Privacy Policy

Last updated: June 2025

HSCHaven is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By using HSCHaven, you agree to the practices described in this policy.

1. Information We Collect

We collect the following types of information:

• Account information: Your email address when you create an account or sign in.
• Purchase information: Records of subjects you have unlocked, processed securely through Stripe. We do not store your payment card details — these are handled entirely by Stripe.
• Study notes: Notes you write within the platform, stored against your account so they sync across devices.
• Essay content: Essays you submit for AI marking. These are sent to Anthropic's API for processing and are not stored by HSCHaven after the response is returned.
• Usage data: Basic technical data such as browser type and pages visited, collected automatically through our hosting provider (Vercel).

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain your HSCHaven account.
• Process payments and grant access to purchased subjects.
• Sync your study notes across devices.
• Deliver AI-powered essay marking via Anthropic's API.
• Send transactional emails (e.g. sign-in links, payment receipts) via our email provider.
• Improve the platform and diagnose technical issues.

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

3. Third-Party Services

HSCHaven relies on the following third-party services, each with their own privacy practices:

• Supabase — authentication and database storage. Privacy Policy
• Stripe — payment processing. Privacy Policy
• Anthropic — AI essay marking. Essays you submit are processed by Anthropic's API. Privacy Policy
• Vercel — website hosting. Privacy Policy
• Resend — transactional email delivery.

4. Data Storage and Security

Your account data and notes are stored securely in Supabase's cloud infrastructure. We use row-level security to ensure users can only access their own data. Payments are processed by Stripe and we never store card details on our servers.

While we take reasonable steps to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique email address for your account.

5. Data Retention

We retain your account information and study notes for as long as your account is active. If you wish to delete your account and associated data, please contact us at support@hschaven.com.au and we will process your request promptly.

6. Cookies and Local Storage

HSCHaven uses browser local storage to save your theme preference and, in some cases, temporary unlock status after a purchase. We do not use tracking cookies or advertising cookies.

7. Children's Privacy

HSCHaven is designed for HSC students aged 16–18. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us at support@hschaven.com.au.

8. Your Rights

Under Australian Privacy law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal data.

To exercise any of these rights, please contact us at support@hschaven.com.au.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when changes are made. Continued use of HSCHaven after any update constitutes acceptance of the revised policy.

10. Governing Law

This Privacy Policy is governed by the Privacy Act 1988 (Cth) and applicable NSW law. HSCHaven operates from New South Wales, Australia.