Privacy
Effective November 3, 2026. Wikivec Inc. operates My Paper Library.
What we store
Your sign-in details (email, and your name if you use Google); the Zotero API key you approved or pasted, encrypted with AES-256-GCM; your Zotero user id and user name; and how many requests, PDF reads and changes you made this month. That's all we keep.
What we read from your library, and when
Only what a tool needs when Claude calls it for you: the items a search returns, the item or PDF you asked about, the items you asked to cite, change or check. That data goes back to Claude in the tool's answer. PDFs and their text aren't stored. We don't index, copy, sell or share your library, and we don't use it to train AI models.
How long we keep it
The key and user name until you disconnect or delete your account. Usage counts for about 40 days. Server logs record which tool ran, whether it worked and how long it took, without your queries or titles, and are kept for a few days by our host.
Who processes it
- Zotero (Corporation for Digital Scholarship): holding your library; we read and change it through the Zotero Web API when you ask. Data: your requests to your own library, made with your key.
- Clerk: signing you in on the website, or when you connect the service to your assistant. Data: email address, name if you sign in with Google, sign-in records.
- Vercel: hosting the website and the connector, and counting page visits. Data: IP address and request logs; page-visit statistics without cookies or a persistent identifier.
- Upstash: storing your encrypted Zotero key and monthly usage counts. Data: your account id, the encrypted key, your Zotero user name and counts; nothing from your library.
- Crossref, DataCite, arXiv, NCBI PubMed, Open Library: looking up metadata when you add an item, and retraction status during a library check. Data: the identifiers (DOIs, ids, ISBNs) and titles being looked up, never who you are.
- Stripe: taking payment for Pro and managing the subscription. Data: email, payment details and billing country; card details go to Stripe, never to us.
Your choices
Disconnect on the Connect page: we delete the key, and revoke it with Zotero if our sign-in created it. You can also revoke it yourself at any time in your Zotero account settings. To delete your account and data, email privacy@wikivec.com. The service is for people aged 18 and over.
Contact
Wikivec Inc., 1111B S Governors Ave STE 7867, Dover, DE 19904, United States.