Privacy Policy

Last updated: February 2026

What We Collect

• Account information: Your name and school email address (@gilroyunified.org), used for authentication.
• Analysis metadata: Classification scores, word counts, and statistical measures from each scan. Essay text is never stored.
• Security logs: IP addresses, timestamps, and event types for failed authentication attempts and security events. Retained for 90 days.

Third-Party Services

Essay text is sent to GPTZero (gptzero.me) for AI detection analysis. GPTZero processes the text and returns classification scores. Refer to GPTZero's privacy policy for their data handling practices.

Data Retention

• Analysis results (scores only, no essay text): retained indefinitely for teacher reference.
• Security logs: automatically purged after 90 days.
• Sessions: expire after 8 hours or 30 minutes of inactivity.

FERPA Compliance

EssayDetect is designed with FERPA considerations in mind. No student-identifiable information is stored — only the submitting teacher's account is linked to results. Essay text is processed transiently and not persisted.

Data Security

• Authentication via WebAuthn passkeys (no passwords stored).
• Session tokens are hashed before storage.
• All connections use HTTPS/TLS encryption.
• Hosted on Cloudflare's infrastructure with DDoS protection.

Your Rights

To request data deletion or export, contact your school administrator or email the site operator.