← Back to EssaiQ

Privacy Policy

Effective date: May 31, 2026

1. Who we are

EssaiQ (“we,” “us,” or “our”) is an AI-powered essay practice tool that grades AP History essays (DBQ, LEQ, and SAQ) against College Board rubrics. This Privacy Policy explains what data we collect, why we collect it, how long we keep it, and your rights.

2. Data we collect

DataWhyStored?
Account email addressAuthentication and account recoveryYes — encrypted at rest
Birth yearAge verification (service requires users to be 13 or older)Yes
Essay text (typed)Sent to AI model for grading; stored temporarily for post-grading reviewYes — automatically deleted after 90 days. Only score and feedback are kept long-term, linked to an anonymous ID — never your email.
Uploaded images / PDFsSent to AI model for gradingNot stored — processed in-memory only
AI score + feedbackShown to you and used for accuracy improvementsYes, linked to anonymous ID
Voluntary feedback (thumbs, comment, teacher score)Improve grading accuracyYes, anonymous — not linked to any identity
IP address, user-agentSecurity and abuse prevention (server logs)Retained ≤ 30 days
Internal staff access logsSupport, debugging, and compliance audit trailYes — retained for 1 year

3. Third-party processors

We share data with the following processors solely to operate the service:

  • Anthropic — your essay text or images are sent to Anthropic's Claude API for grading. Anthropic does not use API inputs to train models by default. See Anthropic's Privacy Policy.
  • Supabase — our database and authentication provider. Data is stored in US-based servers. See Supabase's Privacy Policy.
  • Vercel — our hosting provider. Handles server-side request routing. See Vercel's Privacy Policy.

We do not sell, rent, or share your personal data with advertisers or any other third parties.

4. Children's privacy (COPPA)

EssaiQ is not directed at children under 13. We do not knowingly permit users under 13 to create an account. Users are required to provide their birth year during registration; if a user indicates they are under 13, account creation is blocked.

  • We do not knowingly collect personal information from children under 13.
  • If we become aware that we have inadvertently collected data from a child under 13, we will promptly delete it. Contact us at privacy@bloomtechus.com.
  • The public (unauthenticated) grading feature does not require account creation and does not collect personal information from any user, regardless of age.

5. Educational records (FERPA)

EssaiQ is a practice tool used directly by students and is not operated on behalf of a school or district. Essay submissions are voluntary and not linked to any school record system. We do not share student data with schools, districts, or government agencies.

6. Data retention

  • Account data is retained until you delete your account.
  • Essay text is stored for up to 90 days after grading to allow you to review your writing alongside the feedback. After 90 days it is automatically and permanently deleted from our live database. Your score and feedback remain available indefinitely.
  • Backup note: Encrypted database backups (which cannot be individually queried) may retain data for up to 7 days before being overwritten. This is standard infrastructure practice and does not affect your ability to request deletion.
  • Essay scores and feedback are retained for up to 2 years to power your history and progress views.
  • Uploaded images and PDFs are not stored — they are processed in-memory and discarded immediately.
  • Server logs are purged within 30 days.
  • Admin access logs are retained for 1 year for compliance purposes.

7. Your rights

Depending on your location, you may have the right to:

  • Access — request a copy of the data we hold about you.
  • Deletion — request that we delete your account and associated data.
  • Correction — request that we correct inaccurate data.
  • Portability — receive your data in a structured, machine-readable format.
  • Opt-out — public (unauthenticated) grading does not require an account; no essay data is stored for public grades.

To exercise any of these rights, email us at privacy@bloomtechus.com. We will respond within 30 days.

8. Cookies and tracking

We use session cookies for authentication only. We do not use analytics cookies, tracking pixels, or third-party advertising scripts.

9. Security

All data is transmitted over HTTPS. Database access is restricted using row-level security policies. We do not store payment information. At account creation, a random anonymous ID is generated and stored separately from your email address. Essays and scores are associated only with this anonymous ID — your email is never stored alongside your essay content. This separation is an application-layer pseudonymization measure, not cryptographic anonymization.

Staff access: Authorized EssaiQ staff may access your account data (including essays and scores) for the purposes of debugging, customer support, and security investigations. All such access is authenticated, logged with a timestamp and the identity of the staff member, and retained in an audit log for one year. Access is limited to the minimum necessary to resolve the relevant issue.

10. Changes to this policy

We may update this policy from time to time. Material changes will be noted at the top of this page with a new effective date. Continued use of the service after a change constitutes acceptance of the updated policy.

11. Contact

Questions or concerns about this policy? privacy@bloomtechus.com