1. Information We Collect

We collect information that you provide directly to us and information automatically collected when you use Essayne:

Account Information: When you sign in with Google, we collect your email address, name, and profile picture from your Google account through OAuth 2.0 authentication.

Device Information: We collect a unique device identifier stored in your browser's localStorage to track free usage limits per device. This helps us enforce fair usage policies.

Content Data: We collect the text content you submit for processing, including essays, documents, and other text input. This content is necessary to provide our AI-powered services.

Usage Data: For PRO users, we collect request history, usage patterns, service interactions, and preferences to enhance your experience and provide features like request history.

Payment Information: Subscription and payment information is processed through LemonSqueezy. We do not store credit card details. LemonSqueezy handles all payment processing in accordance with their privacy policy and PCI-DSS compliance standards.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and improve our AI-powered essay writing and analysis services
• To process your requests and generate AI-powered responses and content
• To manage your account, authenticate users, and provide customer support
• To enforce usage limits and subscription tiers
• To send you important service updates, notifications, and administrative messages
• To monitor and analyze usage patterns to improve our services
• To detect, prevent, and address technical issues, security threats, or fraudulent activity
• To comply with legal obligations and enforce our Terms of Service

3. Google OAuth Authentication

When you choose to sign in with Google, we use Google OAuth 2.0 protocol for secure authentication:

• Allows you to sign in using your Google account credentials without sharing your password
• Provides us with access to your email address, name, and profile picture from your Google account
• We use NextAuth.js for secure authentication handling and session management
• Your Google account information is stored securely in our database and used solely for account management and service provision
• You can revoke access at any time through your Google Account settings

We do not have access to your Google password, and you can discontinue the connection at any time.

4. Device-Based Tracking

To provide fair usage limits for free tier users, we implement device-based tracking:

• Each device receives a unique identifier stored in your browser's localStorage
• This identifier is used to enforce free usage limits (e.g., limited requests per device per day)
• Device tracking works independently of account login - you can use the service without signing in
• When you sign in with Google, your device may be linked to your account for enhanced features
• Clearing browser data may reset your device identifier, but server-side usage tracking is preserved
• We do not track you across different websites or services

5. Data Storage and Security

Your data is processed and stored with industry-standard security measures:

• Encryption: All data transmission is encrypted using HTTPS/TLS protocols
• Database: Data is stored in a secure PostgreSQL database hosted on Vercel with encrypted connections
• Authentication: Authentication tokens and session data are stored securely using HTTP-only cookies
• Access Controls: Access to user data is restricted to authorized personnel only
• Regular Updates: We implement regular security updates and monitoring to protect against vulnerabilities

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data using commercially acceptable means, we cannot guarantee absolute security.

6. Third-Party Services

We use the following third-party services that may collect or process your information:

• Google: For OAuth authentication. Google's use of information collected through our app is governed by Google's Privacy Policy
• OpenAI: For AI text processing and generation. Your content is sent to OpenAI's API for processing. Please review OpenAI's Privacy Policy and Usage Policies
• Google Gemini & Groq: Additional AI models may be used for text processing. Your content may be processed by these services in accordance with their respective privacy policies
• LemonSqueezy: For payment processing and subscription management. Payment data is handled by LemonSqueezy in accordance with their privacy policy and PCI-DSS compliance standards
• Vercel: For hosting, infrastructure, and database services. Data is stored on Vercel's secure servers in compliance with their security standards
• NextAuth.js: For secure authentication handling and session management

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies to understand how they handle your information.

7. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

• Account Information: Retained while your account is active. You may request deletion at any time
• Request History: Retained to provide service features, especially for PRO users who have access to their history
• Content Data: Processed content may be retained for service improvement and compliance purposes
• Device Tracking Data: Retained to enforce usage limits and prevent abuse
• Payment Records: Retained in accordance with legal and accounting requirements

Upon account deletion, we will delete or anonymize your personal data, except where we are required to retain it by law or for legitimate business purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request access to your personal data and information about how it's being used
• Deletion: Request deletion of your account and associated personal data
• Correction: Update or correct inaccurate or incomplete account information
• Data Portability: Request a copy of your data in a portable, machine-readable format
• Objection: Object to certain processing of your personal data
• Restriction: Request restriction of processing in certain circumstances
• Revoke Consent: Revoke our access to your Google account through your Google Account settings

To exercise these rights, please contact us at privacy@essayne.com. We will respond to your request within a reasonable timeframe.

9. Cookies and Local Storage

We use the following storage mechanisms:

• LocalStorage: To store your device identifier for usage tracking and preferences
• Session Cookies: To maintain your login session when you sign in with Google (HTTP-only, secure cookies)
• Authentication Cookies: Secure, HTTP-only cookies for NextAuth.js session management

You can manage cookies and local storage through your browser settings. Clearing these may reset your device identifier, log you out, and remove saved preferences.

10. Children's Privacy

Essayne is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using Essayne, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We may also notify you via email or through the service for significant changes. You are advised to review this Privacy Policy periodically for any changes. Your continued use of the service after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@essayne.com

For general inquiries, visit our Help page or contact support@essayne.com.

Last updated: January 13, 2026