This Privacy Policy explains how [BUSINESS NAME, ABN …] (“we”, “us”), operator of WritingMark (writing.naplanroo.com), collects, uses, stores and discloses personal information. We handle personal information in accordance with the Australian Privacy Act 1988 and the Notifiable Data Breaches (NDB) scheme.
1. Who uses WritingMark — children and parental consent
WritingMark marks school-age writing (NAPLAN year levels 3, 5, 7 and 9). Accounts must be created and managed by a parent, teacher or guardian aged 18 or over, who consents to a child using the service under their supervision. We do not knowingly create accounts for, or collect personal information directly from, children without that adult’s consent. If you believe a child has provided us information without consent, contact us and we will delete it.
2. Information we collect
- Account: display name, email address, and optionally a phone number.
- Essay content you submit: the writing you paste, type, or upload as a photo, plus the marking results we generate. This may contain personal details if the writing includes them.
- Usage data: essays marked, scores, feature use, timestamps.
- Technical data: IP address, browser/device type, and a single sign-in cookie.
- Payment: handled entirely by our payment processor (Stripe, once enabled). We do not store card numbers.
3. Why we collect it
- To provide and improve essay marking, feedback and reports.
- Account sign-in, security and abuse prevention.
- Customer support and service notices.
- Product updates (only with your consent; every email has an unsubscribe link).
- Legal and tax compliance.
4. Where your data is stored & overseas processing
Our database and application run on servers located in Sydney, Australia (Vultr). To produce marks and read photos, the text of submitted essays is sent for processing to our AI provider, Xiaomi (MiMo), whose processing may occur overseas (including China). We share only the essay text and prompt needed to generate feedback — not your name, email or payment details. By using WritingMark you consent to this overseas processing of submitted writing for the purpose of marking.
5. Third-party services
- Xiaomi MiMo — AI essay marking and photo transcription (overseas processing).
- Vultr — server hosting (Sydney, Australia).
- Let’s Encrypt — HTTPS certificates.
- Stripe — payment processing (once billing is enabled). [add link to Stripe privacy policy]
[Add a link to each provider’s privacy policy before launch.]
6. How long we keep it
We keep your data while your account is active. When you delete your account we delete your personal information and submitted essays within 30 days, except where we must retain limited records for legal or tax reasons.
7. Your rights
- Access the personal information we hold about you.
- Correct information that is inaccurate or out of date.
- Delete your account and associated data (within 30 days).
- Opt out of marketing emails at any time.
To exercise any of these, email [email protected].
8. Cookies
We use a single essential sign-in cookie (wm_session) to keep you logged in. We do not
currently use advertising or third-party tracking cookies. If we add analytics in future, we will
update this policy and ask for consent where required.
9. Data breaches
If a data breach likely to cause serious harm occurs, we will assess it and, where required by the NDB scheme, notify affected users and the Office of the Australian Information Commissioner (OAIC).
10. Contact & complaints
Privacy questions or complaints: [email protected]. We aim to respond within 30 days. If you are not satisfied, you may complain to the OAIC (oaic.gov.au).