Edsthetic is an Australian EdTech company based in Torquay, Victoria. We build Writeiq™ and Allocateiq™ for Australian schools. We take the privacy of student and staff data seriously and handle it under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
We collect the minimum information needed to operate our products. This varies by product:
| Product | Information collected | Who provides it |
|---|---|---|
| Writeiq™ | Student first name, year level, class, writing submissions, assessment results | School staff |
| Writeiq™ | Teacher name, email (for SSO accounts) | School staff |
| Allocateiq™ | LSO name, phone, email, hours, availability, training programs | School coordinator |
| Allocateiq™ | Student name, year level, NCCD level, class list | School coordinator |
| Both products | School name, contact name, email (licence contact) | School |
We do not collect student surnames, addresses, dates of birth, or any biometric data unless explicitly provided by the school.
We do not use student data for:
School data is stored in Supabase on Amazon Web Services, Sydney region (ap-southeast-2). This includes student records, writing submissions, staff credentials, and NCCD data.
When a student’s writing is submitted for automated assessment, the text of the writing piece is processed by the Anthropic API (United States) for marking. No student names, class names, or school identifiers are included in these API calls. Anthropic’s API terms prohibit use of submitted data for model training. The writing text is processed transiently and not retained by Anthropic beyond the request.
Supabase edge functions (licence validation, email delivery) run on a globally-distributed compute network and may be processed in the nearest available region.
Edsthetic uses the following subprocessors. Each operates under a Data Processing Agreement or equivalent contractual obligation:
Parent writing reports are generated in the teacher's browser and sent directly from their own school email client. No parent contact details or report content passes through Edsthetic servers.
Supabase implements row-level security at the database layer.
Each school's data is isolated from all other schools by design. No school can access another school's data.| Who | What access | Why |
|---|---|---|
| Your school's licensed users | Full access to your school's data only | Operating the product |
| Edsthetic | Access to support and diagnose issues | Technical support |
| Supabase (infrastructure) | Encrypted storage only | Data hosting |
| No one else | No access | Not shared |
We do not share your data with any government agency, education authority, parent body, or third-party service unless required by law.
Many of our users are minors. We apply additional care to student data:
Our website (edsthetic.com.au) does not use cookies, third-party analytics, or advertising trackers. No data about website visitors is collected or stored.
Our web applications (Writeiq, Allocateiq) use browser sessionStorage and localStorage to maintain your login session. This data stays on your device and is never transmitted to third parties.
We implement the following security controls:
You have the right to:
To exercise any of these rights, contact us at privacy@edsthetic.com.au.
If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We will notify active licence holders by email if we make material changes to this policy. The effective date at the top of this page will be updated with each revision.
For privacy-related enquiries: