Privacy Policy & Security Standards
Last updated: October 2026 • Effective immediately across all CiteRight services
Our Uncompromising Non-Indexing Guarantee
CiteRight guarantees that your draft research papers, final-year project dissertations, seminar presentations, and term assignments are never indexed into public web repositories, never shared with third-party search engines, and never used to train external artificial intelligence models. When your supervisor or institution runs your final manuscript through their institutional portal, your earlier check on CiteRight will never cause a false self-plagiarism match.
1. Information We Collect
When you create an account, purchase credits, or use the CiteRight verification suite, we collect the minimum necessary data to provide our services:
- Account Data: Your name, email address, password hash, and designated academic role (Student, Lecturer, or Institutional Administrator).
- Document Content: Text extracts from submitted documents (PDF, DOCX, TXT) solely for the purpose of executing text similarity analysis and AI writing evaluation.
- Billing Records: Transaction references, purchased credit bundles, timestamps, and payment statuses via Paystack. CiteRight never accesses or stores your credit/debit card numbers or CVV.
- System Logs: IP address, browser user-agent, and anonymized scan latency metrics for security audit trails and fraud prevention.
2. How We Use and Process Your Documents
Your uploaded documents are processed through our transient analysis pipeline:
- Extracted text is tokenized into comparative n-grams to identify matching sequences against published academic indexes.
- Syntactic perplexity and burstiness distributions are evaluated to generate probabilistic AI indicators.
- Citation attribution algorithms verify whether in-text citations correspond with your final bibliography.
- Once your report is generated, the extracted text is held securely in your private user dashboard. You maintain complete control to delete your reports and uploaded files at any time.
3. Data Security & Storage Architecture
CiteRight employs enterprise-grade defensive security controls:
- Encryption in Transit: All communication between your device and CiteRight servers is encrypted using modern TLS 1.3 / HTTPS protocols.
- Encryption at Rest: Database records and storage buckets utilize AES-256 bit encryption.
- Role-Based Access Control: Only authenticated account holders can access their generated similarity reports. CiteRight support staff cannot inspect your manuscripts without your explicit written authorization.
4. Payment Information Handling
All financial transactions in Nigerian Naira (₦) are processed through Paystack, a PCI-DSS Level 1 certified payment gateway. CiteRight does not store, transmit, or process payment card numbers or banking passwords.
5. User Rights Under the Nigeria Data Protection Regulation (NDPR)
In compliance with the NDPR and applicable data protection legislation, you possess the right to:
- Request a copy of personal information held in your CiteRight profile.
- Request immediate deletion of your submitted manuscripts, generated reports, and account data (Right to Erasure).
- Rectify inaccuracies in your profile credentials.
To exercise any of these rights, contact our Data Protection Officer at privacy@citeright.com.ng.
6. Contact Information
For questions regarding this privacy policy or our data practices, please reach out via our contact page or email support@citeright.com.ng.