Privacy Policy
Last updated: August 12, 2026
DoctusHub ("we", "us") helps doctoral candidates organize committee feedback on their dissertations. We treat your manuscript and the feedback you upload as sensitive academic work. This policy explains what we collect, how we use it, and the choices you have.
Your dissertation is never used to train AI models
We do not sell, rent, or share your dissertation content or committee comments. When we use AI to cluster or summarize feedback, requests run through enterprise API endpoints that contractually do not retain or train on your content. Your work stays yours.
What we collect
- Account information — your email address and authentication details.
- Content you provide — dissertation text, committee comments, tracked-changes documents, and notes you upload or paste into the service.
- Payment information — handled entirely by Stripe, our payment processor. We never see or store your full card number; we retain only the subscription status and billing history Stripe shares with us to operate your account.
- Usage data — basic, privacy-respecting analytics to improve the product.
How we use it
- To cluster, prioritize, and track the feedback you give us — for your own use, and no one else's.
- To operate your account, process payments, and provide support.
- To improve DoctusHub in aggregate — never by training models on your manuscript.
We do not sell your data. We do not share it with anyone beyond two categories of service providers: our payment processor (Stripe) and the AI API providers that power comment clustering, each operating under contracts that prohibit them from using your content for anything other than serving your request.
Retention
- Free comment sorter — processing is session-only. Your document is handled in memory, is never written to permanent storage, and the generated export is deleted when you download it or after 30 minutes, whichever comes first.
- Paid tiers (Candidate and Program) — your dissertations and revision plans are stored so you can return to them, and are kept until you delete them or delete your account. When you delete your account, your content is removed from our systems.
AI processing & training
Your documents are never used to train any AI model — ours or anyone else's. When we send comment text to an AI API to cluster and classify feedback, those calls run through enterprise endpoints that contractually do not retain or train on your content, and we opt out of provider training wherever the provider supports an opt-out. The output belongs to you.
FERPA
When DoctusHub is deployed by a doctoral program under a Business Associate Agreement (BAA) or equivalent institutional data-processing agreement, DoctusHub processes student education records in compliance with FERPA, acting on the institution's behalf. Individual accounts on the Free or Candidate tier are entered into directly by you as a private individual and are governed by this privacy policy rather than by FERPA directly. If your program is considering an institutional deployment, contact us at hello@doctushub.com.
Security
Your data is encrypted in transit (TLS) and encrypted at rest (AES-256). Access to production systems is restricted and logged.
Your rights
You can access, export, or delete your data at any time. Depending on your location, you may also have additional rights under GDPR or similar laws, including correction and portability. To exercise any of these rights, email hello@doctushub.com or privacy@doctushub.com and we will respond promptly.
Changes to this policy
If we make material changes to this policy, we will update the date above and, for significant changes affecting stored content, notify account holders by email before the changes take effect.
Contact
Questions about privacy? Email hello@doctushub.com or privacy@doctushub.com.
Effective date: August 1, 2026.