Privacy notice

Who operates NullYield

NullYield is currently operated as an individual project by Matus Bagin. It is not presented as a registered company.

Site operator

Matus Bagin

Contact email

contact@nullyield.org

Country context

United Kingdom

What data NullYield collects

• Login data from Google OAuth and/or Auth0, such as email, name, profile identifier, and profile picture if provided by the login provider.
• User-submitted reaction records, including reaction class, reactants, products, conditions, outcome, evidence, visibility choice, and molecule fields.
• Original lab notes/free_text_notes. These are intended to stay private to the owner.
• Search/filter activity is not intentionally stored as a user profile.
• Technical/session data needed for login, security, and keeping users signed in.
• Admin/moderation actions, where moderation features are used.

Chemistry data warning

Reaction data may contain commercially sensitive, confidential, patent-relevant, employer/client, or unpublished research information. Submit only data you are allowed to share. Public records may be visible to other users and, if deployed publicly, may be visible to search engines.

Public and private reaction data

Public submitted reaction records may be used to operate, improve, publish, license, sell, or provide access to NullYield as a searchable chemistry database. Private personal account data is not sold. Private reactions and private raw notes are not sold or commercially published unless the user makes them public or separately agrees to that use.

AI Upload and OpenAI API

AI Upload sends pasted notes to OpenAI's API for field extraction. AI output is only a suggestion and must be reviewed or edited before saving. Do not paste personal data or confidential third-party information unless lawful and authorised. Pasted notes are processed by OpenAI according to OpenAI's applicable API/business terms and privacy documentation.

On the AI Upload page, users may choose to extract text from an image of lab notes. NullYield first attempts browser-based text extraction. If the image is hard to read, the selected image may be sent to OpenAI for text extraction. NullYield does not intentionally store uploaded note images in its database or save them as files.

PubChem and external lookup

If name-to-SMILES lookup is used, compound names may be sent to PubChem or queried against PubChem services. PubChem suggestions should be verified before saving.

Purposes of processing

• Account login and authentication.
• Saving and displaying reaction records.
• Search and retrieval of public or permitted records.
• AI-assisted extraction.
• Security, abuse prevention, moderation, and debugging.
• Maintaining and improving the MVP.

EU/EEA and UK legal bases

For EU/EEA and UK users, NullYield may rely on contract or steps requested by the user to provide accounts, submissions, search, and AI upload features; legitimate interests for security, abuse prevention, debugging, moderation, and service improvement; consent where explicitly requested later, such as optional analytics or marketing cookies; and legal obligation if required by law.

UK-specific note

UK users have similar rights under UK GDPR. Cookie/session storage is governed by UK PECR rules. Essential session cookies are used for login and security. Non-essential cookies will not be used unless a consent mechanism is added first.

USA-specific note

NullYield does not sell personal data, does not currently share personal data for cross-context behavioural advertising, and does not use targeted advertising. California/US state privacy users may request access, deletion, correction, and information about categories of data collected, subject to applicable law. If sale, sharing, or targeted advertising features are added in the future, NullYield will provide any required privacy choices or opt-out mechanisms before enabling them. NullYield is not intended for children under 13 and does not knowingly collect children's personal data. If such data is discovered, it will be deleted.

Data sharing and processors

Data may be shared with Google and/or Auth0 for authentication, OpenAI for AI Upload and image text extraction when used, PubChem if compound lookup is used, Render for application hosting, Neon for database hosting, Cloudflare for domain, tunnel, security, or DNS services, admins/operators for moderation and security, and legal authorities if required.

International transfers

Data may be processed outside the user's country depending on Google, Auth0, OpenAI, PubChem, Render, Neon, Cloudflare, and other infrastructure used to run the service.

Retention

Account and reaction data are kept while the account or record exists. Users can request deletion. Logs and backups, if used, may persist temporarily after deletion from the live service.

User rights

EU/UK users may have rights to access, correction, deletion, restriction, objection, portability, withdrawal of consent where consent is used, and complaint to a supervisory authority. US/California-style users may have rights to know/access, delete, correct, opt out of sale/share/targeted advertising if ever applicable, and non-discrimination for exercising privacy rights.

Automated decision-making

NullYield does not make legally significant automated decisions. AI extraction only proposes structured fields for user review.

Security

NullYield uses third-party login providers, no local password storage, invite-only access during beta, access controls for private notes, and basic security headers. Security controls are still evolving as the service develops.

Future service changes

As the project develops, NullYield may add data export, retention scheduling, audit logs, cookie consent if non-essential cookies are added, analytics opt-in, US privacy choice mechanisms if needed, and improved contact workflows.