Manuscripts are often unpublished, in progress, or sensitive. You should know exactly what happens to your draft between the moment you click upload and the moment the edited file lands in your downloads folder. This article explains the data path from end to end. The Privacy Policy is the full legal version.
What we store, and for how long
When you upload a document, we store the original until the edit finishes or fails, and then delete it. The edited file is kept so you can download it, then permanently deleted:
- Free edits: 24 hours from the moment the edit completes.
- Monthly and Yearly plans: 14 days. The longer window exists because writers on a plan tend to review the edit, send it to a co-author or supervisor, and only download the final copy after that pass.
- Unlocked free edits: 7 days from the unlock.
Legacy credit packs keep the windows they were sold with (7 days on Paper, 14 days on Manuscript and Volume), and Custom plans follow the retention set in your agreement.
Each edit also produces processing logs, which include excerpts of your text. For a completed edit they are deleted with the edited file. If an edit fails, they are kept so we can investigate the failure.
Metadata about the edit, such as the file name, the word count and the time the job ran, is kept against your account so your dashboard can show you what you have run. Metadata does not contain the text of the document and cannot be used to reconstruct it.
Encryption
Two layers of encryption protect your files.
In transit, every connection between your browser and our servers is encrypted. This prevents anyone on the network between you and our servers from reading or modifying your upload as it travels.
At rest, stored files are encrypted. The complete edited file of a free edit is additionally encrypted until it is unlocked.
Who processes your document
Editing a document means sending its text to the third-party AI providers that perform the edit. If you turn on reference autofill, details from your reference list are also sent to an AI web search. The Privacy Policy describes the kinds of service providers we use.
No training on your work
RightMyWork never trains AI models on your documents. Our own engine never collects training data from user uploads. There is no team running a fine-tune pipeline on customer documents in the background, and there is no hidden permission you granted by signing up. The policy is the same for every user, on every plan, and it is not optional on our side.
If you are working on unpublished research and your supervisor or journal requires confirmation in writing, the support team can supply a short data-handling letter for your records.
Who on the team can read your document
Our staff do not browse customer documents. A small number of authorized staff may open a document, its edited file or its processing logs for two reasons: to investigate a problem you report or a processing failure, and to review the quality of the editing so we can improve it.
If you contact support about a specific edit, include the job ID so the right edit can be found quickly.
Where data lives
Documents, edited files and account records are stored in the European Union.
To perform the edit, document text is processed by our third-party AI providers, and some of our service providers may process data in other countries. Our team may access data from outside the European Union to investigate problems and review editing quality.
Deleting your account
You can delete your account at any time from your dashboard, and it takes effect immediately. Account deletion removes your profile, your edit history and your remaining balance.
Some records are kept for legal reasons even after deletion. Invoices and payment records are kept for the period required by tax law, and security audit logs are kept as described in the Privacy Policy. Neither of those records contains the text of your documents.
Compliance posture
RightMyWork operates against the standard set of consumer-data laws that apply to a service like ours. That includes US compliance around honest marketing and email, and data-protection requirements around how we handle the data we hold.
If you are an institution evaluating RightMyWork against a procurement checklist, the support team can supply a short security overview tailored to your questions.
What you can do on your side
Two habits are worth keeping. First, download your edited file inside the download window and save it somewhere you will find it again. Once the window closes, the file is gone from our storage, and re-running the edit costs the words again. Second, protect the account you sign in with: turn on two-factor authentication for your Google account or your email account, because anyone who controls it can sign in to RightMyWork.
If you have specific privacy questions that this article does not answer, email privacy@rightmywork.com. The address is monitored by a person, not a script.