Privacy policy
Your research, and the data behind it.
This page explains what CASCADES sends, stores, and lets you control.
Public searches
Submitted queries are sent to the relevant research providers, OpenAlex or Hugging Face. Queries are sent when you submit, not on each keystroke. Avoid including confidential or personal material in public research queries.
Public metadata may be cached to reduce repeated provider requests. Research records can include public author names and affiliations supplied by those sources.
Sign-in and your library
Supabase handles authentication and stores your private saved research. Your session is kept in this browser so you can stay signed in. Saved records, graph views, and investigations are associated with your account and protected by ownership checks.
Private saved items are not placed in the shared public metadata cache. If you use Google sign-in, Google and Supabase also process the information needed for authentication.
Optional AI synthesis
When you explicitly request an AI synthesis, CASCADES sends your question and a limited set of retrieved evidence to Cloudflare Workers AI. AI synthesis is optional. You can retrieve evidence without requesting it.
Usage counters enforce request limits. Do not include confidential documents, credentials, or sensitive personal information in an investigation.
Hosting and operational records
Cloudflare hosts the application. Application logs record request identifiers, timing, and response status rather than personal query text. Hosting, authentication, and research providers may keep operational records under their own policies.
Read the provider policies: Cloudflare, Supabase, and Hugging Face.
Your controls
Use Account and privacy settings to export your saved application research as JSON or delete all saved items. You can also remove individual items from My library. These actions do not delete your Supabase sign-in identity or provider operational records.
Identity deletion currently requires the deployment owner to remove the authentication account. There is no self-service identity deletion control in CASCADES.