Privacy Policy

1. Data Controller

Plagaiscans Technologies Ltd (Company No. 16998013), registered in the United Kingdom, operating as Plagaiscans, is the data controller responsible for your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.

2. What Data We Collect

Account Information

• Email address (required for account creation)
• Full name (optional)
• Phone number (optional)
• Password (stored in encrypted form)

Document Data

• Uploaded document files submitted for analysis
• Document metadata (file name, size, upload time)
• Analysis results and generated reports

Payment Information

• Transaction IDs and payment references
• Payment method type (we do not store full card details)
• Purchase history and credit balance

Technical Information

• IP address
• Browser type and version
• Device information
• Usage data and analytics

3. How Data Is Used

We use your information to:

• Provide and maintain our text analysis and content detection services
• Process your transactions and manage your account
• Manage credit balances and validity periods
• Send service-related notifications and updates
• Respond to your inquiries and provide customer support
• Improve our services and develop new features
• Detect and prevent fraud or unauthorized access
• Comply with legal obligations

4. Cookies & Tracking

We use essential cookies to maintain your session and provide core functionality. We may also use analytics cookies to understand how users interact with our service. You can control cookie preferences through your browser settings.

• Essential cookies: Required for authentication, session management, and core features
• Analytics cookies: Help us understand usage patterns and improve the service
• Preference cookies: Remember your settings such as language and theme

5. Payment Processing

All payments are processed by Paddle, which acts as the Merchant of Record for all transactions. Paddle handles payment information directly and securely. We do not store complete payment card details on our servers. For more information, please refer to Paddle's privacy policy.

6. Data Retention

• Account data: Retained until you request account deletion
• Document data: Retained until user-initiated deletion or up to 30 days after processing
• Transaction records: Retained as required by law (typically 7 years)
• Analysis reports: Retained until user deletion

Uploaded documents are processed temporarily for analysis. Files are not sold, shared with third parties, or used for any purpose beyond delivering our service. We do not train AI models on your content without your explicit consent.

7. User Rights (GDPR)

Under data protection laws, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data in a machine-readable format
• Right to Object: Object to certain types of data processing

To exercise any of these rights, please contact us at support@plagaiscans.com. We will respond within 30 days as required by GDPR.

8. GDPR Compliance

Plagaiscans Technologies Ltd is committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We process personal data only when we have a lawful basis to do so, including:

• Contract: Processing necessary to fulfil our service agreement with you
• Legitimate interest: Improving our services, preventing fraud
• Consent: When you opt in to marketing communications
• Legal obligation: Compliance with applicable laws

9. Security Measures

We implement appropriate technical and organisational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Secure cloud infrastructure with access controls
• Regular security assessments and monitoring
• Employee training on data protection practices
• Row-level security policies on all database tables

10. International Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance.