Privacy Policy

Last updated: 11 August 2026

1. Who is responsible for your data

ScriptReader International, trading as ScriptReaders, of 37 Adekola Street, Victoria Island, Lagos, Nigeria, is the data controller for the personal data described here.

We are established in Nigeria and process data under the Nigeria Data Protection Act 2023, overseen by the Nigeria Data Protection Commission (NDPC). Because we offer the service to researchers internationally, the data protection law of your own country may also apply — the UK and EU GDPR in particular reach organisations outside their borders that offer services to people inside them. Where that is so, we aim to meet the higher standard rather than the minimum.

For any question about this policy, or to exercise a right under section 9, contact support@scriptreaders.com.

To be completed: confirm with a Nigerian lawyer whether you meet the NDPA threshold for registration with the NDPC as a data controller of major importance, and whether you must appoint a Data Protection Officer.

2. What we collect

Information you give us

• Account details — name, email address, a hashed password, and institution where you provide it. We never store your password itself.
• Manuscripts and scan settings — the files you upload, plus word count, target journal, citation style, first language if you state it, and any instructions.
• Correspondence — enquiries through our contact form and emails you exchange with us.

Information collected automatically

• Server and edge logs — IP address, browser type, pages requested, and timestamps, generated by our hosting and network providers as a normal part of serving the site.
• Session cookies — one for account login, one for administrator login. No advertising or third-party analytics cookies. See the Cookie Policy.

What we do not collect

We do not receive or store card numbers, CVV codes, or banking credentials. Those go directly to Paystack. We retain only a transaction reference, amount, currency, and status, so we can reconcile payments and handle refunds.

3. Your manuscripts — the part that matters most

Unpublished research needs stronger protection than ordinary contact data, and an automated service raises questions a human editor does not. Explicitly:

• Your manuscript is not used as training data. It is processed to produce your results and nothing else. Our analysis provider, Anthropic, states in its commercial API terms that content submitted through the API is not used to train its models.
• It is not published as a sample or shown to other users.
• Files are stored in private object storage, never in a public web directory, and are retrievable only by you or by an authenticated administrator.
• Processing is automated. A human does not read your manuscript unless you ask us to look at something specific.

One limitation, stated honestly: our analysis provider may retain submitted content for a limited period for its own trust-and-safety purposes, even after we delete our copy. That retention is governed by their terms, not ours. If your institution requires zero third-party retention, tell us before you upload — that requires a specific arrangement with the provider and we will say plainly whether we have one.

To be completed: confirm Anthropic's current retention period and whether a zero-retention agreement is available and in place, then state the actual figure here. This is the single most load-bearing sentence on this page.

4. Why we use your data

• To perform the scan you paid for and return results. Basis: performance of a contract.
• To operate your account and keep your scan history available. Basis: performance of a contract.
• To respond to enquiries. Basis: legitimate interests, or steps preparatory to a contract.
• To keep financial records. Basis: legal obligation.
• To secure and maintain the service. Basis: legitimate interests.

We do not sell your data, do not use it for behavioural advertising, and do not send marketing email unless you have asked us to.

5. Who processes your data

These are every organisation that touches your data, what they do, and where they are:

We may disclose data where legally required. We will not otherwise share it.

6. International transfers

We are established in Nigeria, but most of our infrastructure is in the United States and our network provider operates globally. Your manuscript and personal data will therefore be transferred outside Nigeria, and outside your own country, as a normal part of delivering the service.

Where personal data is transferred across borders we rely on the safeguards permitted under the Nigeria Data Protection Act 2023, and — where the UK or EU GDPR applies — on standard contractual clauses with our providers.

To be completed: confirm that data processing agreements are in place with Spaceship, Google, Cloudflare, and Anthropic, and that each incorporates standard contractual clauses. Without them this section is aspirational rather than accurate.

7. How long we keep it

• Manuscripts — kept for your 30-day rescan window plus 90 days, so results stay available while you finish revising, then deleted. You may request earlier deletion at any time.
• Scan results — kept with the manuscript they relate to.
• Account records — kept while your account is open. Closing your account deletes your manuscripts and scan history.
• Contact enquiries — 24 months.
• Financial records — as long as Nigerian tax law requires.
• Logs — per our providers' standard rotation.

8. Security

We use access controls, encrypted sessions, hashed passwords, and private storage outside any public web directory. Data is encrypted in transit. No system is perfectly secure and we cannot guarantee absolute security — but we will notify you and the Nigeria Data Protection Commission (NDPC) without undue delay if a breach affects your personal data or your manuscript.

9. Your rights

Under the Nigeria Data Protection Act 2023, and under GDPR where it applies, you may:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we process it;
• receive your data in a portable format;
• withdraw consent where processing relies on it;
• complain to the Nigeria Data Protection Commission (NDPC), or to the supervisory authority in your own country.

Email support@scriptreaders.com. We respond within one month. We may verify your identity first, particularly for deletion requests, because manuscripts are confidential and we will not hand one to the wrong person.

10. Children

This service is for researchers and postgraduate authors. We do not knowingly collect data from children under 18. If you believe we have, contact us and we will delete it.

11. Changes

We will update this policy as our practices change and revise the date above. Any change to how manuscripts are processed, retained, or shared will be communicated to account holders directly, not merely posted here.