Privacy Policy

Last updated: 13 November 2026

This policy explains what personal data Chemistry Reaction Schemes collects, why, and your rights. The data controller is Luke Whelan, D14 WT38 (“we”, “us”). Contact: help@chemistryreactionschemes.com.

1. What we collect

• Account details: your email address and your password. We store the password only in scrambled (hashed) form, so we can’t read it.
• Usage information: how many schemes you have generated in the current day or month, so we can apply plan limits.
• Subscription status: whether you are on the Free or Pro plan, and the customer reference Stripe gives us. We do not receive or store your card details.
• What you submit: the structures, reagents and conditions you enter, and the results generated. We use these to produce your scheme, and we save them to your account’s history so you can reopen them later. We keep your newest 100 schemes. You can delete any of them at any time from History.
• Technical data: your IP address is used briefly to prevent abuse (rate limiting). Our hosting provider may keep standard server logs.

2. Why we use it (legal basis)

• To provide the Service and your subscription: performance of our contract with you.
• To keep the Service secure and prevent abuse: our legitimate interests.
• To meet legal and tax obligations: legal obligation.

We do not sell your data, show ads, or use your data for marketing without your consent.

3. Who we share it with

We use trusted service providers who process data on our behalf:

• Anthropic: the AI model provider. It receives the reaction details you submit in order to generate your scheme. Your email is not sent.
• Stripe and Link: payment processing and merchant of record for subscriptions. They receive your payment and billing details directly when you subscribe, under their own privacy policies.
• Render: our website hosting provider, where your account data is stored.
• Resend: our email delivery provider. It receives your email address and the message when we send you account emails, such as password reset links.

Some of these providers are based outside the European Economic Area, including in the United States. Where data is transferred outside the EEA, it is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

4. Cookies

We use one essential cookie to keep you logged in. We do not use analytics, advertising or tracking cookies. Stripe’s checkout pages may set their own cookies for payment security.

5. How long we keep it

We keep your account data while your account is open. When you ask us to delete your account, we delete it within 30 days, except where we must keep records for legal or tax reasons. Usage counts are kept only as long as needed to apply your limits. Saved schemes are kept until you delete them, they are pushed out by newer ones (we keep your newest 100), or your account is deleted.

6. Your rights

Under the GDPR you can ask us to access, correct, delete or export your data, and you can object to or ask us to restrict how we use it. Email us at help@chemistryreactionschemes.com. We will reply within one month.

If you are unhappy with how we handle your data, you can complain to Ireland’s Data Protection Commission (dataprotection.ie) or to the data protection authority in your own country.

7. Children

The Service is not intended for children under 16 without the permission of a parent or guardian.

8. Changes

We will post any changes to this policy on this page and update the date above. If changes are significant, we will let you know.