1. Overview
This policy explains what information MyTCFLab collects, how we use it, and how we protect it. By using MyTCFLab, you agree to this policy.
2. What We Collect
We collect account information (such as your name and email address, including when you sign in with Google), the essays and answers you write, the corrections, translations, and example answers generated for them, your practice progress, and the messages and attachments you send to support.
We also collect basic operational data needed to run and secure the service, such as sign-in activity, your time zone, and usage counts that enforce fair-use limits.
3. How We Use Your Data
We use your data to provide the product, generate AI feedback and analysis, maintain account functionality, answer support requests, prevent abuse, and improve reliability. We do not sell your personal data.
4. Service Providers and AI Processing
To deliver the service, the text you submit is processed by third-party providers acting on our behalf: Google (AI corrections, example answers, and translation), Clerk (sign-in and account management), our hosting and database providers, HubSpot (support requests), and Stripe (payments, where paid plans are offered).
These providers receive only what is needed for their function and process it under their own terms.
5. Model Training and Content Use
We do not intentionally use your private essays or other writing to train MyTCFLab models. Third-party AI providers may process data only to provide the requested service under their own terms.
6. Access Controls and Security
We use technical and organizational safeguards such as access controls and encrypted transport. Internal access is limited to authorized personnel when needed for support, security, legal compliance, or abuse prevention.
7. Data Retention and Deletion
Your essays, corrections, and progress are kept for as long as your account is active. You can clear your correction history yourself from the app, and you can request deletion of your account and related data by contacting us. Deleted data is removed from active systems within a reasonable period and may persist in backups for a limited time.
Operational logs are kept for a short period, currently 30 days, and then removed automatically.
8. Your Choices
You can ask us to access, correct, export, or delete the personal data we hold about you. We may need to verify your identity before acting on a request.
9. Changes and Contact
We may update this policy from time to time. The effective date above shows when it last changed.
Privacy questions and data requests can be sent to [email protected].