ScanMyEssay Privacy Policy

We take the privacy of your information very seriously.

ScanMyEssay is a website belonging to All Answers Limited, a UK registered company (No. 4964706) and registered data controller (No. Z1821391). We can be contacted using the details given at the bottom of this page.

This privacy policy tells you what to expect when we collect and process your personal data, the rights that are available to you and how you can exercise them.

What we do with your data

We will never sell your personal data for any reason, though sometimes it will be necessary to transfer your data to a third party to be processed. Your data is processed for certain specific reasons:

Essential data

When you create an account with us, we collect your username and password so that you can log in to our website. We also gather your name and email address for billing purposes and so that we can contact you with important information about your account.

If you make a support request, we may ask you for a variety of information such as your name, email address, the name of your institution/business as well as the details of your request with any supporting files you have uploaded for us. This data is only used to respond to your query. To process these requests more efficiently, we use a service called Zendesk. You can read Zendesk's privacy policy here.

In order to make a payment through our website, we need to send some information to our payment providers, PayPal and Stripe, including your email address and details of your transaction. The more sensitive data, such as your card details, are gathered by the providers directly via integration with our website and are not stored by us. You can read PayPal's privacy policy here and Stripe's privacy policy here. We also sometimes use a service called ChargeDesk to enable you to make a payment. You can read ChargeDesk's privacy policy here.

We use a service called Stackify to automatically record errors in our scanning system so that we can work out what went wrong and fix it. These logs sometimes need to include part of the file that was being scanned when the error happened. You can read Stackify's privacy policy here.

When using our free scanning service, you should not upload any files which contain personal data. If we become aware of any such files, they will be removed immediately.

Marketing

If you have explicitly consented to receive direct marketing from us, or if you have ordered from us in the past, we will sometimes use your name and email address to send you offers and promotions about the services we provide. We do this using a service called Mailchimp. You can read Mailchimp's privacy policy here.

Feedback

Sometimes we use a service called Survey Monkey to administer surveys so that we can gather feedback from our customers and improve the services we provide. Survey Monkey use your IP address to log responses to surveys so that we know how many people have completed them. You can read Survey Monkey's privacy policy here.

Cookies

Our websites set cookies in your browser to improve your experience and to make everything run smoothly. For more information, please read our cookie policy.

Other

In order to establish the facts in case of a legal dispute, we archive anything that might be relevant to the negotiation or performance of a contract (for example, records of payments you have made). Access to this archived data is strictly controlled so that only a few privileged employees can see it, and it is only ever used for the specific purpose of supporting a legal case. Some of this data may be shared with our legal counsel in the unlikely event of a dispute.

Your rights

By law, you have a number of rights available to you when you give us your personal data. You can ask for access to any of your personal data that we hold, you can ask us to correct any inaccuracies in your personal data, you can ask us to delete your personal data where there is no longer any good reason for us to have it, you can object to the processing of your data in some cases and, where you have given consent, you are able to withdraw that consent at any time. Under certain circumstances, such as if the data is material to legal proceedings, you can also ask us to temporarily stop processing your personal data. Where your data is automatically processed, you can also ask for a copy of your data in a machine-readable format.

If you would like to exercise any of your rights listed above, please send your request to our data protection officer at [email protected] After we have received proof of your identity, we will respond to your request within one calendar month.

If you are not happy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office.

How we keep your data safe

Security measures

We use a variety of technical and organisational measures to make sure your personal data is stored and transmitted securely. For example, we make diligent use of encryption whenever personal data is being transmitted to a third party and we make regular backups in case the original copy of your data is lost. All of our core database functionality, including most of your personal data, is processed using OVH, who are a cloud computing provider. OVH are certified to be ISO 27001 compliant, which is the gold standard in information security, so you can rest assured that your personal data is secure and protected.

If you communicate with us by email over the Internet, you should be aware that the nature of the Internet is such that unencrypted communication may not be secure and may pass through several different countries on route to us. Please do not email us with confidential or sensitive information such as your credit card details. We cannot accept responsibility for unauthorised access to your information that is outside our control.

Data retention policy

We only hold on to your data for as long as we need it to fulfil one of the purposes it was originally collected for, such as to provide a service, to gather feedback or to comply with a legal obligation. This means that retention policies for your data can differ considerably depending on the context and the way it is used. When deciding on a retention policy for any type of data, we use the following criteria:

However, in general, we securely archive most of your account data after two years of inactivity (see 'Other' above) and then permanently delete all of your personal data after six years of inactivity.

Transfers to countries outside the EEA

Some of the third parties we use to process your data are based in countries which do not have the same standard of data protection laws that EU citizens enjoy. In these cases, we have made sure there are safeguards in place to protect your rights and interests. For example, Survey Monkey and Mailchimp are both located in the United States, but we have made sure that they both comply with the EU-U.S. Privacy Shield Framework, which guarantees the same level of protection.

Children

If you are 13 or under, you must have permission from a parent or guardian before you give us your personal information. If we find that we have received information from you without the appropriate consent, we reserve the right to cancel all transactions and services and remove all personal data that you have supplied. You will be able to re-submit the information when you have the required permission.

Links to other websites

Our websites may contain links to external third-party websites. We are not responsible for the privacy and security of these websites unless they belong to All Answers Limited. This privacy policy applies only to ScanMyEssay.

Google Sign In

Viper allows you to create an account directly using a Google account. It also allows you to connect an existing Viper account to your Google account. This allows you to sign into Viper using either your username and password or directly via Google by clicking the 'Sign in with Google' button. When connecting to Google, we will access, store and share some of your personal information (as set out in the relevant sections of this Privacy Policy) in order to provide our services to you. We will only obtain the following data from Google, about you:

When signing up, this service will request these details from Google to complete our sign-up form. This creates a new Viper account linked directly to your Google account.

If you have already registered a Viper account, you may connect your existing Google account so that you may sign in directly with Google. We will obtain your email address from Google to check against your Viper account email address and link the two together.

You can remove permission for Viper from your Google account from your Viper account any time you wish. You may disconnect Viper from your Google account within the permissions section of your Google Account. If you disconnect your account, we will retain your name and email address, and your account will revert to traditional login.

Google Drive Access

Viper allows you to access your documents stored via Google Drive. When connecting to Google, we will access, store and share some of your personal information in order to provide our services to you. We only obtain the following data from Google, about you:

When selecting Google Drive, Viper will request authorisation from Google to access your files in order to submit them to be scanned. By connecting your Google account to Viper, the app will be able to view (read) files within your Google Drive storage and upload a copy of the file to the Viper servers for scanning. You will always be asked to confirm which Google account you want to use when accessing your Drive files, after your account has been paired.

You can remove permission for Viper from your Google account from your Viper account any time you wish. You may disconnect Viper from your Google account within the permissions section of your Google Account. If you disconnect your account, we will retain any documents you submitted to Viper for scanning and revoke access to your Google Drive.

All data relating to your Google account is stored and shared as outlined in the Privacy Policy.