Legal
Privacy Policy
Last updated: September 13, 2026
1. Who We Are
RightMyWork is operated by Edutora Labs Private Limited (“Edutora Labs”), a company registered in Nepal. Our registered address is Kathmandu, Nepal. Privacy contact: privacy@rightmywork.com.
2. What We Collect
Account information
Your email address, and optionally your name, when you register. If you sign in with Google, we receive your email address, name and profile picture from Google (see section 5). An account is required to edit a document.
Documents and editing options
The files you upload, the edited files we produce, the editing options and any custom instructions you choose, and the processing logs for each edit. Section 4 explains how each of these is handled and how long it is kept.
Payment information
We do not receive or store your full card details. Card payments are handled directly by our payment providers (see section 6). We receive a transaction confirmation, the amount paid and the plan or unlock purchased, and, when a payment does not go through, the reason the card was declined. We also keep the billing details you give us for invoices, such as your name, address, billing country and any tax ID.
Usage data
Your remaining words and plan allowance, your edit history (file name, word count, status and timestamps), and the editing options you select.
Technical data
A one-way cryptographic hash of your IP address (never the raw IP address in our own database), browser type, and access timestamps, used for security and rate limiting only. Our hosting, security and error-monitoring providers may process your IP address when you connect to the Service (see sections 6 and 8).
3. How We Use Your Data
We use the data we collect to: provide and operate the Service, including processing your documents; manage your account, plan and word balance; process payments and send receipts and invoices; send service emails (sign-in, job completion notifications, payment receipts, download reminders); send product emails such as feature updates, which you can opt out of at any time; investigate failed edits and check the quality of the editing; prevent abuse and maintain security; and comply with legal obligations.
We do not sell your data. We do not use your data for advertising or behavioural profiling.
4. Your Documents
How documents are handled
Your uploaded file is transmitted over an encrypted connection, kept in private storage, and edited by our editing engine. The uploaded original is deleted when the edit finishes or fails. If you check a file's word count but do not start an edit, the file is deleted automatically, normally within two hours.
How long edited files are kept
The edited file is kept so you can download it, then deleted automatically: 24 hours after a free edit, 14 days after an edit made on an active Monthly or Yearly plan, and 7 days after you unlock a free edit. Credit packs bought before August 2026 keep the download windows they were sold with (7 days for Paper, 14 days for Manuscript and Volume), and Custom plans follow the retention set in their agreement. Until a free edit is unlocked, its complete edited file is held on our servers in encrypted form.
Processing logs
Each edit produces processing logs, which can include excerpts of your text. For a completed edit, these logs are deleted together with the edited file. If an edit fails, its logs are kept so we can investigate the failure; you can ask us to delete them by emailing privacy@rightmywork.com. Our cloud hosting providers also keep diagnostic logs from the editing engine, which can include excerpts of your text, for a limited period.
AI processing
To edit your document, its text is sent to the third-party AI providers that perform the edit. If you turn on reference autofill, details from your reference list are also sent to an AI web search to find missing information. Reference details such as titles, authors and DOIs may be checked against public scholarly metadata databases. Section 6 describes these providers.
What we do not do
RightMyWork never trains AI models on your documents, and we never sell them. Our staff do not browse customer documents. A small number of authorized staff may open a document, its edited file or its processing logs to investigate a problem you report or a processing failure, and to review the quality of the editing so we can improve it.
5. Google User Data (Google Sign-In)
What Google user data we access
If you sign in with Google, we request only the OpenID Connect scopes openid, email, and profile. From these scopes we receive your Google account email address, your basic profile information (name and profile picture URL), and a stable Google account identifier. We do not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service.
How we use Google user data
Google user data is used solely to create and authenticate your RightMyWork account, to populate your account profile (display name and avatar), and to send you transactional service emails. We do not use Google user data for any other purpose.
How we share Google user data
We share your Google account email address with our authentication and database provider, our email delivery provider, and our error-monitoring provider strictly for the operation of the Service. Section 6 describes these providers. We do not sell, transfer, or disclose Google user data to data brokers, advertisers, or any other third party.
How we protect Google user data
Google account information is transmitted securely, stored in encrypted databases in the European Union, and access-controlled so that only the authenticated user (and our automated systems acting on their behalf) can read it.
Retention and deletion of Google user data
Your Google account email and profile data are retained for as long as your RightMyWork account is active. You can delete your account at any time from your dashboard, and your profile is deleted when you do. If you have made a purchase, we keep the email address linked to your invoices and payment records for as long as tax and accounting law requires (see section 9).
What we do not do with Google user data
We do not use Google account information to train artificial intelligence or machine learning models. We do not use it for advertising, retargeting, or behavioural profiling. We do not transfer it to data brokers. Our use of information received through Google sign-in adheres to the Google API Services User Data Policy, including its Limited Use requirements.
6. Data Sharing and Service Providers
We share data only with service providers who need it to operate the Service, and only for that purpose. The categories of providers we currently use are listed below. A current list of our service providers is available on request at privacy@rightmywork.com.
We may disclose data if required by law, court order, or to protect the safety of our users or the public. If the business is sold or acquired, your data may transfer as part of that transaction.
We do not sell your personal information to any third party.
AI editing
Third-party AI providers edit your document, write editorial comments, prepare the editing summary and, if you turn it on, run reference autofill with an AI web search.
Reference metadata
Public scholarly metadata databases receive details from your reference list, such as titles, authors and DOIs, when references are checked.
Hosting, database and file storage
Cloud hosting and database providers run the website, the editing engine, sign-in, our database and file storage, and privacy-friendly visit statistics that use no cookies.
An email delivery provider sends sign-in, service and product emails.
Security and error monitoring
An error-monitoring provider receives error reports, and a bot-protection check at sign-in confirms that a real person is signing in.
Sign-in and analytics
Google Sign-In, if you choose it, and Google Analytics, only if you accept analytics cookies.
Payments
Our payment processors handle card payments and card verification. They receive your card details directly from your browser.
7. Your Rights
Regardless of where you are located, you may: see your account data, recent edits and purchases on your dashboard at any time; delete your account yourself from your dashboard, which takes effect immediately; request access to, correction of, or deletion of your personal data by emailing privacy@rightmywork.com; and opt out of product emails using the unsubscribe link in any such email.
Depending on where you live (for example, in the European Union or the United Kingdom), you may also have the right to object to or restrict certain processing, and to lodge a complaint with your local data protection authority.
We will respond to all privacy requests within 30 days.
9. Data Retention
Documents
Uploaded originals are deleted when the edit finishes or fails. Edited files are deleted 24 hours after a free edit, 14 days after an edit on a Monthly or Yearly plan, or 7 days after you unlock a free edit, with legacy credit packs and Custom plans as described in section 4. Processing logs are deleted with the edited file, except for failed edits (see section 4).
Account data
Retained while your account is active. When you delete your account from your dashboard, your profile, edit history and remaining balance are deleted immediately, except for the records described below.
Payment records
If you have made a purchase, your invoices and payment records, and the email address and billing country linked to them, are retained for 7 years as required by applicable law. Invoices are kept as issued. Your name and billing address are removed from your profile when you delete your account.
Security logs
Retained for 7 years, then anonymised.
Anti-abuse record
When you delete your account, we keep a one-way cryptographic hash of your email address together with how much of the free allowance the account had used (words remaining and documents used). The hash cannot be reversed to recover your email. If the same address signs up again, the new account continues from that usage instead of receiving a fresh free allowance; you can still buy a plan. This record is pseudonymised and retained under our legitimate interest in preventing abuse of the free tier, as permitted by Article 6(1)(f) of the GDPR.
10. Security
Data is encrypted in transit and at rest. Documents and edited files are stored in private storage with no public access, and download links use unique expiring tokens. The complete edited file of a free edit is additionally encrypted until it is unlocked. IP addresses are hashed before we store them in our database. Database access is restricted so each authenticated user can only access their own data.
11. Where Data Is Stored and Processed
Your account data, documents and edited files are stored in the European Union.
To edit your document, its text is processed by our third-party AI providers, and some of our service providers may process data in other countries. Our team may access data from outside the European Union for the purposes described in section 4. These countries may not offer the same level of data protection as the country you live in. By using the Service, you acknowledge these transfers.
12. Children
The Service is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact privacy@rightmywork.com and we will delete it promptly.
13. Email Communications
We send two types of email. Service emails (sign-in, job completion, payment receipts, download reminders) are necessary to deliver the Service and cannot be opted out of while your account is active. Product emails (feature updates, upgrade suggestions) are optional: you can opt out at any time using the unsubscribe link.
Your email address is shared with our email delivery provider solely for delivering these emails. We will not send you marketing email without your prior consent.
Our mailing address for CAN-SPAM and similar purposes: Edutora Labs Private Limited, Kathmandu, Nepal.
14. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will update the date above and may notify registered users by email. Continued use of the Service after changes take effect means you accept the updated policy.
15. Contact
For privacy questions, data requests, or complaints, contact us at privacy@rightmywork.com.
Edutora Labs Private Limited, Kathmandu, Nepal.