Privacy Policy

Last updated: April 2026

ESSAITECH SOLUTIONS LIMITED ("ESSAi", "we", "us", or "our") builds AI teaching tools for Hong Kong schools. We believe student data belongs to the school — not to the AI vendor. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform, and the ethical commitments we make to every school we serve.

Our AI Ethics Commitment

ESSAi operates on four core principles that shape everything we build. These are not marketing — they are contractual commitments to every school that uses our platform.

We do not train our AI models on school or student data. Every piece of student work, essay, oral recording, or assessment submitted to ESSAi is used only to generate feedback for that student — never to improve our models or benefit other schools.
Data stays within each school's environment. Each school operates in an isolated tenant. Student data is never shared, pooled, or cross-referenced across schools. Schools can export or delete their full dataset at any time.
We are transparent about how AI is used. Teachers and students always know when AI is generating feedback, when a human is involved, and where the AI's judgment should be treated as a draft rather than a final decision.
We comply with HK EDB guidance on AI in learning & teaching (Circular No. 221/2025) and the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486).

1. Information We Collect

We collect the following types of information to provide educational services to schools:

Account information: name, email address, school affiliation, class, and role (teacher/student)
Academic content: essays, oral recordings, reading comprehension responses, and other student submissions
Usage data: login activity, feature usage, and platform interaction patterns
Technical data: browser type, device information, and IP address for security purposes

2. How We Use Your Information

We use the collected information strictly for the following purposes:

Generating AI-powered essay feedback, oral assessment, and learning reports for the submitting student and their teachers
Managing user accounts and authenticating access
Generating performance dashboards for teachers, students, and school administrators
Ensuring platform security, preventing abuse, and meeting legal obligations

3. Data Sharing and No-Training Guarantee

We do not sell personal data. We do not share, pool, or aggregate student data across schools. We do not use student submissions to train, fine-tune, or improve our AI models in any form. Within a school, we only share information with authorised school administrators and teachers responsible for that student. We use vetted third-party service providers (cloud hosting, AI model providers) bound by strict data processing agreements that prohibit training on our customers' data.

4. Data Security

We implement industry-standard security measures to protect your data:

Encrypted data transmission (HTTPS/TLS) and encrypted storage
Per-school tenant isolation on secure cloud infrastructure, with role-based access controls
Regular security audits, monitoring, and incident response procedures

5. Data Retention and Deletion

ESSAi is designed as a longitudinal learning platform — teachers rely on access to a student's historical essays, oral recordings, and reports across multiple school years to give informed feedback, and schools rely on multi-year dashboards to track progress. We therefore retain student data for the duration of the school's subscription, as this is directly necessary to deliver the services described above. We will not retain personal data longer than is necessary for the purposes set out in this policy. Each school owns the data held in its tenant — schools may request a full export, or deletion, of their data in a portable format at any time by contacting us. Data handling following termination of a school subscription is governed by the school's service agreement with us.

6. Your Rights

Under the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong, you have the right to access, correct, and request deletion of your personal data. Schools, parents, and guardians may submit data access or deletion requests on behalf of students by contacting us. We will respond to verified requests within the timeframe required by the Ordinance (40 days for data access requests).

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify schools of any material changes via email and platform notification at least 30 days before they take effect. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

8. Contact Us

If you have any questions or concerns about this Privacy Policy, our AI ethics commitments, or our data practices, please contact us at:

admin@essaiedu.com

Address: 16/F SML Tower 165 Hoi Bun Road, Kwun Tong, Kowloon, Hong Kong