OPP-01 Store · Privacy supplement

What data we handle, and why

A plain-language summary of the data categories, purposes, recipients, retention & deletion rules, and your rights. No checkout and no payment function is available on this site.

Data categories

Account email: Account identifier and delivery of transactional notifications. Provided by you at registration.
Essay text: The material you upload so the service can draft a first-pass score and comments. Stored separately from identity data.
Rubrics: The scoring rubric defined by the teacher, used to generate drafts.
Generated results: The score draft, comment draft, and review checklist produced for you.
Technical logs: Operational logs for availability and aggregated usage statistics.
Support communications: Records of your support requests and our replies.

What we deliberately do not store or collect

No card data storage: this system does not store full card numbers, CVV/CVC, or any sensitive authentication data; sensitive credentials are hosted by the payment processor.
No proactive PII collection: the upload flow does not require names, student IDs, or school fields.
No advertising trackers on this site.

Recipients (who data is shared with)

LLM provider — essay text, rubrics, and generated results are processed to produce score/comment drafts. Not used to train models.
Hosting provider — application hosting and data storage infrastructure.
Product analytics — aggregated, non-identifying usage statistics only; essay text and personal data are never sent to analytics.

Each recipient's processing terms are pending Owner decisions; data flows are not enabled until those terms are approved.

Retention & deletion

Each data category has a defined retention approach and a deletion runbook. Deletion requests are executed by a real deletion runbook (not policy text alone): we verify, delete, and confirm. If a deletion fails, we record the failure honestly and tell you — we never claim a deletion that did not happen.

Your rights

Access, correction, deletion, restriction, and export requests are all handled through a unified support entry. Identity is verified against your registered email before a request is executed.

Contact support (privacy request entry)

Minors

Minors are excluded from this phase: direct registration, purchase, and data submission by minors are excluded. Because essays are free text, they may contain minors' personal information written inside the essay; we treat that as an explicit residual risk subject to stricter regional review, not as absent data. Age assessment status is currently NOT_ASSESSED.