Privacy Policy

This Privacy Policy explains what personal data we collect when you use wizprep.ai and related services (the "Service"), how we use and share it, and your choices. We provide AI-powered TOEFL practice and feedback (including speaking/audio transcription and writing evaluation).

• Account & Identity: name (optional), email, password hash, locale.
• Content You Provide: essay responses, audio recordings, transcripts, scores/attempts, feedback, and other study artifacts you upload or generate in the Service.
• Usage & Device Data: IP address, device/browser information, timestamps, pages/events, referral/UTM, approximate location (derived from IP), cookie IDs.
• Payments (via processor): We use third-party processors (e.g., Stripe) and receive limited billing metadata (e.g., payment status, last4, tokenized method). We do not store full card numbers.
• Support & Comms: messages you send to support, bug reports, survey responses, marketing preferences.

We process your data to:

• Provide the Service: authenticate you; grade/evaluate speaking and writing; show progress; save your attempts and history.
• Improve & develop features: analyze usage, evaluate model quality, fine-tune prompts/workflows, and enhance accuracy and reliability.
• Safety & integrity: prevent fraud/abuse, secure accounts, enforce Terms.
• Communicate: send service messages (receipts, changes, security alerts) and—if you opt in—product updates and promotions (you can unsubscribe anytime).
• Legal & compliance: taxation, accounting, dispute handling, and to comply with applicable laws.

We use cookies or similar tech to remember preferences, keep you signed in, measure performance, and improve the product.

• You can control cookies via your browser settings; blocking some cookies may break parts of the Service.
• Where required, we'll present a cookie consent banner and honor your choices.

We don't sell your personal data. We share it only with:

• Service providers (processors): hosting, databases, analytics, email delivery, logging/monitoring, and payments (e.g., Stripe)—bound by contracts to use data only on our instructions.
• Legal/safety: to comply with law, court orders, or prevent harm, fraud, or abuse.
• Business transfer: if we undergo a merger/acquisition or asset transfer, your data may be transferred under similar protections and you'll be notified where feasible.

We keep personal data only for as long as necessary for the purposes above:

• Account data: kept while your account is active and a reasonable time after deletion for backups, disputes, or legal obligations.
• Content/attempts: retained while your account is active so you can view history; you may delete attempts where UI supports it (or email us).
• Audio/transcripts: retained as needed for feedback history, quality improvement (if not opted-out), security, and support.
• Billing records: retained per tax and accounting rules.

We use reasonable technical and organizational measures (encryption in transit, access controls, backups). No method is 100% secure; if we become aware of a data breach affecting you, we'll notify you consistent with applicable laws and our incident procedures.

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing (e.g., direct marketing).

• To exercise rights or request deletion, email [email protected] from your account email.
• Marketing opt-out: use the "unsubscribe" link or email us.
• Model improvement opt-out: email with subject "Model Improvement Opt-Out".

The Service isn't directed to children under 13 (or the minimum age in your jurisdiction). If you're under the age threshold, use the Service only with parent/guardian consent and supervision. If we learn we collected personal data from a child contrary to law, we'll delete it.

We may process and store data on servers in the United States or other countries. Where required, we use appropriate safeguards for cross-border transfers (e.g., standard contractual clauses). By using the Service, you understand your data may be processed outside your country, where laws may differ.

The Service may link to third-party websites or integrate third-party services. Their privacy practices are governed by their own policies; please review them. We're not responsible for third-party content or practices.

We may update this Policy from time to time. We'll post the updated version with a new effective date, and will notify you of material changes (e.g., in-app or email). Your continued use after changes means you accept the updated Policy.

Questions, requests, or complaints about privacy: [email protected].