Privacy Policy

SuResearch is operated by SuMarket LLC, an Indiana limited liability company ("SuMarket," "we," "us"). This policy explains what information we collect, how we use it, and the rights you have over it.

• Account information, via third-party sign-in: your name, email address, account identifier, and profile image.
• Content you create or save while using the Service.
• Billing information: subscription payments are handled by a third-party payment processor; we never receive or store your full card number.
• Standard technical information, such as your IP address.

We use the information we collect to operate, maintain, and provide the Service, and to comply with legal obligations.

We share limited data with service providers, solely to operate the Service, including:

• An authentication provider.
• A payment processor.
• An email delivery provider.
• An AI service provider — never your account identity.
• Hosting and infrastructure providers.
• Third-party research databases — never your account identity.

If you choose to connect an optional integration — such as Notion, Google Drive, or Zotero — to export your projects or sources, the content you export is sent directly to that service under your own account with them, governed by their terms and privacy policy. We only share what you export, only when you initiate it, and you can disconnect any integration at any time from your account settings to stop future sharing.

We do not sell your personal data.

We use a single authentication cookie that keeps you signed in for up to 30 days. We do not use advertising or cross-site tracking cookies.

Your data is stored on secure servers located in the United States and encrypted in transit. We use reasonable administrative and technical safeguards to protect your data, though no method of transmission or storage is completely secure.

As an Indiana company, we recognize the rights granted to Indiana residents under the Indiana Consumer Data Protection Act (Ind. Code § 24-15, effective January 1, 2026). You have the right to:

• Confirm whether we are processing your personal data;
• Access the personal data we hold about you;
• Correct inaccuracies in your personal data;
• Delete your personal data;
• Obtain a portable copy of your data in a readily usable format;
• Opt out of targeted advertising, the sale of personal data, or profiling in furtherance of certain decisions — we do not currently engage in any of these.

To exercise these rights, email contact@sumarket.info. We will respond within 45 days. If we deny your request, you have the right to appeal by replying to our response, and we will explain how to escalate further if needed.

If you live in a state with its own consumer privacy law (for example Virginia, Colorado, or Connecticut), we will honor good-faith requests to access, correct, or delete your personal data on the same basis described in Section 8, regardless of whether that state's law formally applies to us.

California residents have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"):

• The right to know what personal information we collect, use, and disclose about you;
• The right to delete personal information we've collected from you;
• The right to correct inaccurate personal information;
• The right to opt out of the sale or sharing of personal information — we do not sell or share personal information as those terms are defined by the CCPA;
• The right to limit use of sensitive personal information — we do not use sensitive personal information beyond what is necessary to provide the Service;
• The right to non-discrimination for exercising any of these rights.

To exercise any California privacy right, email contact@sumarket.info. We will verify your request using your account email and respond within 45 days.

SuResearch is operated from the United States, and most of our users are based here. However, we know SuResearch may be accessed by people outside the US, including in the European Economic Area ("EEA") and United Kingdom. If that applies to you, this section explains how we process your data.

We process your personal data on the following legal bases: to perform our contract with you (creating your account and providing the Service), for our legitimate interests (such as securing the Service and preventing abuse), to comply with legal obligations, and, where applicable, your consent (for example, for optional email communications described in Section 11).

Because our servers and service providers are located in the United States, using SuResearch from the EEA or UK means your personal data is transferred to, and processed in, the United States, which may not have data protection laws equivalent to your home jurisdiction. By using SuResearch, you understand and accept this transfer.

In addition to the rights described in Sections 8 and 9, EEA and UK residents have the right to access, correct, delete, restrict, or port their personal data, and to object to certain processing. To exercise any of these rights, email contact@sumarket.info — we will respond within 45 days. You also have the right to lodge a complaint with your local data protection supervisory authority at any time.

We may update this Privacy Policy from time to time. We will post the revised policy here with an updated "Last updated" date.