Privacy Notice

Last updated: June 28, 2026

This notice explains how Turnusol Academic ("we") collects and uses personal data when you use our service. We act as the data controller for the personal data described below.

1. Data we collect

• Account data: name, email, hashed password or OAuth identifier.
• Service data: journal URLs you submit, generated reports, scan history.
• Usage & device data: IP address, browser, device identifiers, basic telemetry.
• Support data: messages you send us.
• Billing data: handled by Paddle as Merchant of Record; we receive limited transaction metadata only.

2. Why we use it

• Create and operate your account (contract performance).
• Provide and improve the scanning service (contract / legitimate interests).
• Security, abuse prevention, and fraud detection (legitimate interests, legal obligation).
• Customer support (contract / legitimate interests).
• Service-related notifications (contract).

3. Who we share with

• Subprocessors: cloud hosting, database, and AI model providers used to run the service.
• Paddle (Merchant of Record): for sales, subscription management, payments, tax compliance and invoicing.
• Authorities: where required by law.
• Professional advisers: legal/accounting when needed.

4. Retention

We keep account and scan data for as long as your account is active and for a limited period afterwards for legal, accounting, and abuse-prevention purposes. When no longer needed, data is deleted or anonymised.

5. Security

We apply appropriate technical and organisational measures: encryption in transit, access controls, leaked-password protection, and least-privilege access to production systems.

6. International transfers

Our providers may process data outside your country. Where required, we rely on appropriate safeguards (e.g. Standard Contractual Clauses).

7. Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time. To exercise these rights, contact us through the in-app support form. You may also complain to your local data protection authority.

8. Cookies

We use strictly necessary cookies and local storage to keep you signed in and to remember preferences (e.g. language). We do not use advertising cookies.

9. Changes

We may update this notice. Material changes will be announced in-app or by email.

10. Contact

Reach us through the in-app support form.