) and to Voyage AI (the relevance reranker). Those two services receive the query text.
• We never see your Claude conversations, only the tool calls Claude makes to us.
• We keep usage counts so we can apply your plan’s allowance and bill you.

What we collect

• Account: your sign-in identifier from our authentication provider, email address, name if you give one, and the sign-in method you used.
• Billing: your Stripe customer identifier, plan, subscription status and invoices. Card details are handled by Stripe and never reach our servers.
• Usage: per-day counts of calls per tool, errors, upstream cost and response time, and which kind of app (such as Claude, ChatGPT or Cursor) the calls came from, linked to your account.
• Use case: the optional answer you give about what you will mostly use Corroborum for. It is stored with your account and deleted with it.
• How you found us: when you arrive from a campaign link, an ad click or another website, we keep that source in a cookie on our own site for up to 30 days and save it once on your account when you sign up, so we know which channels work; it is deleted with your account, is not shared, and does not follow you across other sites.
• Technical logs: request identifier, your account identifier, tool name, status, response time and a short hash of the query, used to spot repeated requests. The hash is keyed with a random secret that is never stored and changes whenever the server restarts, so it cannot be checked against a guessed query. Logs are redacted of secrets and tokens.

What we do not collect

• The text of your queries is not logged or stored.
• Your Claude conversations. Claude sends us only the arguments of each tool call.
• Search results (the papers found, not your query) are kept for up to 30 minutes so that Claude can fetch the next page, are tied to your account, and are then deleted. Responses from the scholarly sources are cached in the server’s memory for up to 10 minutes and never written to disk.

Where retraction flags come from

Retraction flags on results come from OpenAlex’s data. We do not maintain our own list of retracted papers.

Service providers

We use these processors to run Corroborum:

• WorkOS: sign-in and account management.
• Stripe: payments, invoices and tax calculation.
• Neon: database hosting (accounts, subscriptions, usage counts).
• Cloudflare: hosting of the search server and this website, DNS, and forwarding of email sent to our support address.
• Fly.io: standby copy of the search server, used only if we switch back to it.
• OpenAlex: receives your query text to retrieve papers.
• Voyage AI: receives your query text and candidate paper text to rank results.

Why we use your data

To provide the service you signed up for (contract), to bill you (contract and legal obligation), and to prevent abuse and keep the service reliable (legitimate interest). We do not sell your data or use it for advertising.

How long we keep it

• Usage counts: deleted after 24 months.
• Technical logs: written to the log storage of our hosting provider (Cloudflare) and deleted on its retention schedule. We keep no archive of them ourselves.
• Deleted accounts: when you delete your account, your email address and name are erased from our database at once, your sign-in identity at WorkOS is deleted, any subscription is cancelled, and the access Claude had stops working. Signing in again later creates a new account. Usage counts stay, no longer linked to your email or name. For 30 days they stay linked to your Stripe customer record, for refunds and billing questions; then that link is removed. Stripe keeps its billing records, including the details on your invoices, as tax law requires. We keep a keyed one-way hash of your sign-in identifier and of your email address for 12 months after deletion, so that deleting an account cannot be used to get a new free allowance; after 12 months both hashes are erased.

Your rights

You can see and export your usage (CSV) from your dashboard, delete your account from Settings, and ask us to access, correct or delete your data by emailing support@corroborum.com. You may also complain to your local data protection authority.

International transfers

Our service providers process data in the United States and other countries. Where required, transfers rely on the providers’ standard contractual safeguards.

Children

Corroborum is not intended for anyone under 18.

Changes

We will post changes here and update the date above. For material changes we will email account holders before they take effect.