Privacy Policy

1. Information We Collect

TDocs collects only the information necessary to provide and improve the Service. We collect the following categories of information:

Account Information: When you create an account, we collect your email address. You authenticate using email-based login links or Google OAuth. We do not collect or store passwords when you use OAuth; for email-link authentication, we generate and store temporary login tokens.

Documents and Content: When you use the Turnitin AI & Plagiarism Detection tool, you upload documents (Word, PDF, plain text, and other supported formats). When you use the AI Humanizer, you submit text for processing. These documents and text inputs ("User Content") are processed solely to deliver the Service to you.

Payment Information: Payments are processed by third-party payment gateways (Paystack and Intasend). We do not collect, store, or have access to your full credit card numbers, bank account details, or M-Pesa credentials. We receive transaction identifiers and confirmation of payment status from these processors.

Usage Data: We collect standard technical information automatically when you use the Service, including IP address, browser type, device information, pages visited, and timestamps. This data helps us monitor Service performance, detect abuse, and improve the user experience.

Communication Data: When you contact us for support or legal inquiries, we retain the content of those communications and any information you choose to share.

2. How We Use Information

We use the information we collect for the following purposes:

• Service Delivery: To process your documents through Turnitin's detection system, run text through the AI Humanizer, generate reports, and display results to you.
• Account Management: To create and maintain your account, authenticate your identity, manage your slot balance, and communicate service-related updates.
• Payment Processing: To initiate and verify payment transactions through our payment gateway partners.
• Support: To respond to your inquiries, troubleshoot issues, and provide customer assistance.
• Security and Abuse Prevention: To detect, prevent, and investigate fraudulent activity, abuse, and violations of our Terms and Conditions.
• Service Improvement: To analyze aggregate, anonymized usage patterns to understand how the Service is used and identify areas for improvement.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.

We do not use your documents or submitted text for any purpose other than providing the specific Service feature you requested. We do not train AI models on your content. We do not build user profiles or behavioral advertising models.

3. Document Handling and Data Retention

Your documents and text submissions are handled with strict privacy protections:

• Processing Only: Documents uploaded to the detection tool are submitted to Turnitin's reseller API (via plagwise.com) for analysis and then stored on Cloudflare R2 (S3-compatible object storage) for delivery back to you. Text submitted to the AI Humanizer is processed by our humanization engine and returned to you.
• Never Indexed: Your documents are never added to Turnitin's institutional database, any plagiarism index, or any content comparison library. They are processed in isolation and are not searchable by, or visible to, any other user or institution.
• Never Sold or Shared for Training: We do not sell, license, or share your documents or text with any third party. We do not use your content to train AI models or improve detection algorithms.
• Retention: We retain uploaded documents and generated reports for as long as your account remains active, so you can access your report history. You may delete individual reports from your dashboard at any time. When you delete a report, the associated document and report files are removed from our storage.
• Account Closure: When you close your account, all your documents, reports, and associated data are permanently deleted from our systems within thirty (30) days. Some information may be retained longer if required by law or for legitimate business purposes such as fraud prevention or financial record-keeping.

4. Data Sharing and Disclosure

We do not sell your personal information or User Content. We share information only in the following limited circumstances:

• Service Providers: We share information with third-party vendors who help us operate the Service, including:
  • Turnitin Reseller API (plagwise.com): Documents you submit for detection are transmitted to this API for analysis.
  • Cloudflare R2: Documents and reports are stored on Cloudflare's S3-compatible object storage.
  • Payment Processors (Paystack, Intasend): Payment transaction data is shared to process your payments and manage subscriptions.
  • Email Service (Zoho SMTP): Transactional emails (login links, report notifications) are sent through Zoho's email infrastructure.
  These providers are contractually obligated to protect your data and use it only for the specific services they provide to us.
• Legal Compliance: We may disclose information if required to do so by law, regulation, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

5. Cookies and Tracking Technologies

TDocs uses minimal cookies and similar technologies:

• Essential Cookies: We use session cookies necessary for the Service to function — keeping you signed in as you navigate between pages, maintaining your session state, and remembering your preferences during your visit. These cookies are strictly necessary and cannot be disabled without breaking core functionality.
• Security: We use Cloudflare Turnstile for bot detection and CAPTCHA on forms. Turnstile may set cookies to distinguish human users from automated bots without requiring user interaction.
• Analytics: We do not use third-party analytics cookies, advertising cookies, or tracking pixels. We do not build behavioral profiles or track you across other websites.

Most browsers allow you to control cookies through their settings. Disabling essential cookies may prevent you from using parts of the Service.

6. Data Security

We implement and maintain appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction:

• All data transmission between your browser and our servers is encrypted using TLS 1.3.
• Documents at rest on Cloudflare R2 are encrypted using AES-256.
• Database access is restricted to authorized personnel and protected by access controls.
• We regularly review our security practices and update dependencies to address known vulnerabilities.
• Payment information is handled exclusively by PCI-compliant payment processors; card numbers never touch our servers.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.
• Correction: You may request that we correct inaccurate or incomplete information.
• Deletion: You may request that we delete your personal information and close your account.
• Portability: You may request a copy of your data in a structured, machine-readable format.
• Objection: You may object to certain processing of your personal information.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within the timeframes required by applicable law. We may need to verify your identity before processing your request.

You may also manage your account directly: view your report history from your dashboard, delete individual reports, and update your account information. To close your account entirely, contact us at the email above.

International Users: TDocs operates from and stores data in the United States. If you access the Service from outside the US, your information will be transferred to, stored in, and processed in the US. By using the Service, you consent to this transfer. We take steps to ensure your data receives an adequate level of protection regardless of where it is processed.

Children's Privacy: The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.