Privacy Policy

This policy describes what data stetbot ("we", "us") collects when you use stetbot.com, how it is used, and the choices you have. We keep it short because the practices are simple.

What we collect

• Account data. Your email address and a hashed password (or auth provider identity), managed by our authentication provider, Supabase.
• Content you submit. Rubrics, essays, and other text you paste or upload for grading, and the grading results. These are stored in your account history so you can revisit them.
• Payment data. If you subscribe to Pro, payments are processed by Stripe. We never see or store your card number — we store only your subscription status and a Stripe customer reference.
• Usage data. Anonymous page analytics and performance metrics via Vercel Analytics. We do not use advertising trackers.

How your content is processed

When you grade an essay, the text you submit is sent to OpenAI's API to produce the grading. Under OpenAI's API terms, content submitted via the API is not used to train OpenAI's models. We do not use your submissions to train any model, and we do not sell your data to anyone.

Your essays and grading results are stored in our database (hosted by Supabase) and are only accessible from your account. They are not shared with other users, and access is restricted by row-level security.

Service providers

We rely on a small number of processors to run the service: Supabase (authentication and database), OpenAI (grading), Stripe (payments), and Vercel (hosting and analytics). Each receives only the data needed to perform its function.

Retention and deletion

• You can delete any grading from your History at any time; deletion is immediate and permanent.
• To delete your entire account and all associated data, email us at the address below and we will complete the deletion within 30 days.
• Stripe retains payment records as required for financial compliance.

Students and minors

stetbot is intended for users aged 13 and older. If you are under 18, use stetbot with the knowledge of a parent, guardian, or teacher. If you believe a child under 13 has created an account, contact us and we will delete it.

Security

All traffic is encrypted in transit (TLS). Database access is gated by row-level security tied to your authenticated session. Server-side secrets are never exposed to the browser.

Changes

If we make material changes to this policy, we will update the effective date above and note the change in the changelog.

Contact

Questions or deletion requests: eanyje@gmail.com