Privacy Policy

What we collect

• Account data: email, password hash, optional name, exam date, and jurisdiction.
• Study activity: your practice answers, written submissions, grading results, study plans, and pasted class notes — the product is built on this data existing for you.
• Payments: handled by Stripe. Card numbers never touch Gavel's servers; we store only Stripe's customer and purchase references.
• Email leads: if you sign up for launch updates, we store your email address and where you entered it.

What we don't do

• No advertising trackers, no third-party analytics cookies.
• We never sell your data.
• Your class notes, briefs, and written answers are private to your account — never shared with other users and never merged into the public question bank.

AI processing

When you request AI features (question generation from your notes, grading of a written answer), the relevant text is sent to our AI provider (Anthropic) to produce the result you asked for. We log token counts and costs for each call. We do not use your content to train models.

Cookies

Gavel uses only the session cookie required to keep you signed in. No consent banner is needed because there is nothing else to consent to.

Retention and deletion

Your data is retained while your account is active. To delete your account and its data, email contact@gavelstudy.com; we remove personal data within 30 days, except records we must keep for payment or legal compliance.

Security

Passwords are stored as bcrypt hashes; access to gated content and admin tools is enforced server-side; payments are processed by Stripe. No system is perfectly secure; report suspected issues to contact@gavelstudy.com and we will act quickly.

Changes

Material changes to this policy will be posted here with a new date.