Privacy Policy

Last updated 13 October 2026

ThesisCraft GH is operated by ORION IT GHANA (“we”, “us”). This policy explains what personal data we collect when you use ThesisCraft GH, why we use it, who we share it with and the rights you have under Ghana’s Data Protection Act, 2012 (Act 843).

  1. 1. Who is responsible for your data

    ORION IT GHANA is the data controller for ThesisCraft GH. You can reach us through our contact form.

  2. 2. What we collect

    • Account details: your name, email address, institution, programme and a securely hashed password.
    • Your work: your thesis text, title page details, citations, layout settings and the PDFs you upload to your library.
    • Usage records: how many AI words and originality checks you use each day, a record of AI suggestions you accept (shown to you in the AI use report), and how your draft grows day by day.
    • Payments: the payment reference, amount, pass bought, payment method type and status. Your card details and MoMo PIN are handled by Paystack and never reach us.
    • Messages: what you send through the contact form.
    • Technical data: a sign-in cookie, and server logs such as IP address and browser type kept by our hosting provider for security.
  3. 3. How we use it

    • To provide the service: save and sync your drafts, format your thesis, run AI features and originality checks.
    • To take payments and apply your pass.
    • To keep the service secure, prevent abuse and enforce daily limits.
    • To reply to your messages.
  4. 4. Who we share it with

    We do not sell your data. We share it only with the services that run ThesisCraft GH:

    • Vercel (hosting) and Supabase (database and file storage in London, United Kingdom).
    • Paystack, to process payments.
    • Anthropic, which provides the AI model. When you use an AI feature, the relevant text (and, for PDF chat, the PDF) is sent to Anthropic to generate a response. Anthropic does not use this data to train its models.
    • OpenAlex and Wikipedia, which receive short keyword searches built from your text when you run an originality check or look for sources. No account details are sent.

    Some of these providers process data outside Ghana. We use them because they apply strong security and contractual safeguards.

  5. 5. How long we keep it

    We keep your account and work while your account is open. If you ask us to delete your account, we delete your account, drafts and PDFs within 30 days. We keep payment records for six years to meet accounting and tax obligations.

  6. 6. Your rights

    You can ask to see the personal data we hold about you, correct it, delete it, or object to how we use it. You can download a full backup of your work at any time from the Export Center. To make a request, use our contact form.

    If you are unhappy with how we handle your data, you can complain to the Data Protection Commission of Ghana.

  7. 7. Cookies

    We use only the cookie needed to keep you signed in. We do not use advertising or tracking cookies.

  8. 8. Security

    Data travels over encrypted connections, passwords are hashed, your PDFs are stored privately, and access to the database is restricted to the service itself. No system is perfectly secure, so please use a strong password that you don't use elsewhere.

  9. 9. Age

    ThesisCraft GH is for students and staff of tertiary institutions. It is not intended for anyone under 18.

  10. 10. Changes to this policy

    If we change this policy, we will update the date above. For significant changes we will also give notice on this site before they take effect.

Questions about this page? Contact us.