1. Introduction

Wright Grading ("we," "our," or "us") is committed to protecting your privacy and complying with the Protection of Personal Information Act (POPIA) of South Africa. This Privacy Policy explains how we collect, use, store, and protect your personal information.

By using our platform, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Username: Your public display name (required)
• Email Address: For account verification and communication (required)
• Password: Encrypted and securely stored (required)
• Full Name: Optional, stored separately with restricted admin-only access
• Phone Number: Optional contact information

2.2 Academic Submissions

• Assignment files (questions, attempts, supporting documents)
• Subject area and academic level
• Instructions and requirements
• Grading rubrics (optional)

2.3 Usage Information

• IP address (for security and consent tracking)
• Browser type and version
• Pages visited and features used
• Submission and grading history

3. How We Use Your Information

3.1 Primary Purposes

• Service Delivery: Process submissions, assign teachers, deliver graded work
• Communication: Send notifications, updates, and important announcements
• Payment Processing: Handle payments for grading services
• Quality Assurance: Review grading quality and teacher performance

3.2 Data Minimization

We practice data minimization in compliance with POPIA Section 14:

• Teachers only see your username, not your real name or email
• Real names are stored separately with admin-only access
• We only collect information necessary for service delivery

4. Who Can Access Your Information

4.1 Students (You)

• View your own submissions and graded work
• See your username and account information
• Access your payment history

4.2 Teachers

✓ Teachers CAN see:

• Your username (e.g., "johndoe123")
• Assignment files and instructions
• Subject area and academic level

✗ Teachers CANNOT see:

• Your real name
• Your email address
• Your phone number
• Any personally identifiable information

4.3 Administrators

• Access to real names for verification and legal purposes only
• View platform statistics and user management
• Process teacher applications

4.4 Third Parties

• Payment Processor (Yoco): Processes payments securely
• Email Service (Resend): Sends transactional emails
• AI Service (Google Gemini): Powers our AI assistant "Father"
• We do NOT sell your data to third parties

5. Your Rights Under POPIA

5.1 Right of Access (Section 23)

You have the right to request a copy of all personal information we hold about you.

5.2 Right to Correction (Section 24)

You can update your profile information at any time through your account settings.

5.3 Right to Deletion (Section 24)

You can request account deletion at any time. We will:

• Delete your profile and personal information
• Anonymize your submissions (remove identifying information)
• Retain anonymized data for analytics only

5.4 Right to Object (Section 11)

You can withdraw consent for marketing communications at any time.

6. Data Retention

We retain your data as follows:

• Active Accounts: Data retained while account is active
• Completed Submissions: Archived after 90 days
• Payment Records: Retained for 5 years (tax compliance)
• Deleted Accounts: Personal data deleted within 30 days

7. Security Measures

We implement industry-standard security measures:

• Encryption: All data transmitted over HTTPS (TLS 1.3)
• Password Security: Passwords hashed using bcrypt
• Access Control: Role-based access with Row Level Security
• Monitoring: 24/7 security monitoring and alerts
• Regular Audits: Quarterly security reviews

8. Consent

By creating an account, you consent to:

• Collection and processing of your personal information as described
• Sharing your username with teachers for grading purposes
• Receiving transactional emails related to your submissions

You can withdraw consent at any time by deleting your account or contacting us.

9. Children's Privacy

Our service is intended for users aged 18 and above. If you are under 18, you must have parental or guardian consent to use our platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via:

• Email notification to your registered email address
• Prominent notice on our platform
• Updated "Last Updated" date at the top of this policy

11. Contact Us

For privacy-related questions or to exercise your rights under POPIA, contact:

12. Complaints

If you believe we have violated POPIA or your privacy rights, you can lodge a complaint with: