Privacy Policy

This policy explains what Grade A Humanizer, operated by Grade A ("we", "us"), collects when you use ga-humanizer.com, why, who we share it with, and what you can ask us to do about it. We are the controller of that data. Reach us at grade.a.q8@gmail.com.

What we collect, and why

• Account data — your email and a salted hash of your password (never the password itself). Sign in with Google and we receive your email and name from Google. Why: to create your account, apply your plan, and contact you about it. Basis: our contract with you.
• Usage data — how often you use each feature, so plan limits are applied fairly, plus login records: IP address, approximate country, device and time. Why: to run your plan, spot abuse and shared accounts, and show you your own recent logins. Basis: contract, and our interest in keeping the Service secure.
• A device fingerprint — your browser computes a short code from stable traits of the machine you are on: how it draws test text and graphics, your screen size and your time zone. It is not a name, an address or a serial number, it is sent only to us and never to anyone else, and we do not use it for advertising. Why: a plan is sold per person, so this is how we tell one person using two browsers from ten people sharing one login, and how the free daily words are kept to one allowance per machine. Basis: our interest in applying plan limits fairly and preventing abuse.
• What you submit — text you paste for rewriting, Word files you upload to the Word Humanizer, and any document you upload for a paid report. Why: only to produce the result you asked for. Basis: our contract with you.
• Payment data — handled entirely by our payment providers. We receive only the invoice and transaction identifiers, the amount, the status, and the email used to pay. Why: to activate your plan and handle refunds. Basis: contract, and our legal duty to keep transaction records.
• Discord link — if you choose to link your Discord account, we store that connection so your plan role is assigned. You can unlink at any time. Basis: your consent.
• Support emails — what you write to us and our replies. Basis: our interest in answering you properly.
• Advertising measurement — see Cookies below. Basis: your consent where your country requires it.

We do not sell your personal data, and we do not share it with data brokers.

How long we keep it

• Text you paste — processed in memory to produce your result, then discarded. We do not save it.
• Word files you upload to the Word Humanizer — the file you upload and its humanized version are kept for 2 days so you can come back to them, then deleted automatically.
• Uploaded documents and their reports — stored so we can run the analysis, reachable by staff only to process your order, and deleted automatically 7 days after the order completes.
• Account data — while your account exists; removed when you close it or ask us to.
• Login and security records — a limited period, so you and we can review recent activity.
• Usage counters — while your account is active; they reset on your plan's schedule.
• Billing records — as long as tax and accounting law requires, even after you close your account. This is the one thing deletion cannot remove.

Cookies and local storage

We use your browser's local storage to keep you signed in, to remember preferences such as your theme, and to hold the device fingerprint described above so the same machine is recognised next time. These are necessary for the Service to work — clearing them signs you out.

We run no advertising or analytics tags at all. Nothing on this site profiles you, follows you to other sites, or reports your visit to an advertising network. At checkout, our payment provider sets the cookies it needs to process the payment securely; that is the only third-party cookie the Service uses.

Who else processes your data

• Paystack — card payments for some Turnitin scan purchases, on the same terms: you enter your card on Paystack's own checkout and we never see or store it.
• MyFatoorah — card payments. You enter your card into MyFatoorah's own secure form, which is shown on our checkout page, so those details go to them directly and never through us.
• Google (Sign-In) — only if you choose it; we receive your email and name to identify your account.
• Discord — only if you link your account, to assign your plan role.
• Email delivery provider — verification codes, password resets and account notices.
• Cloudflare — delivers and protects the Service, processing connection data such as your IP address to route and secure traffic.

We may also disclose data where the law requires it, where it is needed to bring or defend a legal claim, or to investigate abuse of the Service. If the Service is ever transferred to another owner, your data may transfer with it, subject to this policy.

International transfers

We operate from Kuwait and the providers above operate internationally, so your data may be processed outside your own country. For users in the EEA or UK, those providers rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses.

Security

Passwords are stored only as salted hashes, traffic to the Service is encrypted in transit, and stored documents are reachable only by staff who need them for your order. No system is perfectly secure; if a breach ever affects your personal data we will notify you and the relevant authority as the law requires.

Children

The Service is not directed at children under 13, or under the age of digital consent in your country if that is higher, and we do not knowingly collect their data. Email us if you believe a child has created an account and we will delete it.

Your rights

Depending on where you live, you may access your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time without affecting what we did before.

To use them, email grade.a.q8@gmail.com from the address on your account and say which right you want. Writing from your account address is usually enough to verify you; if it is not, we may ask one more question first. We aim to answer within 30 days, free of charge. Deleting your account removes your account data and usage records; the billing records tax law obliges us to keep are the exception.

In the EEA or UK you may also complain to your local data-protection authority — though we would rather you gave us the chance to put it right first.

Changes

We may update this policy as the Service changes. The date above always shows the current version, and we will announce material changes in the Service or by email.

Contact

Privacy questions? Email grade.a.q8@gmail.com.