Privacy Policy

1. Who processes the data

The controller of personal data is:

• Ollsoft s.r.o.
• Příčná 1892/4, Nové Město, 110 00 Prague 1, Czech Republic
• Company number 193 36 039
• info@detekcegpt.cz

We process the data that arises from the use of the website and the tools available on it.

2. What data we process

Free detection without signing in: the text you enter in the form and your IP address. In this case we do not store the text — it goes through the analysis and we discard it. The IP address is used to count the monthly limit of free detections.

Account: name, e-mail address and sign-in credentials. Your password is not stored with us in readable form.

Use of the tools after signing in: the texts and documents you submit or upload, detection results including the score and the flagged sentences, humanised versions of sentences, generated questions, samples of your writing style and the time of each analysis.

Operational logs: IP address, browser type, the time of the request and the address it was sent to.

Support and billing: e-mail address, the content of your message and, on paid plans, billing details and payment records.

3. Why we process the data and on what basis

Performance of a contract (Art. 6(1)(b) GDPR) — so that we can provide detection, humanisation and the other features, run your account, keep the history of analyses and adapt the results to your writing style.

Legitimate interest (Art. 6(1)(f) GDPR) — so that we can keep the service secure, limit abuse, count the monthly limits of free detections and keep you signed in between pages.

Legal obligation (Art. 6(1)(c) GDPR) — so that we can meet accounting and tax obligations on paid plans.

We do not use your texts to train a shared model that would serve other users. The model looks only at your own history, and only so that detection and humanisation fit you more closely.

4. How long we keep the data

• Text from a free detection without signing in — not stored, discarded once the result is returned.
• The record of free detections used up — 30 days from the first detection in the given window.
• Analyses, humanisations and style samples in your account — for as long as the account exists, until you delete them or we do at your request.
• Account details — for as long as the account exists and, after it is closed, for no more than 2 years in case of questions and disputes.
• Accounting and tax documents — 10 years from the end of the tax period, as required by law.
• Operational logs — no more than 12 months, after which we delete or anonymise them.

5. Who we pass the data to

Part of the processing is carried out for us by suppliers acting as processors on our instructions and bound by a data processing agreement. They fall into these categories:

• the provider of server infrastructure and hosting,
• the provider of sign-in and user account management,
• the provider of the language model that performs humanisation and question generation,
• the external detection service that refines the result of the analysis,
• the provider of e-mail communication,
• the payment gateway on paid plans.

The text you submit for detection is passed to the external detection service as part of the analysis. Please bear this in mind if you work with sensitive or confidential material.

We do not sell personal data and we do not pass it on for third-party marketing. Beyond the processors listed above, we will pass it on only where required to do so by law or by a public authority.

6. Transfers outside the European Economic Area

Processing takes place primarily within the European Economic Area. Some suppliers, in particular the language model provider and the external detection service, may also process data outside it.

In such cases we ensure an adequate level of protection through the European Commission's standard contractual clauses, or through an adequacy decision.

7. Your rights

As a data subject you have the following rights:

• the right of access to the data we hold about you (Art. 15 GDPR),
• the right to rectification of inaccurate or incomplete data (Art. 16 GDPR),
• the right to erasure (Art. 17 GDPR),
• the right to restriction of processing (Art. 18 GDPR),
• the right to data portability (Art. 20 GDPR),
• the right to object to processing based on legitimate interest (Art. 21 GDPR),
• the right to withdraw consent where processing is based on it (Art. 7(3) GDPR).

You can exercise these rights by e-mail to info@detekcegpt.cz. We will reply within 30 days at the latest. If you want to delete the history of analyses or the whole account, just write and we will take care of it.

You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic this is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

8. How we protect the data

We have adopted technical and organisational measures appropriate to the risk, in particular encrypted transfer over HTTPS, separated and restricted access to production systems, storage of passwords only as a hash, regular security updates and backups.

No transfer of data over the internet and no storage is one hundred per cent secure, so we cannot guarantee absolute security.

9. Children

The service is not intended for persons under 16 and we do not knowingly process the personal data of such persons. If we find that we have obtained it, we will delete it without undue delay.

10. Changes to this policy

We may adjust this policy from time to time. We will publish the new wording on this page and change the last-updated date shown in the header. We will notify you of material changes by e-mail or by a notice in the service.

11. Contact

For questions about the protection of personal data, please contact:

• Ollsoft s.r.o.
• Příčná 1892/4, Nové Město, 110 00 Prague 1, Czech Republic
• Company number 193 36 039
• info@detekcegpt.cz