Privacy Policy

Last updated: September 9, 2026

Plain-language summary: We store your account info, chats, and uploaded files to run the Service. We send chat content (including files) to a third-party large language model provider to generate responses, use a third-party payment processor for billing, and a third-party email provider to send account emails. We don't sell your data or use it for advertising.

1. Who this applies to

This Privacy Policy explains how Reaction AI ("we", "us") collects, uses, and protects information when you use our website and application (the "Service"), reachable at reaction-ai.xyz. Contact: info@reaction-ai.xyz.

2. Information we collect

2.1 Account information

Username, email address, and a securely hashed password (we never store your plain-text password).
Email verification status and, if applicable, who referred you to the Service.
If you choose to provide them: an IBAN and phone number, used solely to pay out referral bonuses you've earned. This information is only visible to admins processing payouts, never shared with other users or third parties, and is optional — only needed if you want to receive a referral payout.

2.2 Content you provide

Chat messages, and any images, PDFs, audio, or video files you upload (up to 15MB per file).
Queries sent to the material discovery tool — which uses an overlay thinking (reasoning) model layered on top of our large language model to generate candidate compounds — and its outputs, which are stored as part of your chat history.

2.3 Billing information

Subscription status and billing history. Full payment card details are handled directly by our third-party payment processor — we do not receive or store your full card number.

2.4 Technical information

A single session cookie used to keep you signed in and to enforce one active session per account. This is strictly necessary for the Service to function — we do not use advertising or tracking cookies.
Standard server logs (IP address, timestamp, requested page) kept for security and abuse prevention.

3. How we use your information

To operate your account, chat history, and file attachments.
To generate AI responses, including sending your messages and files to a third-party large language model provider for processing (see Section 4).
To run the material discovery tool — including its overlay thinking model layer — and enforce free-tier / subscription usage limits.
To process payments and manage subscriptions via our payment processor.
To send account-related emails (activation links) via our email provider.
To detect abuse, enforce rate limits, and maintain security (e.g. single-session enforcement).
To track referral relationships for the referral program.

We do not use your content to serve you advertising, and we do not sell your personal information.

4. Third parties we share data with

Type of provider	Purpose	What they receive
Large language model provider	AI chat & discovery-tool responses	Your messages and uploaded files, sent for processing on each request
Payment processor	Payment processing & subscription billing	Billing details necessary to process payment
Email delivery provider	Sending activation emails	Your email address and the email content we send

These providers process data as independent data processors/controllers under their own privacy terms. We only share what's necessary for them to perform their function. We do not permit them to use your data for their own independent marketing purposes. We may change providers from time to time without updating this policy for each change, provided the category and purpose of processing stays the same.

5. International data transfers

Because our service providers operate internationally, your data may be processed in countries outside your country of residence, and outside Saudi Arabia where our primary operations are based. By using the Service, you consent to this transfer, which is necessary to provide the Service to you.

6. Data retention

Account and chat data are retained for as long as your account is active.
If you delete your account (contact us to request this), we will delete your personal data and chat history within a reasonable period, except where we are required to retain records (e.g. billing records for tax/legal compliance, or referral ledger entries already paid out).
Server logs are retained for a limited period for security purposes and then purged.

7. Your rights

Depending on your location, you may have the right to:

Access the personal data we hold about you;
Request correction of inaccurate data;
Request deletion of your account and associated data;
Object to or restrict certain processing.

To exercise any of these rights, contact info@reaction-ai.xyz. We will respond within a reasonable timeframe.

8. Security

Passwords are stored using salted cryptographic hashing, never in plain text.
All traffic to the Service is encrypted in transit via HTTPS/TLS.
We enforce a single active session per account to reduce the impact of credential sharing or theft.
No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

The Service is restricted to users 18 years of age or older (see our Terms). We do not knowingly collect data from anyone under 18. If we learn we have done so, we will delete that account.

10. Cookies

We use one strictly necessary session cookie to keep you signed in. We do not use third-party advertising, analytics, or tracking cookies.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do, and for material changes we will make reasonable efforts to notify active users.

12. Contact

Questions or requests regarding this policy: info@reaction-ai.xyz