Privacy Policy & Data Retention Framework
Last Updated: October 2026 • Compliance with NDPR & Global Data Standards
Tour Doctus operates a minimal data retention policy. Customer personal identifiable information (PII) including full names, email addresses, phone/WhatsApp numbers, and raw uploaded brief files are retained for a maximum of 6 months post project completion or order fulfillment, after which they are permanently anonymized or purged.
1. Information We Collect
We collect only the essential information necessary to fulfill academic project briefs, process Credo transactions, and deliver digital files:
- Contact details provided during guest checkout or academic brief intake (Full Name, Email Address, WhatsApp/Phone Number).
- Academic briefs, departmental guidelines, and supervisor feedback files uploaded during collaboration.
- Transaction reference codes and IP country for regional currency determination.
2. Zero Storage of Payment Credentials
Tour Doctus never collects, processes, or stores payment card numbers, CVVs, bank PINs, or banking passwords. All payment processing is securely executed offsite via the Credo payment gateway over TLS 1.3 encryption.
3. Private Storage of Academic Manuscripts
All academic drafts, client supervisor files, and completed manuscripts reside in private non-public cloud buckets with no static public URLs. Access is permitted strictly via time-limited, cryptographically signed tokens.