Policy

Privacy & confidentiality

Your unpublished research is the most sensitive thing you will send us, and it is treated that way. This page sets out what we collect, who is allowed to read it, how long it stays, and how to have it removed.

Last updated: 23 August 2026

What we collect

Four things, and nothing beyond what the work needs.

Account details: Your name and email address, and a password that is stored only as a scrypt hash. We cannot read your password and we cannot recover it for you; we can only help you set a new one.
The files you upload: Manuscripts, drafts, figures, data descriptions, reviewer letters, and anything else you attach to a request.
The messages you send: The notes and replies exchanged with your specialist inside a request thread, including any brief you write when you place an order.
Order records: The service ordered, the amount and currency, and the PayPal transaction reference.

We never see your card details

Payment happens on PayPal, not on this site. Your card number never reaches our servers, so there is nothing here to store and nothing here to leak. What comes back to us is a transaction reference and confirmation that the payment went through.

How long we keep it

Different records have different lifetimes. None of them is indefinite.

Manuscripts and deliverables
12 months after delivery
Kept so you can come back for a file you have lost or a question about an edit. Ask us to remove them sooner and we do.
Account records
While your account exists
Your name, email address, password hash, and request history. Close the account and they are removed with it.
Order records
As long as tax law requires
Amounts, dates, and transaction references. These are financial records, not your research; the manuscript is not part of them.

Who can see your work

Two people, and that is the whole list.

The specialist assigned to your engagement, who does the work.
The editor who quality checks what is returned to you before it is delivered.

Not other clients. Not other staff, who have no route to files outside the engagements they are assigned. Not advertisers; we do not sell or share data for advertising, and there is no advertising on this site.

Download links are signed and expire. A link that is forwarded, cached, or copied into a chat stops working once its window closes, so an old link in someone else’s inbox opens nothing.

Confidentiality of unpublished research

This is the commitment that matters most to the people who write to us, so it is stated plainly.

We do not share, publish, cite, or reuse your unpublished work, and we do not use it to train models.

Your manuscript is not passed to third parties for review, comment, or opinion.
It is not used as an example, a template, or teaching material, in public or internally.
It is not submitted to any tool that claims rights to train on what it is given. Where a tool is used at all, our AI usage policy sets out exactly where and how.
If we ever wanted to describe a piece of work publicly, even anonymised, we would ask you first and accept no as the answer.

Similarity screening is the one place your text leaves our hands, and only when you order it. An iThenticate similarity report requires the document to be checked against the iThenticate corpus. That is a similarity report, not a certificate, and it happens only on request.

Your rights

These apply wherever you are writing from, not only where the law compels them.

Access: A copy of what we hold about you.
Correction: A fix for anything wrong in your account details.
Export: Your files and request history, in the formats you sent and we returned.
Deletion: Removal of your manuscripts, deliverables, and account.

How to ask

Send the request from the email address on your account through the contact page, and say which of the four you want. We reply within 30 days and usually much sooner. Deletion is confirmed in writing once it is done. Where tax law obliges us to keep an order record, we tell you so and keep only that record, never the manuscript.

Sub-processors

Running the service means a small number of other companies touch some of this data. Here are the categories, honestly.

Payment processing: PayPal, which takes the payment and returns a transaction reference.
Email delivery: The service that sends account and request notifications to your inbox.
Hosting: The provider that runs the site and stores the files you upload.

None of them is given your work for any purpose other than delivering the service you ordered. A current list naming each provider is available on request through the contact page.

Changes to this policy

When this policy changes, the date at the top changes with it. If a change affects how your work is handled or how long it is kept, we email account holders before it takes effect rather than letting you find it here later. Earlier versions are available on request.