Privacy Policy

Information We Collect

We collect information you provide directly to us, such as when you create an account, use our TOEFL writing practice services, or contact us for support. This includes:

• —Email address and account credentials
• —Writing submissions (essays, emails, discussion responses)
• —Usage data and practice history
• —Payment information (processed securely by Stripe)
• —Whether you found a piece of AI feedback useful, and any note you add to that rating
• —AI usage cost on your account, so a fair-use limit on paid plans can be measured

How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, including AI-powered TOEFL writing feedback and practice exercises. Specifically:

• —Provide personalized TOEFL writing feedback
• —Track your progress and improvement over time
• —Display selected practice responses in our public samples section with personal names removed
• —Send important service updates and communications

Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share information with:

• —Service providers (Supabase for authentication, Stripe for payments)
• —Analytics providers (Google Analytics, PostHog) in anonymized form
• —Legal authorities when required by law

Data Security

Rather than describe our security in adjectives, here is the arrangement:

• —The site is served over HTTPS only. Requests to the plain-HTTP address are upgraded before they reach us.
• —Accounts, sign-in and sessions are handled by Supabase Auth, and your data is stored in a Supabase-hosted PostgreSQL database.
• —Card details never reach us. Payments are processed by Stripe, and we store no card number.

What we will not tell you is that any of this makes us secure. Reach120 has not had an independent security audit, holds no security certification, and does not claim one. If that changes, this paragraph changes with it and will say who audited what, and when.

Data Retention

We keep your account data for as long as your account is active. This includes your writing submissions and feedback, feedback-usefulness ratings, and AI usage cost records. When you delete your account from Account Settings, this data — along with your saved payment methods and any open invoices — is permanently deleted immediately, not on a delay or a schedule. Financial records Stripe keeps for accounting (invoices and completed charges) follow Stripe's own retention rules and are not affected by an account deletion here.

Your Rights

You have the right to access, correct, or delete your personal information. You can also request a copy of your data or opt out of certain data processing.