← Back to GradeMap

Privacy Policy

Effective date: 5 April 2026

GradeMap (“we”, “us”, “our”) is operated from Australia. We are committed to protecting your privacy in accordance with the Australian Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the EU General Data Protection Regulation (GDPR) where applicable.

1. What we collect

We collect only what is necessary to provide and improve our service:

  • Email address — when you sign up for early access or create an account.
  • Subject content you provide — subject outlines, lecture notes, assignment briefs, and other academic material you paste or upload into GradeMap. This content is processed to generate your study plan and coaching sessions.
  • Usage data — how you interact with the service (pages visited, features used, session duration). This is collected through privacy-respecting analytics and does not include advertising trackers.
  • Device and browser information — browser type, operating system, and screen size, collected automatically for service functionality.

We do not collect sensitive information such as health records, financial details, or government identifiers unless you voluntarily include such information in content you paste into the service.

2. How we use your information

  • To provide the GradeMap study coaching service.
  • To send you product updates and early access notifications (you can unsubscribe at any time).
  • To improve the service based on aggregated, anonymised usage patterns.
  • To respond to support requests.

We do not sell your personal information. We do not use your subject content to train AI models.

3. Third-party processors

We use the following third-party services to operate GradeMap:

  • AI providers (e.g. Anthropic, OpenAI) — your subject content is sent to AI providers to generate study plans and coaching responses. These providers process data under their own privacy policies and data processing agreements. Content sent to AI providers is not used to train their models under our commercial agreements.
  • Formspree — processes email sign-up submissions from our landing page.
  • Hosting provider — serves the GradeMap website and application.

We only share information with third parties where necessary to provide the service, and we require all processors to handle your data in accordance with applicable privacy laws.

4. BYO API key

If you choose to use GradeMap with your own API key (“BYO API Key” plan), your API key is used solely to make requests to the AI provider on your behalf. We do not store your API key on our servers beyond the duration of your active session, and we do not use it for any purpose other than processing your requests. Your usage and billing relationship with the AI provider is directly between you and that provider.

5. Data retention

  • Account data — retained while your account is active and for 30 days after deletion request.
  • Subject content — retained while your account is active. Deleted within 30 days of account deletion or on request.
  • Early access email list — retained until you unsubscribe or we conclude the early access period.
  • Usage analytics — retained in aggregated, anonymised form. Individual session data is deleted after 90 days.

6. Your rights

Under the Australian Privacy Act, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Complain to us or the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.

Under the GDPR (applicable if you are in the EU/EEA/UK), you additionally have the right to:

  • Request erasure of your personal data.
  • Request restriction of processing.
  • Data portability (receive your data in a structured, machine-readable format).
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with your local data protection authority.

Our lawful basis for processing under the GDPR is: consent (for marketing emails), contract performance (for providing the service), and legitimate interests (for analytics and service improvement).

7. Cookies

We use essential cookies required for the service to function (e.g. session management). We do not use third-party advertising or tracking cookies. If we introduce non-essential cookies in the future, we will obtain your consent before setting them.

8. Data security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest. However, no system is perfectly secure. We encourage you not to paste highly sensitive personal information (e.g. medical records, financial account numbers) into the service.

9. Children

GradeMap is designed for tertiary (university/college) students. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will delete it promptly.

10. International data transfers

Your data may be processed in countries outside Australia, including the United States (where our AI providers are based). Where data is transferred internationally, we ensure appropriate safeguards are in place, including data processing agreements with standard contractual clauses where required by GDPR.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the email address associated with your account. The effective date at the top of this page will be updated accordingly.

12. Contact

For privacy-related requests or complaints:

Email: privacy@grademap.com.au

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.