"Abstract", "we", "our" or "us" refers to Uppsala universitet Projekt AB, Dag Hammarskjölds väg 7, 752 37 Uppsala, Sweden. We are the data controller for personal data processed through the Abstract platform (https://myabstract.co).
This Policy describes how we collect, use, disclose and protect the personal data of:
| Category | Examples | Source | Legal basis* (GDPR) |
|---|---|---|---|
| Account & Identity | Name, e-mail, affiliation, ORCID | User signup | Art 6(1)(b) |
| Profile & Publications | Open-access papers, keywords | Automated fetch & upload | Art 6(1)(b); Art 6(1)(f) |
| Usage & Logs | IP address, device info, pages visited, session ID | Automatic | Art 6(1)(f) |
| Chat Content | Messages, thread IDs, embeddings | Automatic | Art 6(1)(b) |
| Payment | Stripe customer ID, card last-4, status | Stripe | Art 6(1)(b); Art 6(1)(c) |
| Cookies | sid session; analytics cookies* | Browser | Art 6(1)(f) or Art 6(1)(a) |
*Analytics cookies load only after consent.
Note: Abstract is not intended for any sensitive personal data (such as information about health, racial or ethnic origin, political opinions, etc.). Please do not include such sensitive information in your profile, uploads, or chats on the platform.
We use AI to rank publications and suggest potential collaborators. No decision with legal or similarly significant effect is made solely by automated means.
Our Innovation Map feature displays publicly available researcher profiles to help users discover potential collaborators. This data is sourced from public scholarly metadata, an open catalogue published under a CC0 (public domain) licence.
Legal basis: Legitimate interest under Article 6(1)(f) GDPR. We have a legitimate interest in facilitating academic collaboration by making publicly available research metadata discoverable. A balancing test has been conducted and is available on request.
What data is shown: Researcher name, institutional affiliation, field of research, and publication count. No private contact details are displayed.
How to request removal: If you are a researcher whose information appears on our Innovation Map and you would like to be removed, you may request removal at any time by emailing [email protected] with your name and the profile URL shown in Abstract. We will process your request within 72 hours and your profile will be permanently excluded from the map.
Data is shared only with essential service providers under data-processing agreements (e.g., AWS for hosting, Firebase for databases, Stripe for payments, OpenAI for AI processing of chat queries, and Redis for caching). For instance, your chat content may be sent securely to OpenAI's systems to generate AI responses. Transfers outside the EEA rely on EU Standard Contractual Clauses and supplementary safeguards.
TLS 1.3 encryption, AES-256 at rest, least-privilege IAM, AWS WAF, annual penetration tests.
You may access, rectify, erase, restrict, or port your data, and object to certain processing, by contacting us at [email protected]. You also have the right to lodge a complaint with IMY (the Swedish Data Protection Authority).
Abstract is not directed to children under 16, and we do not knowingly collect personal data from them.
If we make material changes to this Policy, we will notify you at least 30 days in advance.
Email: [email protected]
Dag Hammarskjölds väg 7, 752 37 Uppsala, Sweden
