Privacy Notice

1. Who we are

IELTSweb LLC ("IELTSweb", "we", "us") operates the IELTSweb website and AI scoring service. For the personal data described in this notice, IELTSweb LLC is the data controller. You can reach us at support@ieltsweb.com.

2. Personal data we collect

• Account data — your name, email address, hashed password (or Google sign-in identifier), account creation date.
• Practice content — voice recordings you submit for IELTS Speaking practice, the generated transcripts, AI scores and written feedback.
• Purchase records — the fact that you paid for an AI Scoring report, the Paddle transaction reference, the attempt the payment relates to, and the timestamp. We do not store your card details — Paddle does.
• Support messages — any emails or messages you send us.
• Technical data — IP address, browser type, device information, basic usage logs and error reports, used to keep the Service running and secure.

3. Why we use your data and our legal basis

4. Who we share it with

• Hosting & database provider — to store your account and practice data.
• AI model provider (Google Gemini, via Lovable AI Gateway) — your voice recordings are sent to the model for scoring. They are processed to generate your report and are not used by us to train models.
• Paddle.com — our Merchant of Record. Paddle handles payment, subscription management (where applicable), tax, invoicing and refunds, and may collect data directly from you at checkout under their own privacy notice.
• Professional advisers — legal, accounting, auditing where strictly necessary.
• Authorities — where required by law, court order or to protect our rights.

We do not sell your personal data.

5. How long we keep your data

• Account data: while your account is active, plus up to 24 months after closure.
• Voice recordings, transcripts and AI feedback: kept while your account is active so you can revisit reports. You can request deletion at any time (see Your rights).
• Purchase / tax records: up to 7 years, as required by tax and accounting law.
• Security logs: typically up to 12 months.

After these periods data is deleted or irreversibly anonymised.

6. International transfers

Our hosting and AI subprocessors may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent transfer mechanisms.

7. Your rights

Subject to the laws of your country, you have the right to: access your personal data; correct inaccurate data; request deletion; restrict or object to processing; receive your data in a portable format; withdraw consent where processing is based on consent; and lodge a complaint with your local data protection authority. To exercise any of these rights, email support@ieltsweb.com. We aim to respond within one month.

8. Security

We use industry-standard technical and organisational measures including TLS for data in transit, encrypted storage at rest, role-based access controls and audit logging. No system is 100% secure — please tell us immediately at support@ieltsweb.com if you suspect your account has been compromised.

9. Cookies

We use a small number of essential cookies (and equivalent browser storage) needed to keep you logged in and to remember preferences. We do not use third-party advertising or cross-site tracking cookies. The Paddle checkout sets its own cookies when you make a purchase — see Paddle's privacy notice for details.

10. Children

The Service is not intended for children under 13 (or the minimum digital-consent age in your country). Please do not create an account if you are below that age.

11. Changes

We may update this notice as the Service evolves. Material changes will be highlighted by email or in-app.

See also: Terms & Conditions · Refund Policy