Privacy Policy

1. Information We Collect

IELTSRise is committed to protecting your privacy. When you register for our service, make payments via Stripe, or grade essays on our platform, we collect minimal data essential to providing a premium educational experience.

• Account Data: We store your email address and credentials securely inside our Supabase database to manage sessions, save practice histories, and trace token credit purchases.
• Billing Data: Transactions are handled securely by Stripe. We do not store your credit card numbers, billing addresses, or payment PINs directly on our servers.

2. How We Handle AI Essay Data

Our premium writing workspace leverages advanced Large Language Models (including Google Gemini APIs) to perform real-time essay analysis and structural feedback.

• Data Processing: When you click "Submit Essay for AI Evaluation", the text of your essay, prompt instructions, and task types are transmitted securely via encrypted HTTPS protocols to the Google Gemini API gateway.
• Zero AI Training: We utilize strict API enterprise developer parameters. Your private essays and draft answers are never used to train future public LLM models or score models.
• Temporary Buffers: The raw text payload is processed strictly as a transient grading stream. We permanently store only the structured output report (overall score metrics, sub-criteria grades, spelling correction logs, and model exemplar band-9 answers) inside your authenticated student progress table to build your dashboard analytics.

3. Cookies and Session Tracking

We employ standard local storage and Supabase authorization cookies to keep you logged in across browser sessions. We do not engage in third-party marketing tracking or sell browser fingerprinted profiles to advertising hubs.

4. Data Retention & Erasure

You maintain complete authority over your student data. You may request the permanent deletion of your profile, email history, and writing/listening score analytics at any time. Upon receiving an erasure request, your records will be purged from our active Supabase database instantly.

5. Information Security Controls

We implement industry-standard security practices, including full SSL encryption on all API pathways, strict Row Level Security (RLS) policies on our database collections, and regular server inspections to safeguard your information against unauthorized access or breaches.