Privacy Policy

Your documents

We treat your paper as private. Uploaded files are automatically deleted within 24 hours of processing. Generated reports are retained for 30 days so you can re-download them, then permanently removed.

We strip identifying metadata (author, title, organization) from your file before it is processed. Your submission is never added to any Turnitin repository or database.

Third-party processing

To generate reports, your document is processed through third-party detection services. These providers process the content solely to return a report and do not retain it for training.

For the free AI-writing detector (the instant estimate at /free-turnitin-ai-checker), the text you paste is sent to Pangram Labs, Inc. (United States) to analyze it. Per Pangram’s published policy, content submitted through their API is processed transiently and discarded — it is not retained, indexed, or used to train models. We do not store the text you paste into the free tool on our servers.

Data location

Files and database records are stored in the European Union. We do not sell your data to anyone, for any purpose.

Cookies

We use strictly necessary cookies to keep you signed in and secure your session. If you allow it, we also set one first-party attribution cookie for 30 days. It records the campaign parameters in the link you followed, the landing-page path, the referring website’s hostname, and an on-site source label. It does not contain your paper, payment details, or an identifier used to follow you across websites.

Your attribution choice is remembered for 180 days. Vercel Analytics separately provides aggregate, cookieless page analytics. We do not use advertising, profiling, or third-party tracking cookies. If you buy credits after allowing attribution, the same source fields are saved with that order so we can compare campaign checkouts, paid orders, and revenue.

Checkout reminders

When you start a checkout, our hosting provider supplies the two-letter country code associated with the request. We use it only to select the reminder policy and save that country code and policy with the order; we do not save your IP address for this purpose. In the EEA, UK, Canada, Australia, New Zealand, or when the country is unavailable, a reminder requires your affirmative checkbox choice. In other recognized countries, one reminder may be sent automatically after an unpaid checkout expires.

Stripe Checkout expires after two hours and can then provide a secure recovery link. We send at most one reminder, only if the order remains unpaid and you have not completed a later purchase. Every reminder includes an unsubscribe link; unsubscribing prevents all future checkout reminders without affecting account, payment, or report emails. We also record the Checkout expiry, whether the reminder was sent, and whether its recovery link led to payment.

Data controller & legal basis

SubmitSense is the data controller for personal data processed through this service. We process your account email and uploaded documents to perform the check you request (performance of a contract) and to meet legal obligations. Optional source attribution is processed only after you consent, and you can withdraw that consent above at any time. Where checkout-reminder consent is required, we send the reminder only after your affirmative choice. Third-party detection providers act only as processors on our instructions and do not retain or train on your content. For any data question, contact support.

Your rights

If you are in the EEA or UK, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. You can exercise any of these, or request deletion of your account and associated records, at any time by contacting support. We will action requests within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.