Skip to main content
RefPack
Sign inGet started free

Data and privacy

RefPack reads your files and stores your projects on your computer. Documents are sent to an AI provider only when you start an AI search, and only after you confirm.

On your computer

  • The desktop app reads your manuscript and reference PDFs, finds the cited statements and builds the pack.
  • Projects are stored in a RefPack folder in your home directory: your files, statements, decisions, notes and packs.
  • RefPack does not encrypt that folder. Turn on FileVault on a Mac or BitLocker on Windows to encrypt your disk.
  • Uninstalling the desktop app does not delete your projects.
  • The desktop app listens only on your own computer, and it accepts requests only after it has paired with your signed-in browser.

AI search is optional, and nothing is sent until you start one.

  • What is sent: the selected reference PDFs, the cited statements and the check instructions.
  • When: only after you start an AI search in Review and confirm what will be sent.
  • Where: with your own API key, straight from your computer to your provider (OpenAI or Azure OpenAI). With RefPack-funded searches, through RefPack's relay to the provider. The relay does not store your documents.
  • Files at the provider: with your own key, PDFs travel inside each request and no file is stored with the provider. With RefPack-funded searches, any file stored with the provider for a check expires within 24 hours and is deleted after the check.
  • Retention: the provider's retention policy applies.

Before anything is sent, RefPack shows what will go and where, and asks you to confirm. Set up AI search explains both routes.

On RefPack's servers

  • Your account: email address and name.
  • Projects: names, step status and counts. Not your documents.
  • Billing: plan and payment records, handled by Stripe.
  • Technical error reports, used to fix problems.

Sensitive content

Before you send documents to an AI provider, check your client agreements and regulatory obligations, and leave out patient-identifiable information. You can turn AI checks off for a project, or mark a single reference Do not send to AI.

More detail