Privacy Policy

We collect data in three categories: account data (name, email, and Google account identifiers when you sign in with Google); billing data (subscription plan, credit balance, and payment status relayed by Stripe — we do not store full card numbers); and content data (text you paste or upload, generated rewrites, detector reports, and citations).

We also log technical data needed to operate the service: API key metadata, request timestamps, word-count usage against your credits, IP address, and device or browser information for security and abuse prevention.

We use your data to operate the service you request: running humanization, AI detection, paraphrasing, and citation workflows; authenticating your account; metering credits and API usage; processing payments; and providing customer support.

We also use aggregated, de-identified usage data to monitor reliability, improve model quality, and prevent fraud or abuse of the API and credit system.

We do not sell your personal data or your submitted text to third parties, and we do not use your content to train third-party models beyond what is strictly necessary to generate the output you requested.

Delivering the service requires sharing limited data with processors acting on our behalf: large-language-model and translation providers process submitted text solely to generate the requested output; Stripe processes payments and subscription billing; Google provides sign-in authentication; and infrastructure and analytics providers host the application and monitor uptime.

These processors are contractually restricted to using your data only to provide services to us, and are not permitted to use your content for their own independent purposes.

We retain account and billing records for as long as your account is active and for the period required to meet accounting, tax, and legal obligations after closure.

Submitted text, generated outputs, and detector reports are retained only as long as needed to provide the workspace history feature or as required by law, and are deleted or anonymized on a rolling basis thereafter.

You may request deletion of your account and associated content at any time by contacting support; some records may be retained where retention is required by law or for the resolution of disputes.

We use encryption in transit, access controls, and standard industry safeguards to protect account, billing, and content data from unauthorized access.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, and you are responsible for keeping your account credentials and API keys confidential.

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

You can exercise most of these rights directly from your account settings, or by contacting us. We will respond to verified requests within a reasonable time and in accordance with applicable law.

TurnitPass serves users globally, and your data may be processed on servers located outside your country of residence, including by the processors described above.

Where required, we rely on standard contractual safeguards to protect data transferred internationally.

TurnitPass is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in the service, legal requirements, or our data practices.

We will post the updated policy with a revised "Last updated" date, and for material changes we will provide additional notice, such as an email or in-product notification, before the change takes effect.

If you have questions about this Privacy Policy or how your data is handled, contact us through the support channel listed in your account or on our website.