Privacy Policy

1. Who We Are

UncheckDoc is an AI detection and humanisation service. Our service is accessible at uncheckdoc-web.vercel.app and is operated by the UncheckDoc team, based in New Zealand.

2. What Information We Collect

2.1 Information you provide

• Account information — if you sign in with Google, we receive your name and email address from Google.
• Text content — paragraphs or files you submit for AI detection or humanisation.

2.2 Information collected automatically

• Usage data — word counts processed, plan tier, feature usage (scan vs. humanise).
• Log data — server logs may include IP address, browser type, and timestamps for security and debugging purposes.

2.3 What we do NOT collect

• We do not permanently store the full text of your uploaded documents. Files are processed in memory and deleted immediately after your download link is generated (links expire within 1 hour).
• We do not collect payment card details directly — payments are handled by Stripe.

3. How We Use Your Information

• To provide and improve the AI detection and humanisation service.
• To manage your account and track word usage against your plan limits.
• To send transactional emails (e.g. password resets, billing receipts) — no marketing emails without your consent.
• To detect abuse and maintain service security.
• To comply with legal obligations.

4. Legal Basis for Processing (NZ & AU)

We process your information on the following bases:

• Contract performance — processing your text is necessary to deliver the service you requested.
• Legitimate interests — usage analytics and security monitoring.
• Legal obligation — compliance with NZ and AU law.

5. Data Storage and Security

Account data is stored in a SQLite database on our Render.com server infrastructure. Render operates data centres in the United States. By using UncheckDoc you acknowledge this cross-border transfer.

We take reasonable technical measures to protect your data, including HTTPS-only access, environment variable secrets management, and role-based access controls on our admin interface.

No system is 100% secure. If you believe your data has been compromised, contact us immediately at privacy@uncheckdoc.com.

6. Data Retention

• Uploaded files — deleted within 1 hour of processing.
• Account data — retained while your account is active. Deleted within 30 days of a verified deletion request.
• Usage logs — retained for up to 12 months for fraud prevention and service analytics.

7. Third-Party Services

We share data with the following third parties only to operate the service:

We do not sell your personal information to any third party.

8. Cookies

We use only strictly necessary cookies: the NextAuth session cookie (to keep you signed in) and a CSRF protection token. We do not use advertising or tracking cookies.

9. Your Rights

Under the NZ Privacy Act 2020 and the Australian Privacy Act 1988, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate information.
• Deletion — ask us to delete your account and associated data.
• Portability — receive your data in a machine-readable format.
• Complaint — lodge a complaint with the New Zealand Privacy Commissioner (privacy.org.nz) or the Australian Information Commissioner (oaic.gov.au).

To exercise any of these rights, email privacy@uncheckdoc.com. We will respond within 20 working days as required by law.

10. Children's Privacy

UncheckDoc is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email and post the new version with an updated effective date. Continued use of the service after a change constitutes acceptance.

12. Contact Us

Privacy enquiries: privacy@uncheckdoc.com
General contact: uncheckdoc-web.vercel.app/contact