This Privacy Policy explains how [BUSINESS NAME, ABN …] (“we”, “us”), operator of WritingMark (writingmark.com), collects, uses, stores and discloses personal information. We handle personal information in accordance with the Australian Privacy Act 1988 and the Notifiable Data Breaches (NDB) scheme.
1. Who uses WritingMark — children and parental consent
WritingMark marks school-age writing (NAPLAN year levels 3, 5, 7 and 9). Accounts must be created and managed by a parent, teacher or guardian aged 18 or over, who consents to a child using the service under their supervision. We do not knowingly create accounts for, or collect personal information directly from, children without that adult’s consent. If you believe a child has provided us information without consent, contact us and we will delete it.
2. Information we collect
- Account: display name, email address, and optionally a phone number.
- Essay content you submit: the writing you paste, type, or upload as a photo, plus the marking results we generate. This may contain personal details if the writing includes them.
- Usage data: essays marked, scores, feature use, timestamps.
- Technical data: IP address, browser/device type, and a single sign-in cookie.
- Payment: handled entirely by our payment processor (Stripe, once enabled). We do not store card numbers.
3. Why we collect it
- To provide essay marking, feedback and reports, and to maintain and improve the quality and reliability of our app. We do not use your submitted writing to train AI models of our own.
- Account sign-in, security and abuse prevention.
- Customer support and service notices.
- Product updates (only with your consent; every email has an unsubscribe link).
- Legal and tax compliance.
4. Data storage & overseas disclosure
Our database and application run on servers located in Sydney, Australia.
To generate marks and transcribe uploaded photos, we disclose the text of a submitted essay and its writing prompt to a third-party AI provider that processes it overseas, in China and the United States. We do not disclose your name, email, or payment details. Under Australian Privacy Principle 8 we remain accountable for how that provider handles this information, and we are reviewing the provider’s data-use terms. [PRE-LAUNCH — do not publish as fact until confirmed: verify the provider uses submitted writing only to produce marks for us, keeps it secure, and does NOT use it to train its own models. If that can’t be guaranteed, switch to a no-retention tier or a provider that contractually does not train. Only then add a no-training statement here.] We may change providers from time to time and will keep this section accurate as to the provider and the countries involved.
We ask for your specific consent to this overseas disclosure when you create an account — it is not bundled into general acceptance of these terms.
Please do not include personal or sensitive information (such as full names, addresses, contact details, schools, or health information) in submitted writing, and — if you upload a photo — first cover or remove any name or school shown on the page. WritingMark is a marking tool and does not need it.
5. Third-party services
- Third-party AI provider — essay marking and photo transcription (processes submitted writing overseas, in China and the United States; see section 4).
- Vultr — server hosting (Sydney, Australia).
- Let’s Encrypt — HTTPS certificates.
- Stripe — payment processing (once billing is enabled). [add link to Stripe privacy policy]
[Add a link to each provider’s privacy policy before launch.]
6. How long we keep it
We keep your data while your account is active. When you delete your account we delete your personal information and submitted essays within 30 days, except where we must retain limited records for legal or tax reasons.
7. Your rights
- Access the personal information we hold about you.
- Correct information that is inaccurate or out of date.
- Delete your account and associated data (within 30 days).
- Opt out of marketing emails at any time.
To exercise any of these, email support@naplanroo.com.
7a. Automated decisions
Your marks, scores and feedback are produced automatically by AI. They are practice estimates — not official results, and not decisions with legal or similarly significant effects. If you have a question about a result, contact us and a person will look into it.
8. Cookies
We use a single essential sign-in cookie (wm_session) to keep you logged in. We do not
currently use advertising or third-party tracking cookies. If we add analytics in future, we will
update this policy and ask for consent where required.
9. Data breaches
If a data breach likely to cause serious harm occurs, we will assess it and, where required by the NDB scheme, notify affected users and the Office of the Australian Information Commissioner (OAIC).
10. Contact & complaints
Privacy questions or complaints: support@naplanroo.com. We aim to respond within 30 days. If you are not satisfied, you may complain to the OAIC (oaic.gov.au).