Privacy Policy

1. Scope and our role

This policy applies to visitors, account holders, and people who contact us. It does not govern third-party websites or services linked from the Service. Wordy Whiz generally determines why and how personal information is processed for the Service. If we later offer institution-specific terms under which we process information solely for a school or other organization, the applicable agreement may provide additional terms.

2. Information we collect

We collect information from you, your browser or device, authentication and payment partners, and through your use of the Service. We may derive operational information such as aggregate usage statistics from these sources.

3. How we use information

• Provide, secure, maintain, personalize, and troubleshoot the Service.
• Create accounts, authenticate users, save private content, and produce exports.
• Process AI requests, generate content, and provide assistant features you request.
• Screen uploaded or generated images for potentially prohibited or unsafe content.
• Measure usage, administer subscriptions and credits, and process transactions.
• Respond to support, privacy, and other requests.
• Send service messages and, where permitted, marketing communications you can unsubscribe from.
• Detect fraud, abuse, and security incidents; enforce our Terms; and comply with law.
• Analyze and improve usability, reliability, features, and public resources.

4. Legal bases for processing

Where laws such as the GDPR or UK GDPR apply, we rely on one or more of the following legal bases: performance of our contract with you; our legitimate interests in operating, securing, supporting, and improving the Service; your consent, where required; and compliance with legal obligations. You may withdraw consent at any time, without affecting processing already performed. We assess legitimate interests against the rights and expectations of affected people.

5. AI and content moderation

When you use AI features, relevant prompts, messages, worksheet context, uploaded reference images, or other requested inputs may be sent to OpenAI to generate or moderate content. OpenAI states that API content is not used to train its models by default, although provider safety and abuse-monitoring retention may apply unless a separately approved retention control is enabled. Do not submit sensitive personal information or confidential student data.

Uploaded images may be sent to Amazon Web Services Rekognition for automated safety screening. We store resulting labels and review status. Automated screening may be inaccurate; we may review or restrict flagged content and you may contact us to challenge an action. We do not use these tools to make admissions, grading, disciplinary, employment, credit, or other similarly significant decisions about people.

6. When we disclose information

We may disclose information in the following circumstances:

• Service providers. Vendors supporting hosting, databases, storage, security, email, analytics, customer support, content processing, and similar operations. Current categories include DigitalOcean and other US-hosted infrastructure providers, OpenAI, Amazon Web Services (including Rekognition and SES), Google (sign-in and Analytics), and Lemon Squeezy for checkout, subscriptions, and transaction administration.
• At your direction. When you request an integration, export, or other disclosure. User worksheets and personal-library images are private and are not published merely because you save them. Current public resources are selected and published by authorized Wordy Whiz staff.
• Legal and safety reasons. To comply with law or valid legal process, protect rights and safety, investigate abuse, or enforce agreements.
• Business changes. In connection with financing, due diligence, merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.
• Aggregated information. Information that does not reasonably identify a person may be used or disclosed for lawful purposes.

We do not sell personal information for money and do not use personal information for cross-context behavioral advertising. Analytics providers may process online identifiers; where applicable law characterizes a particular disclosure as a "sale" or "sharing," you may exercise the rights described below.

7. Cookies and similar technologies

We use cookies and similar technologies needed for authentication, security, preferences, and checkout functionality. We also currently use Google Analytics to understand traffic and feature use. Google Analytics is configured to request IP anonymization, but this does not make all analytics information anonymous. You can restrict cookies through your browser; doing so may affect essential features. You may use our contact page to exercise any legally applicable analytics or disclosure choice. Additional consent controls may be presented based on your location.

8. Retention

We keep personal information only as long as reasonably necessary for the purposes described here, including providing an active account, preserving content at your direction, securing the Service, resolving disputes, and meeting tax, accounting, and legal obligations. The period depends on the type of information and why it is held. Account content is generally retained while your account remains active or until you delete it or request deletion. Security and operational logs are retained for a limited period appropriate to their purpose. Transaction and legal records may be retained longer where required. Deleted information may persist temporarily in restricted backups before being overwritten.

9. International processing

The Service is currently hosted and operated in the United States. If you access it from another country, your information may be transferred to and processed in the United States and other countries where our providers operate. Where required, we rely on contractual, adequacy, or other recognized transfer safeguards. Contact us if you would like information about safeguards relevant to your data.

10. Security

We use administrative, technical, and organizational measures designed to protect personal information, including hashed passwords, access controls, and private storage with signed delivery URLs. No system is completely secure. You are responsible for protecting your credentials and notifying us if you suspect unauthorized account use.

11. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; restrict or object to processing; withdraw consent; opt out of certain disclosures or marketing; and appeal a denied request. You may also complain to your local data-protection authority. We will not discriminate against you for exercising a right.

Submit a request through our contact page. Describe the request and use the email associated with your account. We may need to verify your identity and, where permitted, an authorized agent's authority. We may retain information when an exception applies and will explain any material denial and available appeal process. Marketing emails also include an unsubscribe link; opting out does not stop necessary service messages.

12. Adults only; no student records

The Service is intended only for users who are at least 18. We do not knowingly offer accounts to children or knowingly collect personal information directly from children. Wordy Whiz is currently a teacher-facing creation tool, not a student records system. Do not upload student names, photographs, education records, health or disability information, or other student personal information. If you believe a minor's information was submitted, contact us so we can investigate and delete it as appropriate.

13. Changes to this policy

We may update this policy as the Service and law change. We will post the revised policy and update the review date. If changes are material, we will provide additional notice where required. Your rights regarding information collected earlier will be governed by the policy and law applicable to that processing.

14. Contact us