Privacy Policy

Last updated: 21 June 2026

This Privacy Policy explains how Christopher Mark Walker trading as AAAIBiz (“we”, “our”, or “us”) collects, uses, discloses, and safeguards your personal information when you use Study Steward (the “Service”). We are committed to protecting your privacy and handling your information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

We collect the following types of information:

Account Information: Your name, email address, PhD topic, and research summary when you register and use the Service.
Content: Notes, session data, analyses, and other content you submit for review by the AI Advisory Board.
Usage Data: Information about how you interact with the Service, including feature usage and session activity.
Payment Data: When you purchase credits or subscriptions, payment processing is handled by Stripe. We do not store credit card numbers or bank details on our servers.
Communication Data: Information you provide when contacting support, including support ticket messages.

2. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Service (AI analysis, note organisation, voice transcription, and Advisory Board functions)
Process credit purchases and subscription payments via Stripe
Send service-related communications (password resets, email verification, support ticket updates)
Generate anonymised analytics to improve platform performance
Comply with legal obligations

3. How We Share Your Information

Your notes and research content are never sold, rented, or shared with third parties for marketing purposes. We share data only as necessary to provide the Service:

OpenRouter: Your notes and questions are sent to OpenRouter's API to generate AI Advisory Board analyses. OpenRouter routes to various LLM providers. See OpenRouter's Privacy Policy.
Stripe: Payment transactions are processed by Stripe. See Stripe's Privacy Policy.
Cloudflare: The Service is hosted on Cloudflare Workers. Data is processed in Cloudflare's global network. See Cloudflare's Privacy Policy.
Legal Compliance: We may disclose information if required by law or to protect our rights.

4. Data Security

We implement industry-standard security measures:

All data transmitted via TLS/SSL encryption
Passwords hashed using PBKDF2 with 100,000 iterations
Authentication tokens are signed JWTs with expiry
CSRF protection on all browser-facing endpoints
Stripe webhooks verified using timestamped signatures and timing-safe comparison

5. Data Retention

We retain your personal information for as long as your account is active. You may request deletion of your account and all associated data at any time via the Settings panel in your dashboard, which immediately and permanently removes all your data from our systems.

6. Your Rights

Under Australian privacy law, you have the right to:

Access: Request a copy of your personal information
Export: Download all your data in JSON format via the Settings panel
Correction: Update or correct your personal information via your profile settings
Deletion: Permanently delete your account and all associated data via the Settings panel
Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy

7. International Data Transfers

Your information may be processed on servers located in Australia, the United States, and other jurisdictions where Cloudflare and OpenRouter operate. By using the Service, you consent to such transfers. We take reasonable steps to ensure your data receives adequate protection in accordance with Australian Privacy Principle 8.

8. Cookies

The Service uses essential cookies for authentication (JWT tokens stored in localStorage) and session management. We do not use tracking cookies or third-party analytics cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related enquiries, please contact us at support@studysteward.com.

Trading As: Christopher Mark Walker trading as AAAIBiz
ABN: 56 747 625 708
Contact: support@studysteward.com