Privacy Policy

This Privacy Policy applies to all users of the ISMGenius platform, accessible at www.ismgenius.com. ISMGenius is operated by JJcoded ("we", "us", "our"). For any privacy-related enquiries, you may contact us at support@ismgenius.com.

By accessing or using ISMGenius, you acknowledge that you have read and understood this Privacy Policy.

We collect the following categories of information:

• Account information: email address and authentication identifiers provided when you register.
• User content: assignment files, rubric documents, pasted text, AI-generated feedback history, and AI detection and plagiarism scan results.
• Payment information: billing details and subscription records processed through Stripe. We do not store your full credit card number.
• Usage data: device type, browser information, IP address, pages visited, and interaction timestamps.
• Communications: messages you send to our support team.

We use the information we collect to:

• Provide, operate, and maintain the ISMGenius platform.
• Authenticate your identity and manage your account.
• Generate rubric-aligned feedback on your uploaded assignments.
• Perform AI content detection and plagiarism scanning on submitted text when you request a scan.
• Process payments and manage subscriptions.
• Detect and prevent fraud, abuse, and security incidents.
• Respond to support requests and communicate service updates.
• Comply with legal obligations.

We do not sell your personal information. We do not use your uploaded assignment content for advertising purposes.

Where required by applicable privacy law, we process your personal information on the following legal bases:

• Contract performance: processing necessary to provide you with the ISMGenius service.
• Legitimate interests: service security, fraud prevention, and platform improvement.
• Legal obligations: compliance with applicable laws and regulations.
• Consent: where you have opted in to optional communications. You may withdraw consent at any time.

We share data with the following service providers, solely to operate the platform:

• Supabase — authentication and database hosting.
• Google (Gemini API) — AI-powered feedback generation. Assignment content is sent to Google's Gemini API to generate feedback and is subject to Google's Gemini API terms of service.
• Upstash — rate limiting and job queue management.
• Stripe — payment processing.
• Winston AI — AI content detection and plagiarism scanning. When you request a detection scan, your submitted text is sent to Winston AI's API for analysis.

These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.

Your data may be processed in jurisdictions outside of Australia, including the United States, where our service providers operate. We rely on contractual safeguards and the data protection practices of our providers to protect your information during any international transfer.

We retain your personal information for as long as your account is active or as needed to provide you with the service. You may delete individual projects and feedback versions from your dashboard at any time. To request full account deletion, use our Account Deletion Request page or contact us at support@ismgenius.com.

We may retain certain data as required by law or for legitimate business purposes, such as fraud prevention and legal compliance.

Subject to applicable law, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Object to or restrict certain processing activities.
• Request data portability.
• Lodge a complaint with a data protection authority.

To exercise any of these rights, contact us at support@ismgenius.com. We will verify your identity before processing any request.

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include encryption of data in transit, secure authentication mechanisms, and access controls. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

ISMGenius is designed for use by students. If you are under the age of 16 (or the minimum age required by applicable law in your jurisdiction), you must have the consent of a parent, guardian, or authorised school representative to use the platform. We do not knowingly collect personal information from children without appropriate consent.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective" date at the top of this page. Your continued use of ISMGenius after any changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us:

• Email: support@ismgenius.com
• Phone: +61 485 708 166