What we do with your text

We do not train on it

Your thesis, your sources and your prompts are never used to train a model — not ours, not anyone’s. We send text to our AI provider only to answer the request you made, under an agreement that forbids them training on it.

We also ask the provider not to keep it. Every request we make is marked zero-retention, so the provider does not store your text or its own reply once the answer has been returned — not for their dashboard, not for review, not for thirty days. There is nothing on their side for us, or anyone else, to go back and read.

What is sent, and when

Only when you ask for something. A suggestion sends the paragraph you are in, your outline and glossary, and passages from the sources you pinned. A draft sends the section’s scope note and its passages. Nothing is sent while you type, unless you switch on suggest-without-asking, and then only after you pause.

What we log

Every AI call is recorded with its model, its token counts, its cost and how long it took — this is how the monthly allowance is counted and how we keep the price honest. The request and response bodies are not logged. Our application logs never contain your thesis text.

Who can see it

You. A supervisor only if you share a document with them, and then only that document, in read-and-comment mode. Our administrators can see your email, your plan, your usage and your document titles — the things needed to run the service and answer support — and not your chapters.

Where it lives

On our own server, in a Postgres database and an object store we run. Files are encrypted in transit. Backups are taken nightly and kept for 30 days.

Leaving

Export any chapter as .docx or PDF at any time, with or without a subscription — do that first, because the rest of this is final.

Delete your account from the account page. You are signed out everywhere immediately, and seven days later your theses, chapters, sources, uploaded files, exports and comments are erased outright — not hidden, not archived. The seven days are yours to change your mind in; nothing has happened until they are up. Backups age out within thirty days of that.

Two things survive: your payment records, which we are required to keep, and a note that the deletion was asked for and carried out. Neither contains anything you wrote.

Integrity

We do not build “humanising” or detector-evasion features and we will not. What the AI wrote stays marked as such in your document, and the AI-usage log is yours to export and disclose. See the pricing page for the full position.