Policy

Privacy policy

What personal data PassResearch collects, why, how long it is kept and how a reader can exercise their rights.

Last updated 11 October 2026

Requires legal review

This document is written to describe the platform’s actual behaviour, but one or more provisions depend on facts that must be confirmed before it is relied on as a binding policy. The specific items to confirm are:

  • Confirm the lawful basis and any data-protection registration required in the operator's jurisdiction and in Uganda's Data Protection and Privacy Act.
  • Confirm retention periods against the operator's actual deletion schedule and backup policy.
  • Name the hosting and sub-processors (database, object storage, email) once a production stack is finalised.

Who we are

PassResearch is operated as an independent project based in Kampala, Uganda. No registered company name, registration number or office address is published because none has been confirmed.

This policy explains what happens to information when you use the PassResearch website and workspace. It is written to be readable rather than to hide behind legal phrasing.

What we collect

We collect the information you give us directly and the small amount of technical information needed to run the service securely.

  • Account details: your name, email address and a securely hashed password.
  • Research content you create: projects, sources, notes, chapters, corrections and uploaded files.
  • Usage information needed for limits and billing, such as the number of searches or exports in a period.
  • Technical information such as your IP address (stored only as a salted hash where it is needed for rate limiting), browser user agent and timestamps.

How we use it

We use your information to provide the workspace you asked for, to keep accounts secure, to apply plan limits honestly, and to respond when you contact us.

We do not sell your personal data. We do not use your research content to train AI models.

We also measure how our public pages are used, so we can tell which guides help students and keep the site working. That measurement is limited to public pages, runs only if you allow it, and never includes your workspace, your drafts or your sources.

Who we share it with

We share data only with the service providers needed to operate the platform, and only to the extent required. These currently include managed database and object-storage hosting and, when enabled by the operator, an email provider used to deliver messages you send us.

If you allow measurement, Google processes analytics and advertising data for us as an independent third party with its own privacy terms; it never receives your research content. If you decline, nothing is sent to it at all.

We may disclose information where the law requires it, and we will tell you when we are permitted to do so.

Your rights and choices

You can request a copy of your personal data, ask for corrections, or ask for your account and its content to be deleted. Write to support@passresearch.com and we will respond within a reasonable period.

Deleting your account removes your research content from the live service. Residual copies may remain in encrypted backups for a short period before they are overwritten.

Age

PassResearch is intended for university students and researchers. It is not directed at children, and accounts should not be created on behalf of anyone below the age at which they can consent to data processing in their jurisdiction.

Changes to this policy

When this policy changes we update the date at the top of the page. Substantive changes are announced in the workspace before they take effect.

A question about this policy? Write to us and it reaches a person.

Ask a question