Privacy Policy
This Privacy Policy explains how ISMGenius collects, uses, and protects your personal information when you use our platform.
This Privacy Policy applies to all users of the ISMGenius platform, accessible at www.ismgenius.com and through our Android app. ISMGenius is operated by JJcoded ("we", "us", "our") in Queensland, Australia, and we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. For any privacy-related enquiries, you may contact us at support@ismgenius.com.
By accessing or using ISMGenius, you acknowledge that you have read and understood this Privacy Policy.
We collect the following categories of information:
- Account information: email address, authentication identifiers, your name (if provided by you or your sign-in provider), an optional profile photo, and your school or institution if you choose to set one.
- User content: assignment files, rubric documents, task sheets, pasted text, personal notes, AI-generated feedback history, and AI detection and plagiarism scan results.
- Payment information: billing details and subscription records processed through Stripe. We do not store your full credit card number.
- Usage data: device type, browser information, IP address, pages visited, interaction timestamps, upload counts, and approximate last-active time.
- Referral and campaign data: if you arrive via a referral or share link, we record the campaign parameters from that link (source, channel, code) so we can attribute sign-ups.
- Feedback you give us: ratings of AI feedback, survey responses (including optional year level and how you discovered us), and messages you send to our support team.
We use the information we collect to:
- Provide, operate, and maintain the ISMGenius platform.
- Authenticate your identity and manage your account.
- Generate rubric-aligned feedback on your uploaded assignments.
- Perform AI content detection and plagiarism scanning on submitted text when you request a scan.
- Process payments and manage subscriptions.
- Detect and prevent fraud, abuse, and security incidents, including rate limiting.
- Attribute referrals and measure which campaigns and features work.
- Respond to support requests and communicate service updates.
- Send optional product update emails — only if you have opted in, and you can opt out at any time in Settings.
- Comply with legal obligations.
We do not sell your personal information. We do not use your uploaded assignment content for advertising purposes, and we do not use it to train our own or third parties' AI models.
Where required by applicable privacy law (for example, if you access the service from a jurisdiction such as the European Union), we process your personal information on the following legal bases:
- Contract performance: processing necessary to provide you with the ISMGenius service.
- Legitimate interests: service security, fraud prevention, and platform improvement.
- Legal obligations: compliance with applicable laws and regulations.
- Consent: where you have opted in to optional communications. You may withdraw consent at any time in Settings or by contacting us.
Your data may be processed in jurisdictions outside of Australia, including the United States, where our service providers operate. Where we disclose personal information overseas, we take reasonable steps as required by Australian Privacy Principle 8 — including contractual safeguards with our providers — to ensure your information is handled consistently with Australian privacy law.
We keep personal information only as long as needed for the purposes described in this policy:
- Free accounts: assignments, uploaded files, and feedback reports are automatically deleted approximately 30 days after creation.
- Anonymous (signed-out) reports: automatically deleted within hours unless you create an account and claim them.
- Pro and Educator accounts: assignments and feedback are retained while your account remains active so your history stays available, until you delete them or your account.
- Detection scan results: retained with the linked assignment, or until you delete them from your scan history.
- Account records: retained while your account is active.
- Operational logs and analytics: retained for a limited period for security, abuse prevention, and reliability monitoring, then deleted or aggregated.
- Billing records: retained as required by Australian tax, accounting, and fraud-prevention obligations, even after account deletion.
You may delete individual projects and feedback versions from your dashboard at any time. To request full account deletion, use our Account Deletion Request page or contact us at support@ismgenius.com. We aim to complete account deletion requests within 30 days.
Subject to applicable law, you may have the right to:
- Access the personal information we hold about you — you can download a copy of your data anytime from Settings → Privacy & data → Download my data.
- Request correction of inaccurate information — your name, photo, and school can be edited in Settings.
- Request deletion of your personal information.
- Opt out of product update emails — toggle Settings → Privacy & data → Product updates by email, or use the unsubscribe link in any marketing email.
- Object to or restrict certain processing activities.
- Request data portability.
- Lodge a complaint with a data protection authority (see Section 14).
To exercise any right that is not self-service, contact us at support@ismgenius.com. We will verify your identity before processing any request and respond within a reasonable period (and within any timeframe required by law).
We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include encryption of data in transit (TLS), encryption at rest with our hosting providers, row-level access controls on our database, private storage for uploaded files, secure authentication, rate limiting, and least-privilege access for administrators. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
If a data breach occurs that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988 (Cth), and will take prompt steps to contain and remediate the breach.
ISMGenius is designed for use by students, including secondary school students. If you are under the age of 16 (or the minimum age required by applicable law in your jurisdiction), you should only use the platform with the knowledge and consent of a parent, guardian, or authorised school representative. We collect only the information needed to provide the service, we do not sell students' personal information, we do not use student work to train AI models, and we do not show advertising.
Parents and guardians may contact us at support@ismgenius.com to access, correct, or delete their child's information. If we become aware that we have collected personal information from a child without appropriate consent, we will delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective" date at the top of this page and, where the changes significantly affect how we handle your personal information, notify you in the app or by email. Your continued use of ISMGenius after any changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or wish to exercise your data rights, contact us:
- Email: support@ismgenius.com
- Phone: +61 485 708 166
If you are not satisfied with our response to a privacy complaint, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.