Confidentiality & Data Handling

Thesis Elite (operated by Plagaiscans Technologies Ltd) treats every customer document as strictly confidential. This Policy describes the technical, organisational, and contractual safeguards we apply, and your rights to request deletion of your documents at any time.

1. Confidentiality principle

Documents that you upload, communications you exchange with our editors, and any draft or deliverable produced are treated as confidential information belonging to you. We do not disclose, publish, sell, or repurpose your documents under any circumstances, except as strictly necessary to deliver the service or to comply with law.

2. No AI training

We do not use customer documents, communications, or deliverables to train, fine-tune, or otherwise improve any artificial-intelligence model, whether operated by us or by a third party. Where we use AI tools internally for limited editorial assistance, those tools are configured so that customer content is not retained by the model provider for training purposes.

3. Editor non-disclosure agreements

Every editor, consultant, and contractor with access to customer documents is bound by a signed non-disclosure agreement that:

• prohibits disclosure of customer documents to any third party;
• prohibits use of customer documents for any purpose other than performing the service;
• requires deletion of all local copies on completion of the engagement;
• survives termination of the editor's relationship with us.

4. Sub-processors

We use a small number of carefully selected sub-processors to host and deliver our services. The current list is published in our Privacy Policy and includes Stripe and Airwallex (payments), Cloudflare (hosting and edge delivery), Supabase (database and storage), and Resend (transactional email). All sub-processors are bound by appropriate data-processing agreements.

5. Encryption

• In transit: all traffic between your device and our services is encrypted using TLS 1.2 or higher.
• At rest: uploaded documents and database records are encrypted at rest using industry-standard symmetric encryption (AES-256).

6. Access controls

Access to customer documents is restricted to the assigned editor(s) and a small operations team on a strict need-to-know basis. All access is logged. Privileged actions (administrator-level access, exports) require multi-factor authentication.

7. Retention schedule

• Uploaded source documents: retained for 90 days after delivery, then permanently deleted.
• Deliverables: retained for 90 days after delivery in your account, then permanently deleted.
• Communications: retained for 2 years for support and dispute-resolution purposes.
• Invoices and payment records: retained for 7 years to comply with HMRC requirements.
• Account profile data: retained for the lifetime of your account; deleted within 30 days of account closure.

8. Deletion on request

You may request earlier deletion of your documents at any time by emailing support@thesiselite.com from the email address on the order. We will:

1. acknowledge your request within 2 business days;
2. delete the requested documents from primary systems within 7 business days;
3. confirm completion of deletion in writing;
4. purge backup copies within 30 days, in accordance with our backup-rotation schedule.

Where we are required to retain certain records by law (for example, invoices and accounting records), those will be retained for the legally required minimum period and then deleted.

9. Breach notification

In the unlikely event of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the UK Information Commissioner's Office within 72 hours and notify affected customers without undue delay.

10. Contact

For confidentiality enquiries, deletion requests, or breach reports please email support@thesiselite.com.