Privacy policy (draft placeholder)

Draft. Have this checked before launch.

Controller/operator: Kateryna Bobrova, operating CommentWell. Contact: hello@example.com. [Address to be added]

What we process

Student first names (plus an optional last initial, such as "Amira K.", to tell pupils with the same first name apart), the strengths and growth areas you tick, your personal notes, and an optional writing sample. Only the first name is sent to the AI provider; the last initial stays in your browser and appears only in your list and your exported files. These are processed only for as long as it takes to generate a comment. We do not store them in a database. Your class list stays in your browser session.

We ask you not to enter full surnames or any special-category data (e.g. health, SEN diagnoses).

Processors

AI provider [to be named] for text generation; Stripe for payments; hosting provider [Vercel]. [Analytics provider, if enabled.]

Legal basis & your rights

[Art. 6(1)(b)/(f) GDPR, to be confirmed.] You have the right to access, rectify, erase, restrict and object, and to complain to a supervisory authority.