Draft, not legal advice. This is a starting-point template, not a compliance document. Have a qualified lawyer review and adapt it (including for GDPR, CCPA, PIPEDA, or other jurisdiction-specific requirements relevant to where your users are located) before relying on it in production.

Privacy Policy

Last updated: July 31, 2026

1. Who we are

IELTsBandLift ("we", "us") is a service operated by SaaSphire LLC, providing IELTS General Training writing practice and feedback at ieltsbandlift.com (the "Service"). This policy explains what personal data we collect, how we use it, and the choices you have.

2. Information we collect

  • Account information: when you sign in with Google, we receive your name, email address, and profile image from Google.
  • Content you submit: the essays and letters you write for scoring, along with the resulting scores, feedback, and flagged error categories.
  • Billing information: if you subscribe, payment is processed by Stripe. We do not store your card details — Stripe handles that directly.
  • Usage and technical data: basic request metadata (such as IP address and timestamps), used for security, abuse prevention (see Section 6), and diagnosing issues.

3. How we use your information

  • To provide the Service: score your submissions, track your progress, and show your error-pattern history.
  • To operate your account and subscription.
  • To communicate with you about your account or the Service.
  • To maintain security and prevent abuse.
  • To improve the Service.

4. Third parties we share data with

Your data is shared only as needed to operate the Service:

  • OpenAI— the content of your submissions is sent to OpenAI's API to generate scores and feedback.
  • Stripe — used to process subscription payments.
  • Google — used for authentication (sign-in).
  • Our hosting/database providers — used to run the Service and store your data.

We do not sell your personal data or your essay content to third parties.

5. Data retention

We retain your account and submission history for as long as your account is active, so you can track your progress over time. You can request deletion of your account and associated data at any time (see Section 8).

6. Abuse prevention

To limit misuse of free trial credits, we record the IP address associated with account creation and may reduce the trial credits granted to accounts created from an IP address that has already claimed a trial. This is a fraud-prevention measure, not a general tracking mechanism.

7. Data security

We use reasonable technical and organizational measures to protect your data, including encrypted connections and access controls. No system is completely secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at hello@ieltsbandlift.com.

9. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them.

10. International data transfers

Your data may be processed in countries other than your own, including the country where our hosting and AI-processing providers operate. Where required, we rely on appropriate safeguards for such transfers.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

12. Contact

Questions about this policy can be sent to hello@ieltsbandlift.com.