Privacy Policy

Last updated: December 18, 2024

Introduction

Purpose of the policy

Protecting your privacy is important to us, and this document explains how we collect, use, and safeguard your personal information. Our goal is to be transparent and ensure you understand how your data is managed when you interact with our services.

This privacy policy outlines:

  • What personal information we collect.

  • How we use, handle, and store your data.

  • Your rights regarding your information and privacy.

  • The measures we take to keep your data secure.

We aim to provide clear information so you can feel confident and informed when using our services.

Scope

This Privacy Policy applies to all services and interactions with WeWillWrite, where we operate as the data controller. This means we are responsible for deciding how and why your personal data is processed. The scope includes all personal information collected through our platforms, communication channels, and any related services.

It also addresses specific considerations like international data transfers, compliance with regulations such as FERPA and COPPA, and the use of artificial intelligence in handling personal information.

If you are part of a school or school district, a separate data processing agreement may apply, with the school or district serving as the data controller. In such cases, please contact your school or district to learn how your data is processed.

If you represent a school, school district, or organization and require a signed data processing agreement to comply with FERPA or other regulations, please contact privacy@wewillwrite.com for assistance and to address any questions you may have.

By using our services, you trust us with your data, and this policy is our commitment to handle it responsibly and transparently.

Personal information we collect

We've created the table below to outline what personal information we collect, why we collect it, and how long it is stored.

Information collected about teachers linked to their identity

Information What is it used for? How long is it stored?
Name To personalize the service for them. Until they delete their account.
Email
  • To provide secure login.
  • To provide support and communications.
 Until they delete their account.
Phone number Optional alternative to Email. Until they delete their account.
Password To provide secure login. Until they delete their account.
Country, state and school
  • To personalize the service for them.
  • Organize services by location and school.
 Until they delete their account.
Usage data (IP address, browser type, browser version, the pages of our Service that they visit, the time and date of their visit, the time spent on those pages, unique device identifiers and other diagnostic data)
  • To improve and analyze our service.
  • For error tracking.
 Until they delete their account.

Information collected about students linked to their identity

Information What is it used for? How long is it stored?
First Name
  • To let the teacher identify students and access students' results.
  • To reduce bullying.
  • As part of a unique identifier for tracking students' progress over time without requiring more complex login methods like email and passwords for every student.
  • Until the specific class the student belongs to is deleted.
  • Or until the teacher's account is deleted. (referring to the teacher who owns the class the student belongs to).
Last Name
  • To let the teacher identify students and access students' results.
  • To reduce bullying.
  • As part of a unique identifier for tracking students' progress over time without requiring more complex login methods like email and passwords for every student.
  • Until the specific class the student belongs to is deleted.
  • Or until the teacher's account is deleted. (referring to the teacher who owns the class the student belongs to).
Class ID To associate a student with their teacher's class.
  • Until the specific class the student belongs to is deleted.
  • Or until the teacher's account is deleted. (referring to the teacher who owns the class the student belongs to).
Device ID / Browser ID (App assigned device identifier) Helps us recognize a returning student:
  • To autofill their name.
  • To increase reliability of tracking students progress and learning outcomes over time.
Until the device is no longer associated with the student.
Texts written by the student
  • To give their teacher insight into how the student is using WeWillWrite.
  • To measure progress and learning outcomes.
  • Until the the student is deleted from the class where the text was written.
  • Or until the specific class the student belongs to is deleted.
  • Or until the teacher's account is deleted. (referring to the teacher who owns the class the student belongs to).

Information collected from students, but not linked to their identity

Information What is it used for? How long is it stored?
Usage data (IP address, browser type, browser version, the pages of our Service that they visit, the time and date of their visit, the time spent on those pages, unique device identifiers and other diagnostic data)
  • To improve and analyze our service.
  • For error tracking.
 Indefinently.

Sharing and disclosure of information

WeWillWrite may share or disclose your information in the following situations:

  1. With Your Consent: When you explicitly agree, such as through accepting terms.
  2. To Provide Services: Sharing with service providers for tasks like payment processing or email delivery.
  3. Legal Obligations: To comply with laws, regulations, or law enforcement requests.
  4. Business Operations: With affiliates or during mergers, acquisitions, or sales.
  5. Fraud Prevention and Security: To prevent fraud, illegal activities, or security breaches.

Your rights and choices

You have the following rights regarding your personal data:

  • Access, Update, or Delete Your Data: Manage your personal data directly in your account settings. If you need assistance, contact us. You can also request a copy of your data.
  • Correct Your Data: Request corrections to any incomplete or inaccurate information we hold about you.
  • Object to Data Processing: If we process your data based on legitimate interests or for direct marketing, you can object to this.
  • Request Data Deletion: You may delete your account directly from account settings. If you need assistance, contact us.
  • Transfer Your Data: Receive or transfer your data in a standard, machine-readable format, where applicable.
  • Withdraw Consent: You can withdraw your consent to data use at any time, though this may limit your access to some of our services.

Data security

Measures to protect your information

  • Access Control: Only authorized team members with a specific need can access personal data necessary for performing their role.
  • Confidentiality Agreements: All team members with access to Personal Data are required to sign a confidentiality agreement.
  • Encryption in Transit: Information sent between systems is encrypted for protection.
  • Encryption at Rest: Stored data is encrypted to maintain its integrity and confidentiality.
  • Secure Systems: Our servers and systems are regularly updated and patched to guard against the latest security threats.
  • Regular Backups: Data is backed up daily, stored securely for 30 days, and maintained with zone redundancy to ensure availability and recovery in case of unexpected incidents.
  • Data Minimization: We only collect and store the personal information necessary for providing our services.
  • Employee Training: Our team undergoes regular training on data privacy and security best practices.

Breach response plan

If a data breach compromises the security, confidentiality, or integrity of Personal Data maintained by WeWillWrite, affected users will be notified within 72 hours of confirmation.

The notification will include, at a minimum:

  • The notification date.
  • The types of personal data involved.

When available, it will also provide:

  • A summary of the breach.
  • The date, estimated date, or date range of the breach.
  • Steps being taken to prevent future breaches.

Personal information and artificial intelligence

  • We do not use teacher or student personal information to train artificial intelligence models.
  • WeWillWrite maintains ownership of the input and outputs (on your behalf).
  • The third-party AI model providers we work with do not utilize teacher or student data from WeWillWrite users to train their AI models.
  • When an AI is prompted within WeWillWrite, the teacher's personal information is not included in the prompt shared with the model provider.
  • Similarly, when an AI is prompted within WeWillWrite, students' personal information, such as their names, school and ip-address, is not included in the prompt shared with the model provider.

FERPA compliance

We adhere to FERPA requirements when applicable. Under FERPA, we act as a "school official" for our school or school district customers. This designation means we operate under the direct control of the school or district and use students' personal information solely to deliver our services to them.

COPPA compliance

We are fully compliant with the Children's Online Privacy Protection Act (COPPA). The Federal Trade Commission (FTC) has determined that, based on practical considerations, schools may provide consent on behalf of parents when data collection is "solely for the benefit of students and the school system" and is confined to the "educational context."

Your parental rights

  • Parental Access and Control: Parents can review their child's personal information and request its deletion at any time.
  • Opt-Out Options: Parents may opt out of the collection, use, or sharing of their child's information.

Exercising your rights

Due to the nature of our service, where students do not hold individual accounts, we are unable to verify parental identities. For security reasons, parents must contact their child's teacher to exercise their rights regarding their child's personal information.

If you have any questions or need further assistance, please reach out to your child's teacher or contact our support team.

International data transfers

We operate globally, but all of our server infrastructure is located in the United States. This means that any data you provide to us will be stored and processed in the United States, regardless of your country of residence. By using our services, you acknowledge and consent to this transfer of your data to the United States.

Our commitments

  • No Selling or Sharing of Personal Information: We do not sell, rent, or share personal information with third parties for any purpose, including marketing.
  • No Personalized Advertising or Data Profiling: We do not display personalized ads or create data profiles for advertising purposes.
  • No Unauthorized Data Collection or Tracking: We prohibit third parties from collecting personal information or using it to track or target users across platforms.
  • Protecting Student Data: WeWillWrite will never use student data for commercial purposes, nor will we allow any third parties to do so.

Updates to this privacy policy

We occasionally make updates to our Privacy Policy to keep it up to date and ensure transparency. Whenever changes are made, we'll let you know by posting the updated policy here.

Additionally, we'll notify you in advance through email or a noticeable announcement on our service. The "Last updated" date at the top of the policy will also be refreshed so you can easily see what's new.

Contact us

If you have any questions about our Privacy Policy, feel free to reach out to us by email at privacy@wewillwrite.com.