Privacy Policy

This policy explains what DoThesis (dothesis.com) collects, why, and the choices you have. It describes what the service actually does, so you can decide what you are comfortable putting into it.

Who we are

DoThesis is operated by HIE Solution, in Vietnam. For anything in this policy, write to contact@hiesolution.com.

What we collect

• Account information. Your email address, your name or username, and a hashed form of your password. We never store your password as plain text. If you sign in with Google, we receive your email address and basic profile from Google instead of a password.
• Your thesis work. The topic and research model you set up, the analysis output you upload (SmartPLS or SPSS exports), documents you pass to the tools, your reference list, the drafts the agent produces, and the conversation threads you have with it.
• Payment information. Payments are handled by our payment providers. We receive confirmation that a payment succeeded, which credit pack it was for, and — for a bank transfer — the transfer reference and memo we need to match it to your order. We never see or store your full card number.
• Credit activity. A ledger of credits added and spent, and which run or tool spent them, so a charge on your account can always be explained.
• Technical information. A token that keeps you signed in, and the ordinary data your browser sends, such as your IP address and browser type, which we use to run and secure the service.

How we use your information

• To run the service: to draft, revise and export your thesis chapters, and to keep your project in sync across the app and the tools.
• To meter and bill credits, and to show you what each run cost.
• To send account email you need — address verification, payment receipts, and notices about your account or the service.
• To respond when you contact us.
• To keep the service secure, detect abuse, and diagnose failures.

The AI agent and your work

To draft a chapter, the agent sends the relevant parts of your project — your topic, your research model, your uploaded analysis output, your reference list and your instructions — to a large-language-model provider. This is the core of what the service does, and it cannot be switched off while still using it.

We send that provider what it needs to write; we do not send it your password, your payment details, or your credit balance. We do not use your thesis content to train models.

Who we share data with

We do not sell your personal information. We share what is necessary with the providers that make the service work:

• Large-language-model providers (currently OpenAI and Google) to generate and revise your drafts.
• Payment providers — Polar and PayPal for card payments, and SePay for Vietnamese bank transfers — to take payment and confirm it.
• Amazon Web Services to store your uploads and exports, and to deliver account email.
• CrossRef, when you use the citation tools: we send the citation strings found in your document so they can be checked against the public record.
• A similarity-checking provider, when one is configured for your deployment and you run that check. If none is configured, the check reports itself unavailable and nothing leaves the service.
• PostHog, for our own product and quality analytics, when it is enabled.
• Our hosting provider, which runs the servers and the database.

We may also disclose information where the law requires it, or to protect our rights or someone's safety.

Cookies and analytics

We use a token to keep you signed in, and a cookie to remember your language. We do not run advertising on this site and we do not sell data to advertisers.

Keeping and deleting your data

You can read, edit and export your work inside the app at any time — the whole point of the export is that the document is yours to take away. To delete your account and the data attached to it, write to contact@hiesolution.com and we will remove it. We keep the records we are required to keep for accounting and tax, such as the fact that a payment was made.

Security

Passwords are stored hashed, and traffic to the service travels over HTTPS. No method of storage or transmission over the internet is ever completely secure, so we cannot promise absolute security.

Children

DoThesis is built for university and graduate students and is not directed at children under 13. We do not knowingly collect their information; if you believe a child has given us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will post the new version on this page and change the date above.

Contact

Questions about this policy? Email contact@hiesolution.com.