Privacy Policy

This Privacy Policy explains how GradeForce(“GradeForce”, “we”, “us”), operated by [legal entity name, ABN XX XXX XXX XXX] of [registered address], collects, uses, stores and discloses your personal information when you use gradeforce.com and the GradeForce application (the “Service”). We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. Who this applies to

The Service is currently intended for users aged 18 and over. We do not knowingly collect personal information from children under 18 without verified parental or guardian consent. If GradeForce is made available to minors in future (for example through a school or a parent-managed account), additional protections and consents will apply and this policy will be updated. [Confirm the final age position and any school/parent-consent model with counsel — this affects COPPA (US), the APPs, and any state education-privacy obligations.]

2. Information we collect

Information you give us

• Account details — your email address, and (via sign-in) basic profile info; optionally your display name and avatar.
• Profile & study details — your school, year level, the name of a teacher you nominate, your class/subject names, and (for teacher accounts) the subjects you teach.
• Your study content — subjects, assignments, deadlines, homework tasks, outlines, drafts, research notes, mind maps, and uploaded or pasted documents (e.g. a syllabus).
• AI interactions — messages you send to the AI tutor, drafts you submit for grading, and text you ask us to transcribe or revise.
• Class chat messages — messages you post in a class chat room.
• Support requests — when you submit a support ticket, the message you write plus, to help us reproduce the problem, a screenshot of your current page, recent browser console logs, and basic page/browser metadata (URL, user agent, viewport). Please avoid including sensitive information you do not want captured.

Information collected automatically

• Authentication cookies set by our authentication provider to keep you signed in.
• Local storage in your browser, used to hold a working copy of your study content so the app is fast and works offline; this is also synced to your account so it follows you between devices.
• Technical/usage data such as IP address (used for security and rate limiting) and basic request logs. [List any analytics/error-tracking tools once added — e.g. Sentry, a product analytics provider — and update this section.]

Payment information

Subscriptions are processed by Stripe. We do not collect or store your full card number; Stripe processes payment details under its own terms and privacy policy. We receive limited billing data (e.g. subscription status, the last four digits, billing country).

3. How we use your information

• To provide the Service — set up your term, plan deadlines, run the AI tutor, grade and help you revise drafts, and sync your work across devices.
• To operate class chat and (for teachers) to publish class assignments.
• To process payments and manage subscriptions.
• To respond to support requests and fix bugs.
• To keep the Service secure, prevent abuse, and enforce usage limits.
• To comply with our legal obligations.

We rely on your consent and on the necessity of processing to provide a service you have requested. [If you market to UK/EU users, add a GDPR lawful-basis section; confirm scope with counsel.]

4. AI processing & our service providers

GradeForce uses third-party processors to deliver the Service. We share only the data needed for each provider’s function, and we require them to protect it:

• OpenAI — powers the AI tutor, draft grading, transcription, and revision suggestions. Your messages and the text/drafts you submit for these features are sent to OpenAI’s API for processing. We use OpenAI’s API, under which submitted content is not used to train OpenAI’s models and is retained only briefly for abuse monitoring per OpenAI’s API data-usage policy. [Verify this still matches OpenAI’s current API terms before publishing.]
• Supabase — database, authentication, and storage host for your account and study content. [State the Supabase project region / where data is stored, e.g. ap-southeast-2 Sydney.]
• Stripe — payment processing.
• Vercel — application hosting and delivery.

We do notsell your personal information, and we do not use your study content or AI interactions to train our own or any third party’s AI models.

5. AI-generated content — a note

Tutoring answers, grades, feedback, and revision suggestions are generated by AI and may be inaccurate or incomplete. They are a study aid, not a substitute for a teacher’s instruction or marking, and should not be relied on as a final assessment. You are responsible for the academic integrity of your own work.

6. Disclosure

We disclose personal information only: to the service providers above; where you direct us to (e.g. posting in a class chat visible to others in that room); to comply with the law or a valid legal request; or in connection with a business transfer, subject to this policy. Some providers (e.g. OpenAI, Stripe, Vercel) may process data outside Australia, including in the United States; by using the Service you consent to these overseas transfers.[Confirm overseas-disclosure wording and APP 8 compliance with counsel.]

7. Security

We protect your data with measures including encryption in transit (HTTPS), row-level security so each account can only access its own data, and scoped access for our processors. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. Retention

We keep your personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, or dispute requirements. [Specify concrete retention periods, e.g. account data deleted X days after closure.] You can request deletion of your account and associated data at any time (see below).

9. Your rights

You may request access to, correction of, or deletion of your personal information, and you may ask us to export your study content. To exercise these rights, contact us at [privacy@gradeforce.com]. We will respond within a reasonable time and in line with the APPs.

10. Cookies & local storage

We use a small number of strictly necessary cookies for authentication and security, and your browser’s local storage to hold a working copy of your content. We do not currently use advertising cookies. [If you add analytics/marketing cookies, add a cookie banner and update this section.]

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and, for material changes, take reasonable steps to notify you.

12. Contact & complaints

Questions or privacy complaints: [privacy@gradeforce.com]. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.