Privacy policy

This page is a presentation layer of a frozen data-privacy contract (TB-SC-05); it is not a second source of truth. Authorizes no real sales. Experimental service under validation. This page is not a legal compliance conclusion; applicability of FERPA/GDPR-K/APPI or similar regimes is determined by the Owner and legal counsel.

Data categories

Essay text — uploaded by the teacher as grading input; stored separately from identity data; deleted on teacher request or after the retention window.
Rubrics — teacher-defined scoring criteria input.
Generated results — draft scores and draft comments produced for teacher review; drafts only.
Technical logs — request and diagnostics logs; essay full text is avoided in logs (redacted/truncated, reference IDs only).
Support communications — user-initiated support requests and follow-up records.
User identity — account email only for service-necessary identification and transactional notices; no unrelated identity fields are collected.
Order and payment records — order and payment events for fulfillment and reconciliation.

No card data storage: full card numbers, CVV/CVC, and any sensitive authentication data are never stored in this system; sensitive credentials are hosted by the payment processor. No proactive PII collection in essays: the upload flow does not require names, student IDs, school names, or contact details.

Purposes

Produce first-pass score drafts and comment drafts from essays against the teacher's rubric.
Fulfill orders, reconcile payments, and process refunds/disputes.
Diagnostics, security auditing, and availability monitoring (aggregated/anonymized statistics only; no essay full text).
Handle user-initiated support requests.
Transactional notifications (order/payment/delivery/support replies) are service-necessary and are separate from marketing consent; marketing messages are opt-in only and are not sent unless you opt in. You can withdraw any consent at any time.

Recipients (data flows)

Only recipients disclosed here receive data; undisclosed recipients are rejected:

LLM provider (essay grading draft inference): essay text, rubrics, generation results; not used for model training. Activation is pending the Owner's decision on the DPA terms.
Hosting provider: application operation and data storage infrastructure (user identity, order/payment records, essay text, rubrics, generation results, technical logs, support communications).
Product analytics service: technical logs only, anonymized/aggregated; never essay full text or identifiable personal data.

Each flow is activated only after the Owner approves the recipient's DPA terms.

Retention & deletion

Every data category has a defined retention basis and a deletion behavior (deletion on user request or on window expiry, executed by a real deletion runbook). Specific retention days are execution details pending the Owner's per-category decision. If a deletion execution fails, it is recorded as failed and never claimed as deleted.

Your rights

Access, correction, deletion, restriction, and export requests are handled through a single unified support entry point, with per-request ticket records. Identity verification is performed against the registered email before a request is executed. Each request's timeline is tracked field by field.

Minors excluded this phase

Minors are excluded in this phase: direct registration, purchase, and data submission by minors are excluded. Note the recorded residual risk: essays are free text and may contain minors' personal information (e.g., a student self-stating their name or class); serving teachers only does not mean no minors' data exists, and this risk is explicitly tracked under regional high-risk processing rules. Age-assessment status: NOT_ASSESSED (assessment method pending the Owner's decision; non-assessment is not treated as adult-by-default).