1. Introduction
EssayAce ("we", "us", or "our") operates the website at essayace.au. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered essay evaluation platform. By using EssayAce, you consent to the practices described in this policy.
2. Information We Collect
Account Information
- Email address
- First and last name
- Authentication provider details (email/password or Google OAuth)
Essay and Scoring Data
- Essay content you submit for evaluation
- AI-generated scores, feedback, error analysis, and model essays
- Writing metrics (word count, words per minute, time spent)
- Essay history and submission timestamps
Payment Information
- Payment transactions are processed by Stripe. We do not store your credit card number, CVV, or full card details on our servers. Stripe may share with us your name, email, card type, last four digits, and transaction status for record-keeping.
- Purchase history, credit balance, and pack details
Usage and Technical Data
- Browser type, device information, and IP address
- Pages visited, features used, and session duration
- Error logs and performance metrics for service improvement
3. How We Use Your Information
- To provide AI-powered essay scoring and feedback using AWS Bedrock
- To maintain your account, essay history, and credit balance
- To process payments and manage subscriptions via Stripe
- To send transactional emails (scoring results, account updates) via Amazon SES
- To improve our scoring algorithms, platform reliability, and user experience
- To detect and prevent fraud, abuse, or unauthorised access
- To comply with legal obligations
4. Third-Party Services
We use the following third-party services to operate EssayAce:
- Amazon Web Services (AWS) — Cloud hosting, database storage (DynamoDB), AI scoring (Bedrock), authentication (Cognito), and email delivery (SES). Data is stored in the AWS Asia Pacific (Sydney) region.
- Stripe — Payment processing. Stripe's use of your data is governed by the Stripe Privacy Policy.
- Google OAuth — If you sign in with Google, we receive your name and email address from Google. We do not access any other Google account data.
5. Data Retention
Your essays, scores, and account data are stored in AWS DynamoDB for as long as your account remains active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping).
6. Data Sharing
We do not sell, rent, or trade your personal information to third parties. We share data only with the third-party service providers listed above, and only as necessary to operate the platform. We may disclose information if required by law, court order, or governmental request.
7. Cookies and Local Storage
- Authentication cookies — Used by AWS Cognito to maintain your signed-in session.
- CSRF tokens — Used to protect against cross-site request forgery attacks.
- Local storage — Used to save essay drafts, selected exam type, and topic preferences locally in your browser. This data never leaves your device unless you submit an essay.
We do not use third-party tracking cookies or advertising cookies.
8. Data Security
We implement industry-standard security measures including encryption in transit (TLS/HTTPS), rate limiting, input sanitisation, CSRF protection, and secure authentication via AWS Cognito. While we strive to protect your data, no method of transmission or storage is 100% secure.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your essay history and scores
- Withdraw consent for data processing
To exercise any of these rights, contact us at support@essayace.au.
10. Children's Privacy
EssayAce is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of EssayAce after changes constitutes acceptance of the revised policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy, contact us at: support@essayace.au