Privacy Policy

Last Updated: September 17, 2026

This Privacy Policy explains how PlagCheck collects, uses, stores, shares, and protects personal data when you visit PlagCheck.com, create an account, purchase or use our services, upload or submit content, use supported integrations, or otherwise interact with us.

For the purposes of this Privacy Policy, “PlagCheck,” “we,” “us,” or “our” refers, as applicable, to System Technology Online Spain SL. and System Tech Online USA Inc.

1. Who We Are

PlagCheck.com and the services made available through the Website are operated by:

• System Technology Online Spain SL., having its registered office at Calle Pintor Pérez Gil 2, b.46, 03540 Alicante, Spain; and
• System Tech Online USA Inc., having its registered office at 5900 Balcones Dr, Ste 100, Austin, TX 78731, USA.

Depending on your billing location and the payment method selected at checkout, your contractual relationship and payment transaction are processed as follows:

• System Tech Online USA Inc. acts as the primary contracting party and merchant of record for card payment transactions initiated by users located outside the European Union (EU) and European Economic Area (EEA).
• System Technology Online Spain SL. acts as the primary contracting party and merchant of record for transactions processed through PayPal, regardless of the user's location, and for card payment transactions initiated by users within the EU/EEA.

The role of a PlagCheck entity in relation to personal data may depend on the context. For account administration, Website operation, billing, security, and our direct relationship with users, the applicable PlagCheck entity may act as a data controller. Where a business, educational institution, or other organization submits personal data to the Service for processing on its behalf, PlagCheck may act as a data processor subject to the applicable agreement with that customer.

2. Personal Data We Collect

We collect only information reasonably necessary to operate, secure, support, and improve the Service and to fulfill our contractual and legal obligations.

Account and Contact Data

When you create or manage an account, contact us, or use certain features, we may collect information such as:

• name;
• email address;
• phone number, where provided;
• organization or institution, where applicable;
• account identifiers and account settings;
• language and regional preferences; and
• billing country or other information required to determine the applicable service and payment terms.

Customer Content

When you use PlagCheck, we process content that you choose to submit to the Service, which may include:

• documents and text submitted for plagiarism or AI-content analysis;
• files selected through supported cloud-storage integrations;
• file names and related document metadata;
• reference documents uploaded to private Storage;
• URLs or other reference information submitted as part of the Service; and
• reports and analysis results generated from submitted content.

Customer Content may contain personal data relating to you or other individuals. You are responsible for ensuring that you have an appropriate legal basis or other authority to submit personal data contained in your documents. You should avoid submitting sensitive or special-category personal data unless it is necessary for your use of the Service and you are legally permitted to do so.

Payment and Transaction Data

Payments are processed using third-party payment service providers. Depending on the payment method used, we may receive limited transaction and billing information such as the payment amount, currency, billing country, transaction identifier, payment status, and related records necessary for accounting, fraud prevention, and customer support.

Payment card credentials are handled through the applicable payment-processing environment. PlagCheck generally receives only the limited transaction and billing information described above rather than full payment card credentials.

Technical and Usage Data

When you access the Website or Service, we may automatically receive technical and usage information, including:

• IP address;
• browser type and version;
• operating system and device information;
• date and time of access;
• pages and features accessed;
• referring pages or websites;
• session and security information; and
• server, application, and diagnostic logs.

We use this information to operate the Service, maintain security, detect fraud and abuse, diagnose technical problems, measure performance, and improve the user experience.

Information Received From Other Sources

We may also receive personal data from other sources when necessary to provide the Service. For example:

• payment providers may provide payment and transaction information;
• Google may provide data that you authorize us to access through the Google Drive integration; and
• service providers may provide technical, security, or analytics information related to the operation of the Website.

3. How We Use Personal Data

Depending on how you interact with PlagCheck, we may use personal data to:

• create and administer user accounts;
• provide plagiarism detection, AI-content analysis, document comparison, Storage, reports, and related features;
• process files and Customer Content submitted to the Service;
• process payments and maintain billing records;
• provide customer and technical support;
• investigate report results, technical problems, abuse, or security incidents;
• authenticate users and protect accounts;
• prevent fraud, misuse, unauthorized access, and attacks against our systems;
• maintain, troubleshoot, develop, and improve the Service;
• measure Website usage and performance;
• communicate with users about their accounts, transactions, service changes, and support requests;
• send marketing communications where permitted by applicable law and subject to applicable consent or opt-out requirements;
• comply with legal, tax, accounting, regulatory, and law-enforcement obligations; and
• establish, exercise, or defend legal claims.

4. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) or similar data-protection laws apply, we process personal data only where an appropriate legal basis exists.

Depending on the processing activity, our legal bases may include:

• Performance of a contract: where processing is necessary to create or manage your account, provide the Service you requested, process a transaction, or perform our obligations to you.
• Legitimate interests: where processing is reasonably necessary to operate and improve the Service, provide support, protect our systems, prevent fraud and abuse, maintain network and information security, or manage our business, provided that those interests are not overridden by your rights and freedoms.
• Legal obligations: where processing is necessary to comply with applicable tax, accounting, regulatory, court, or other legal requirements.
• Consent: where consent is the appropriate legal basis and applicable law requires it, including for certain optional analytics, cookies, or marketing activities. You may withdraw consent at any time without affecting processing that was lawful before the withdrawal.

5. Customer Content, Ownership, and Private Storage

You or the applicable rights holder retain ownership of Customer Content submitted to PlagCheck.

We process Customer Content only to the extent reasonably necessary to provide, operate, secure, support, and maintain the Service, comply with applicable legal obligations, or as otherwise authorized by the customer.

Customer Content is processed primarily through automated systems. Authorized personnel may access Customer Content where reasonably necessary to provide customer support, investigate a technical issue or report, maintain security, prevent abuse, comply with applicable law, or where access is otherwise authorized by the customer or the applicable agreement. Where Customer Content is obtained through Google APIs, any personnel access is additionally subject to the Google Limited Use requirements described in Section 9.

Customer Content is not automatically made available as a plagiarism source to unrelated PlagCheck customers.

Documents uploaded to private Storage may be indexed so they can be used as reference documents for comparisons within the customer's account. Such documents are not made part of a public or global customer database solely because they are placed in Storage.

6. AI and Machine-Learning Training

PlagCheck does not use Customer Content submitted to the Service to train PlagCheck AI or machine-learning models.

Customer Content is processed for the services requested by the customer, including plagiarism detection, AI-content analysis, document comparison, reporting, Storage functionality, technical support, and related service operations.

7. Service Providers and Other Recipients

We may use third-party service providers where reasonably necessary to operate and support PlagCheck. Depending on the Service and your use of it, these providers may include:

• hosting, server, and infrastructure providers;
• payment-processing and fraud-prevention providers;
• analytics and Website-performance providers;
• authentication and integration providers;
• communications and customer-support service providers; and
• professional advisers, auditors, and other business service providers where reasonably necessary.

We disclose only the information reasonably necessary for the relevant service or purpose.

We may also disclose personal data where required by applicable law, regulation, court order, or lawful request from a competent authority, or where reasonably necessary to protect the rights, safety, security, and integrity of PlagCheck, our users, or others.

If PlagCheck is involved in a merger, acquisition, financing, restructuring, or sale of all or part of its business or assets, relevant information may be transferred as part of that transaction subject to applicable data-protection requirements.

We do not sell Customer Content or make Customer Content available to unrelated customers for their independent use.

8. Cookies and Similar Technologies

PlagCheck uses cookies and similar technologies to operate and secure the Website, maintain user sessions, remember preferences, support payment functionality, measure Website performance, and, where applicable and permitted, support marketing or attribution activities.

Our consent-management interface separates cookies and similar technologies into the categories displayed to users: Strictly Necessary, Performance, Targeting, and Functionality. This allows users to make choices about optional technologies where required by applicable law.

Strictly Necessary

These technologies are required to operate the Website or provide functions requested by users. They may be used to:

• manage user sessions and authentication;
• maintain Website and application security;
• protect accounts against unauthorized access;
• remember essential settings and consent choices;
• support payment functionality and transaction security; and
• detect and prevent fraud or abuse.

Because these technologies are necessary for the Website or Service to function, they may operate without optional consent where permitted by applicable law.

Performance

PlagCheck uses analytics technologies, including Google Analytics, to understand how visitors interact with the Website, measure performance, identify technical or usability issues, and improve the Service.

Depending on configuration, analytics technologies may process information such as page visits, sessions, browser and device information, traffic sources, and approximate geographic information.

Where applicable law requires consent for analytics cookies or similar technologies, we use them only after the required consent has been obtained.

Functionality

Where used, functionality technologies may remember choices such as language, interface preferences, or other non-essential settings so that users do not need to select them again on every visit.

Targeting

Where PlagCheck uses targeting, advertising, or attribution technologies, they may be used to measure campaign effectiveness, understand conversions, or support relevant marketing activities.

Such non-essential technologies are used only where permitted by applicable law and, where required, after the user has provided the relevant consent.

Payment and Security Technologies Within Strictly Necessary

Payment service providers may use cookies or similar technologies in connection with checkout, payment authentication, fraud prevention, transaction risk assessment, or payment security. These technologies may be necessary to complete or secure a transaction.

Cookie Duration and Providers

Some cookies are session cookies and expire when the browser session ends. Others are persistent and remain for a defined period or until deleted. Exact names, providers, configuration, and duration can change when we update the Website, analytics configuration, consent system, payment integration, or other service providers.

We therefore describe cookie categories and purposes in this Privacy Policy rather than treating any fixed list of cookie names as permanently exhaustive.

Managing Your Cookie Choices

When the consent interface is presented, you can accept or decline optional categories according to the controls made available to you. Where supported by the Website, you can later reopen or change your cookie preferences through the available cookie-settings or consent-management control.

You may also manage or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of PlagCheck from functioning properly, including account, session, security, or payment-related features.

PlagCheck may also use technologies other than browser cookies, such as local storage, session identifiers, security technologies, network requests, and server logs, where necessary to operate, secure, or improve the Service.

9. Google Drive and Google API Data

PlagCheck accesses Google user data only after the user has authorized the Google Drive integration.

When you choose to use Google Drive with PlagCheck, we use read-only access to retrieve files that you choose to process through the Service. The Google Drive integration uses the https://www.googleapis.com/auth/drive.readonly scope.

Google Drive data is accessed only to provide the user-facing functionality requested by you, such as selecting and processing a document for plagiarism detection, AI-content analysis, or related PlagCheck features.

Where required to provide the requested Service, PlagCheck may extract and store the text of a file selected through Google Drive, together with the information necessary to process that file and generate the requested report.

PlagCheck does not modify or delete the original file in your Google Drive through the read-only integration.

You may delete content stored in your PlagCheck account in accordance with the available account controls and this Privacy Policy. Deleting content from PlagCheck does not delete the original file stored in Google Drive. You may also revoke PlagCheck's access to your Google account through your Google account permissions.

Google user data obtained through Google APIs is not used for advertising and is not used to train general-purpose or PlagCheck AI or machine-learning models.

PlagCheck's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

10. Where We Store and Process Data

Customer Content and service data may be stored using infrastructure located in the United States. Certain processing operations may also take place using infrastructure located in Europe.

As a result, personal data may be transferred to and processed in countries other than the country in which you are located.

Where applicable data-protection law requires additional safeguards for an international transfer, we use appropriate transfer mechanisms permitted by applicable law. Information about safeguards applicable to a particular transfer may be requested using the contact details below.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, to provide the Service, and to meet applicable legal, accounting, security, dispute-resolution, and regulatory requirements.

For reports and Customer Content:

• reports generally remain available until they are deleted by the customer or removed under our applicable retention processes;
• after approximately 30 days, reports may be moved to the Archive, where they remain accessible but certain report-editing functions may no longer be available; and
• reports may be removed after five years under our long-term retention process.

Account, transaction, tax, security, and other operational records may be retained for different periods where necessary to comply with applicable law, prevent fraud, resolve disputes, enforce agreements, or maintain the security and integrity of the Service.

12. Deletion of Customer Content

Customers can delete applicable documents and reports through the available Service functionality or may contact us for assistance where necessary.

When a document or report is deleted, the corresponding active data is removed from the primary database.

If a document has also been indexed for private Storage search, it is marked as deleted in that search index and is removed from the index during the subsequent index rebuild.

Deletion does not require PlagCheck to remove information that we are legally required to retain or limited records that must be retained to establish, exercise, or defend legal claims.

13. Security

We use technical and organizational measures designed to protect personal data and Customer Content against unauthorized access, misuse, loss, alteration, or disclosure.

These measures include HTTPS/TLS protection for data transmitted between users and PlagCheck, access controls for production systems, and backup procedures.

No online service or method of electronic storage can guarantee absolute security. We therefore review and maintain security measures appropriate to the nature of the Service and the data being processed.

If a personal data breach triggers notification obligations under applicable law or an applicable customer agreement, we will provide the required notifications in accordance with those obligations.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights in relation to your personal data.

Where the GDPR applies, these may include the right to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data where the legal requirements for deletion are met;
• request restriction of processing in applicable circumstances;
• receive certain personal data in a structured, commonly used, machine-readable format and request data portability where applicable;
• object to processing based on legitimate interests in applicable circumstances;
• object to direct marketing;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and
• lodge a complaint with a competent data-protection supervisory authority.

To exercise a privacy right, contact us at support@plagcheck.com. We may need to verify your identity before completing a request.

Where GDPR response deadlines apply, we will respond to valid requests within the period required by applicable law.

15. Business, Educational, and Organizational Customers

If you use PlagCheck on behalf of, or under an arrangement with, an employer, school, university, or another organization, that organization may determine the purposes and means of processing for personal data it submits to PlagCheck.

In those circumstances, the organization may act as the data controller for personal data submitted to PlagCheck on its behalf, while PlagCheck may act as a data processor for the relevant processing activities.

Where PlagCheck processes personal data on behalf of a business, educational institution, or other organization and applicable law requires controller-processor terms, that processing may be governed by appropriate binding data-processing terms in a separate written agreement.

If your use of PlagCheck is arranged by an organization and your question concerns that organization's own use of your personal data, you may also need to contact the relevant organization directly.

16. Children and Minors

The Service is not intended to be used in a manner that results in the unlawful collection of personal data from children or minors.

Where a parent, guardian, school, university, or other organization uses the Service in relation to a minor, that party is responsible for ensuring that it has the authority and legal basis required by applicable law.

If you believe that personal data relating to a child or minor has been submitted to us without the authorization required by applicable law, please contact us at support@plagcheck.com.

17. Separate PlagiarismSearch Family Services

PlagCheck may link to or refer users to separate services within the PlagiarismSearch family, including API, LMS, or institutional solutions that are not native PlagCheck features.

If you choose to access or use a separate PlagiarismSearch service, that service may operate under its own terms and privacy documentation. This Privacy Policy governs PlagCheck unless another policy is expressly presented for the separate service you choose to use.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Service, legal requirements, technology, cookies, service providers, or data-processing practices.

When we make material changes, we will update the “Last Updated” date and provide additional notice where required by applicable law.

19. Contact Us

If you have questions about this Privacy Policy, our use of cookies and similar technologies, our handling of personal data, or wish to exercise a privacy right, please contact us at:

Email: support@plagcheck.com

System Technology Online Spain SL.

Calle Pintor Pérez Gil 2, b.46

03540 Alicante

Spain

System Tech Online USA Inc.

5900 Balcones Dr, Ste 100

Austin, TX 78731

United States

Your use of PlagCheck is also subject to our Terms of Use.