Sign up

Privacy policy

WE CARE

Updated on 14 October 2026

This document explains how Lingua Intellegens UAB (brand Identific) processes Personal Data. It covers the identific.com website and the Identific Services: the web app, the API and the integrations with learning management systems.

We respect and protect your privacy and undertake to Process your Personal Data in a fair and lawful manner. We ensure the confidentiality of Personal Data and implement appropriate technical and organisational measures to safeguard Personal Data from unauthorized access, unlawful disclosure, accidental loss, modification, destruction or any other unlawful Processing.

The privacy policy can be amended from time to time due to legislative changes, changes in the activities of Lingua Intellegens UAB and other factors. We will inform you about the amendments by publishing the amended text of the privacy policy. We advise you to regularly visit our website and review the relevant privacy policy.

1. Definitions

"Data Subject" means any natural person (including corporate representatives, contact persons) who uses, has used or has expressed a wish to use the Services. The definition of the Data Subject also covers authors of previously published or plagiarized material.

"Data Controller" means anyone who alone or jointly with others determines the purposes and means of the Processing of Personal Data. Section 2 explains when Lingua Intellegens UAB is the Data Controller and when it is a Data Processor.

"Data Processor" means anyone who Processes Personal Data on behalf of the Data Controller.

"EU-only processing" means the institution setting described in section 9.

"GDPR" means Regulation (EU) 2016/679 (General Data Protection Regulation).

"Personal Data" means any information that, directly or indirectly, can identify a living natural person.

"Processing" means any operation or set of operations performed with regard to Personal Data, whether or not performed by automated means, for example collection, recording, organisation, storage, adaptation, alteration, retrieval, gathering, use, combination, erasure or destruction.

"Recipient" means a natural or legal person, public authority or another body, to whom Personal Data may be disclosed by Lingua Intellegens UAB.

"Services" means any services (including plagiarism detection service), advice and products provided by Lingua Intellegens UAB.

"Sub-processor" means a service provider that Processes Personal Data for us when we act as a Data Processor.

2. Who we are and our role

Lingua Intellegens UAB (brand Identific)<br> Registration code 304701806<br> Palangos g. 4-101, LT-01402 Vilnius, Lithuania<br> E-mail: [email protected]

When an institution, such as a university or a school, uses the Services, the institution decides which documents are checked and how long they are kept. For that data, the institution is the Data Controller and we are its Data Processor. We process the data on the institution's instructions, under a data processing agreement. If you use Identific through your institution, your institution is your first contact for questions about your documents.

We are the Data Controller for our website, for our customer relationships and billing, and for personal accounts that people register themselves.

3. What type of Personal Data we have?

We currently collect and process the following information:

  • Identification & contact data such as name, address, telephone number, email address, country of residence.
  • Financial data such as account number.
  • Professional data such as job title or professional status (e.g. student, professor).
  • Account and sign-in data: name, e-mail address, role and unit.
  • Documents uploaded for checking: the files, the text taken from them and page images.
  • Reports: similarity and AI-writing reports, risk flags, grades and inline comments.
  • Usage statistics, audit-log entries, and technical data from error and performance monitoring (see section 7).
  • Data obtained and/or created while performing an obligation arising from law such as data that Lingua Intellegens UAB may be required to report to authorities, such as courts, law enforcement agencies (e.g. details of debt).
  • Communication & services data collected when the Data Subject visits the Lingua Intellegens UAB website.

4. How we get the Personal Data?

Most of the Personal Data we process is provided to Lingua Intellegens UAB directly by the Data Subject. Lingua Intellegens UAB collects from and processes Personal Data about Data Subjects whom have entered into or wishes to enter into an agreement with Lingua Intellegens UAB. We also receive Personal Data indirectly, on the request of the Data Subject, from external sources such as public and private registers or other providers of databases, also from the Data Subject's use of the Services. We also receive Personal Data made publicly available by the Data Subjects (authors of various material (articles, books, thesis etc.)).

If you use Identific through your institution, we get your name, e-mail address and role from the institution. They come from its single sign-on (SAML), its learning management system (LTI) or a CSV import of users. If you sign in with Google, we receive your identity data from Google.

5. Legal grounds and purposes of Processing Personal Data

5.1. Performance of agreements

The main purpose of Lingua Intellegens UAB processing the Personal Data is to document, execute and administer contracts with the Data Subjects. Examples of purposes for Processing include:

  • to provide and administer access to the Identific Services;
  • to manage the relationships with the Data Subject;
  • to authorize and control access to the Services.

5.2. Compliance with legal obligations

Lingua Intellegens UAB needs to comply with legal obligations, therefore we are required to Process Personal Data in accordance with applicable laws. Examples of purposes for Processing are:

  • to comply with rules and regulations relating to accounting, tax information management.
  • to fulfill the obligations of applicable litigation laws.

5.3. Legitimate interest

Lingua Intellegens UAB Processes the Data Subject's Personal Data for Lingua Intellegens UAB legitimate interest. This Processing is necessary for the purposes of the legitimate interest pursued by Lingua Intellegens UAB, which Lingua Intellegens UAB has considered outweighing the Data Subject's interest of protection of the Personal Data. Examples of purposes for Processing are:

  • to identify materials that may have been previously published or plagiarized, and produce a report showing instances of overlapping text. When we do this for an institution, we act as its Data Processor (see section 2);
  • to develop, examine and improve Services and the Data Subject's user experience by performing analyses, statistics;
  • to reply to the Data Subject's requests;
  • to establish and defend legal claims.

5.4. Consent

Lingua Intellegens UAB processes Data Subject's Personal Data for marketing purpose (newsletters) based on Data Subject's consent. Consent can always be withdrawn by contacting Lingua Intellegens UAB at [email protected].

No AI training, no other use

We use the documents that students, teachers and researchers submit only to run the checks their institution asked for. We never use them to train AI models, and we never sell, share or use them for any other purpose.

6. Whom we disclose the Personal Data?

Lingua Intellegens UAB may share the Personal Data with Recipients such as authorities and business partners. Lingua Intellegens UAB does not disclose more Personal Data than necessary for the purpose of disclosure. Recipients may Process the Personal Data acting as Data Processors and/or as Data Controllers. When Recipient is Processing Personal Data on its own behalf as a Data Controller, the Recipient is responsible for providing information on such Processing of Personal Data. Lingua Intellegens UAB disclose Personal Data to Recipients, such as:

  • educational institutions and other persons who ordered the Services;
  • providers of databases and registers;
  • service providers that host and run the Services for us (see section 7);
  • authorities such as tax authorities and law enforcement agencies;
  • debt collectors, bailiffs, notaries or insolvency administrators;
  • financial and legal consultants, auditors or any other service providers of Lingua Intellegens UAB.

Each institution decides whether its documents are added to its repository, and whether the repository is private or shared. Checks run by other users can then match documents in a shared repository. When someone else's check matches a document in a shared repository, they see the matching passages, with a few words around them, and the document's file name. They do not see which institution or person added it, and they cannot open or download the document. File names are shown as uploaded, so they should not contain personal data. The shared repository is also used by checks run through our other text-matching services, such as Plagramme.

Section 8 explains where the data is processed and when it leaves the EU/EEA.

7. Sub-processors

We use the service providers below. When we act as a Data Processor for an institution, they are our Sub-processors. The full list, with data categories and transfer mechanisms, is the sub-processor annex to our data processing agreement. It is available on request at [email protected].

  • Hetzner Online GmbH: hosting of our own dedicated servers (web app, API, databases, queues, text matching, search index, file converter, AI-writing detection). Receives all data. Germany (Falkenstein) and Finland (Helsinki).
  • Contabo GmbH and UAB "Interneto vizija": hosting of part of our fingerprint index, which receives hashed word fingerprints, not text. Germany, France and Lithuania.
  • Cloudflare, Inc.: proxy, TLS and DDoS protection for all Identific sites. All traffic passes through it, uploads included, on Cloudflare's global network. Cloudflare also stores document files, page images, reports and daily encrypted database backups (Cloudflare R2), in its EU jurisdiction.
  • Google Cloud Vision (Google Cloud EMEA Limited): text recognition (OCR) for scanned pages and images. Receives page images that have no text layer. EU endpoint.
  • CloudConvert (Lunaweb GmbH): conversion of less common file formats when our own converter cannot convert them. Receives files. Germany.
  • Serper (serper.dev): live web search. Receives short text fragments from documents, sent as search queries. USA.
  • Sentry (Functional Software, Inc.): error monitoring and session replay. Each error report carries a user ID only, with no names, e-mail addresses, request bodies or database values. In session replays, all text, inputs and media are masked. Data stored in Sentry's EU region (Germany).
  • Sweego (MINDBAZ SAS): the e-mails we send, such as notifications, account verification and invitations; e-mails we receive, including documents that students e-mail to an assignment; and messages sent through our website's contact forms. Receives names, e-mail addresses, message content and e-mailed files. France.

We will inform customers at least 30 days before we add or replace a Sub-processor. Customers may object, as set out in the data processing agreement.

8. Where we process the data, and transfers outside the EU/EEA

Our own servers are in the EU. The web app, API, databases and text matching run on dedicated servers that Hetzner hosts in Falkenstein, Germany, and Helsinki, Finland. AI-writing detection runs on our own model server at Hetzner in Falkenstein, Germany. Our format converter (Helsinki, Finland), stylometry service, pre-crawled web and journal index, translated-text matching and fake-reference check also run on our own servers in Germany, Finland, France and Lithuania. OCR uses Google Cloud Vision's EU endpoint. Fallback file conversion runs in CloudConvert's Germany region.

Document files, page images, reports and database backups are stored with Cloudflare R2 under its EU jurisdiction, which keeps them in the EU by contract. Files stored before 13 October 2026 remain in Cloudflare's Western Europe location.

Some Personal Data leaves the EU/EEA, or may leave it:

  • Serper (USA): short text fragments from documents, sent as search queries. Not used when EU-only processing is on.
  • Cloudflare, Inc. (USA): all traffic passes through Cloudflare's global network.

When Personal Data is transferred outside the EU/EEA, the transfer relies on the EU-US Data Privacy Framework where the provider is certified under it, and on standard contractual clauses otherwise. You can ask us for a copy of these safeguards at [email protected].

9. EU-only processing

Institutions can use EU-only processing. It is on by default for universities and companies that join from 13 October 2026, and off for personal accounts. An institution admin can turn it on or off in Settings → Documents. When it is on, for that institution's documents:

  • live web search does not run, so no text fragments go to Serper (USA).

All other checks still run, including translated-text matching and the fake-reference check, which run on our own servers in Germany and Finland.

This has a cost. Documents are still compared with Identific's indexes and the pre-crawled index. But text copied from web pages that are not in the index yet may be missed. Documents checked before the change keep their results.

EU-only processing does not change the other services in section 7. Cloudflare is used for every institution. EU-only processing therefore does not yet mean that all data stays in the EU/EEA.

10. How long we keep the Personal Data

Each institution sets how long its documents are kept. A daily job deletes documents that are older than that period. Users can delete their own documents, and account holders can delete their own accounts.

Database backups are kept for up to 30 days. Deleted records therefore drop out of the backups within 30 days.

We keep other Personal Data for a limited time period and in any event no longer than necessary for the purposes for which the Personal Data was collected. The retention periods are defined by the laws or legitimate interests of Lingua Intellegens UAB. After the retention period comes to an end Lingua Intellegens UAB will then delete Personal Data.

11. Data protection rights and how to complain?

Under GDPR, you have the following rights:

  • Your right of access – you have the right to ask us for copies of your personal information.
  • Your right to rectification – you have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure – you have the right to ask us to erase your personal information.
  • Your right to restriction of processing – you have the right to ask us to restrict the processing of your information in certain circumstances.
  • Your right to object to processing – you have the right to object to the processing of your personal data in certain circumstances.
  • Your right to data portability – you have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

11.1. Data shall be transferred, corrected and deleted or their processing operations shall be suspended in accordance with the identity of the Data Subject and the documents confirming the Data upon receipt of a written request from the Data Subject.

11.2. Access rights and authorizations to process Data are granted, deleted and changed to the Company's employees only by the Company's manager or his / her authorized employees of the Company.

11.3. Users can make request to delete personal data at [email protected].

If you make a request, we have one month to respond to you. Please contact us at [email protected] if you wish to make a request. You can also complain to the Lithuanian State Data Protection Inspectorate (website address: vdai.lrv.lt) if you are unhappy with how we have used your Personal Data.