Privacy Policy

1. What Data We Collect

WriteProof collects the following data in the course of providing our writing process verification service:

• Teacher account information: email address and password (hashed)
• Student name: entered voluntarily by the student when starting an assignment (no account required)
• Writing content: the text written by the student during the assignment
• Keystroke timing data: timestamps of each keystroke to enable writing playback
• Tab switch events: records of when a student navigates away from and back to the editor
• Paste attempt logs: records of paste actions attempted within the editor

2. Why We Collect This Data

All data is collected for the sole purpose of providing writing process verification. This includes generating keystroke-by-keystroke playback of the writing session, computing a confidence score that reflects the authenticity of the writing process, and enabling teachers to review student submissions with supporting evidence.

3. How We Use Your Data

We use collected data for analytics and confidence scoring, writing playback for teacher review, and improving the accuracy and reliability of our service. We never sell your data to third parties. We do not use student writing content or behavioral data for advertising, marketing, or any purpose unrelated to writing process verification.

4. Data Retention

Assignment data (including student submissions, keystroke data, and event logs) is retained for as long as the teacher's account remains active. When a teacher deletes their account, all associated data — including all assignment and submission data — is permanently deleted within 30 days of account deletion.

5. Third-Party Services

We use the following third-party services to operate WriteProof:

• Supabase: database and authentication services
• Stripe: payment processing for Pro subscriptions
• Vercel: application hosting and deployment

Each of these services has its own privacy policy. We only share the minimum data necessary for each service to function (e.g., email for authentication, payment details for billing).

6. Cookies

WriteProof uses session cookies solely for authentication purposes. We do not use tracking cookies, advertising cookies, or any third-party cookies for marketing or analytics. These session cookies are essential for the service to function and are deleted when you log out or when they expire.

7. Children's Privacy

WriteProof does not knowingly collect personal information from children under 13 without teacher or school authorization. When teachers use WriteProof with students under 13, they represent that they have obtained any necessary parental or institutional consent required under applicable law, including COPPA. If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will delete that data promptly.

8. Security

We take the security of your data seriously. All data is encrypted in transit using HTTPS/TLS and encrypted at rest. We use industry-standard security practices to protect against unauthorized access, alteration, disclosure, or destruction of your data. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. User Rights

Teachers can export their data (including assignment configurations and submission data) or delete their account and all associated data at any time through their account dashboard. If you need assistance exercising your data rights, please contact us at the address below. We will respond to data requests within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the service at least 14 days before the changes take effect. Your continued use of WriteProof after the effective date of any changes constitutes your acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@writeproof.app.