Privacy policy

Who is responsible for your data

The controller of your personal data is Artur Muszyński, who runs Allez7 as a sole proprietorship registered in Poland:

For any question about your data, write to artur@allez7.com. We have not appointed a data protection officer, as the law does not require one for our activity. Artur Muszyński is also the person in charge of the protection of personal information under Quebec law.

1. Texts you submit for grading

When you use the writing grader, your text and the task prompt are sent to OpenRouter, which forwards them to the AI models that check and grade your text: currently a classifier from TypeSafe, which checks that the text is an exam answer, and a model from Mistral AI, which grades it. We use your text only to grade it and show you the result.

We do not store your text in our database. We keep the result: the section, the prompt you chose (if it is one of ours), the word count, the scores per criterion, the estimated level, the model used and its cost, linked to a hashed identifier of your browser. We use these results to count your free gradings and to improve the accuracy of the grader.

OpenRouter and the model providers may keep requests for a limited time under their own terms, for example to prevent abuse. Please do not put personal information about yourself or other people in your text.

Legal basis: providing the service you ask for (GDPR, Art. 6(1)(b)) for the grading; our legitimate interest in improving the grader (Art. 6(1)(f)) for the stored results.

2. Abuse prevention and security

To keep the service free and stop automated abuse, we log each grading attempt with a keyed one-way hash of your IP address and of your browser identifier, the time and the outcome (for example, rejected because the text was not an exam answer). We never store your IP address in clear. This log is deleted after 30 days.

The grader and the waitlist form are protected by Cloudflare Turnstile, which processes technical data about your browser and your IP address to check that you are human.

Legal basis: our legitimate interest in protecting the service against abuse and keeping its costs under control (Art. 6(1)(f)).

3. Cookies

We set one strictly necessary cookie, allez7_sid. It holds a random identifier that lets us count your free gradings, contains nothing else and expires after one year. Because it is strictly necessary for the service you ask for, it does not need your consent. We use no advertising cookies and no third-party analytics.

4. Usage statistics

We measure how the site is used with our own system, without third-party trackers. We record product events in our own database: pages viewed, gradings submitted and completed, when the free limit is reached, when the plans are shown or clicked, waitlist signups and use of the score calculator. Events never contain your email address or your text. For the score calculator we record only the resulting NCLC levels and points, not the scores you type.

To count visitors without a cookie, each event carries an identifier computed as a keyed hash of your IP address, your browser’s user agent and the date. It changes every day, nothing is stored in your browser, and it cannot be turned back into your IP address. For the first page of a visit we also record a coarse source (search engine, AI assistant, social network, another website or direct), the domain of the referring website and any campaign (UTM) tags in the link, but never the full referring address.

We keep these events for up to 25 months. Legal basis: our legitimate interest in understanding and improving the site (Art. 6(1)(f)). You can object at any time by writing to us.

5. Waitlist

If you join the waitlist, we store your email address, your consent with the version of the wording you accepted, the date and time, the language of the site, the price you chose, where on the site you signed up and the coarse source of your visit. We use them only to email you about the waitlist and the launch of the Allez7 plans, and to honour the founding price you reserved.

Legal basis: your consent (GDPR, Art. 6(1)(a); express consent under Canada’s anti-spam legislation, CASL). We keep your data until you withdraw your consent or ask us to delete it. If we decide not to launch the paid plans, we delete the list.

6. Emails you send us

If you write to artur@allez7.com, we use your message and address to answer you, and keep them as long as needed to handle your request and any related legal claim. Legal basis: our legitimate interest in answering you (Art. 6(1)(f)).

7. Hosting

Our hosting provider processes technical data such as your IP address and browser type to deliver the pages, and keeps short-lived server logs for security and troubleshooting. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f)).

8. Who processes your data for us

We do not sell your data and do not share it for advertising. These service providers process data on our behalf and on our instructions:

• Vercel Inc. (United States): website hosting and server logs.
• Neon (United States): our database (grading results, attempt log, usage events, waitlist).
• OpenRouter, Inc. (United States) and the AI model providers it routes your text to, currently TypeSafe and Mistral AI (France): checking and grading your text.
• Cloudflare, Inc. (United States): bot protection with Turnstile.
• Our email provider: receiving the messages you send us.

9. International transfers

Allez7 is run from Poland, and some of our providers are based in the United States or process data there. When personal data from the European Economic Area is transferred outside it, we rely on the EU–US Data Privacy Framework for certified providers, or on the European Commission’s standard contractual clauses.

If you are in Canada, your data is processed outside Canada, mainly in the European Union and the United States, and may be accessible to the courts and authorities of those countries under their laws.

10. How long we keep your data

• Texts submitted for grading: not stored in our database.
• Grading results: as long as we run the grader, linked only to a hashed browser identifier.
• Grading attempt log: 30 days.
• Usage events: up to 25 months.
• Waitlist: until you withdraw your consent or we close the list.
• The allez7_sid cookie: one year.

11. Your rights

Under the GDPR, if you are in the European Economic Area, you can ask for access to your data, its correction or erasure, the restriction of its processing and its portability, and you can object to processing based on our legitimate interest. You can also complain to a supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or the authority where you live.

Under Canada’s federal privacy law (PIPEDA), you can ask to access and correct your personal information, withdraw your consent, and complain to the Office of the Privacy Commissioner of Canada.

Under Quebec’s Law 25, you can also ask for access, correction, a copy of your computerized data in a structured format, and for us to stop disseminating your information, and you can complain to the Commission d’accès à l’information du Québec. The estimated NCLC level is produced automatically from your text. It is a practice estimate and no decision about you is based on it; the criteria and the scores behind it are shown with each result.

To use any of these rights, write to artur@allez7.com. We answer within 30 days. We may ask for information to confirm your identity, for example that an email address is yours. Because we keep results only under hashed identifiers, we may need details from you to find them.

12. Withdrawing your consent

You can withdraw your consent to waitlist emails at any time, as easily as you gave it: write to artur@allez7.com from the address you signed up with, or use the unsubscribe link that every email from us will carry. We remove your address within 10 business days at most. Withdrawing your consent does not affect what we did before.

13. Children

Allez7 is not intended for children under 16, and we do not knowingly collect their data.

14. Security

We use encrypted connections (HTTPS), store IP addresses and browser identifiers only as keyed hashes, keep credentials out of our code and limit database access to the operator of the service.

15. Changes to this policy

When we change this policy, we update the date at the top of this page. If a change affects how we use your email address, we will ask for your consent again where the law requires it.