Where your work is, and what leaves
Your manuscript is stored in the United Kingdom. Only the passage you choose to send to an assistant leaves, under paid terms that forbid training on it, and the run record shows exactly what was sent, by which model, at what time.
That sentence is written in full on purpose. UK storage on its own would be the kind of half-truth this product exists to argue against, so storage and inference are always said together.
Free to try, then licensed
Said here, early, rather than found out later. Nobody should spend an hour on their manuscript and only then meet a licence.
What you can do without a licence
Check a paper and read the whole audit: the task families found in it, the warrant each one carries, R1 to R7, and the six components scored per task. No account is needed to see it, and Ally, the helper, answers questions at any point without one either.
The trial is two audits. What is limited is how many, never how good: a trial audit returns the same complete, correct result a licensed one does. Holding something back to make a sale would make the record less trustworthy, and the record is the entire product.
What a licence unlocks
Audits without a limit, the paper builder, your delegation record, the record as structured data you can keep, sharing a record with a supervisor or a reviewer, and the institutional surfaces.
Licences are arranged directly at the moment, so tell us what you are working on and we will sort one out: ask about a licence. For a university or a research institute one agreement can cover everybody, and the page for institutions says what that does and does not include.
Counting the trial is the only reason anything about your connection is stored. When a trial audit runs we keep a one-way salted hash of your network address and never the address itself. It counts the trial and does nothing else, it cannot be turned back into an address or matched to anything in any other system, it is deleted after 30 days, and you may object and have it removed sooner just by asking. The privacy notice gives the lawful basis and the reasoning behind it in full.
Who else touches it
Three, and no more than three. They are listed by what they do and what limits them, and the list is kept current rather than summarised.
| Who | What it does | Where | The limit on it |
|---|---|---|---|
| The hosting account | Runs the application, the database and the uploaded files. | United Kingdom. The host resolves to 185.61.155.46, Lincoln, England. | Storage and delivery only. |
| The model provider | Runs the single passage you send to an assistant, when you ask for it. | Inference happens outside the UK. | Paid terms under which your content is not used to train or improve the provider's products, and no human review of paid API input and output. The provider is named in full in the data processing agreement and on the run record of every call. |
| The host's mail service | Delivers sign-in links and invitations. | With the host. | The recipient address and the delivery outcome, kept 90 days. |
There is no advertising network, no third-party analytics and no tracking pixel anywhere on this site. Nothing on these pages is loaded from another company's server.
How long anything is kept
Written as numbers because a retention policy without numbers is not one.
| What | Kept for |
|---|---|
| Work done as a guest, with uploads and run records | 30 days from the last time you touch it, then deleted automatically. Claiming it into an account stops that clock. |
| Work inside an account | Until you delete it, with a 30-day window in which the deletion can be undone. |
| Consent records | Six years after the relationship ends. They are the proof that what you agreed to was what you were shown, so they outlive the rest. |
| The trial count: a one-way salted hash of a network address, never the address itself | 30 days from the trial audit that created it, then deleted. It counts the trial and does nothing else. |
| The mail log: which address, which message, delivered or not | 90 days. |
| Funnel events: a page opened, an audit finished, an export taken | 12 months, then reduced to monthly counts and deleted. |
Getting your work out, or getting rid of it
Take it with you
A button in your settings, not a support request. It builds a file holding everything the site holds about you: your profile fields, every consent record, your projects and manuscripts, every delegated task with its warrant record, the run records, and any review verdict that names you.
The target is minutes. The legal backstop is one calendar month, and the page tells you which one you are looking at rather than saying "quickly".
Delete it
Requested in settings and confirmed by a fresh link, then held for seven days during which signing in cancels it. After that your personal data, manuscripts, projects, uploads and evidence records are hard-deleted.
Two things survive, both minimal: the consent and erasure records themselves, kept as proof the law was followed, and a pseudonymous marker where you appear inside somebody else's record, because their record has to stay whole.
A deletion ends in a certificate. An erasure reference, the time it ran, what was deleted with counts, what survived and why, and the retention windows that applied. An institution can file it. It names nobody, so it stays checkable for twelve months.
For an institution
A data processing agreement is available on request and can be signed without a lawyer in the loop every time. Requests are answered inside five working days, and this page says five working days rather than "quickly".
The terms say the thing this sector has learned to check for. No training on customer text, ever, with no anonymised-derivative carve-out, and deletion on termination. The carve-out is the exact clause universities objected to elsewhere in 2026, and leaving it out is the point.
The sentence this page carries in the same size as the rest
PaperAlly is not a detector, produces no AI-likelihood score, and a clean delegation record never means no AI was used. The record says that the delegations you declared were typed, warranted and checked. It says nothing about anything undeclared, because nothing in the system could.
See also the privacy notice for the lawful basis behind each of these, and accessibility for what still needs fixing.