What data we handle, and why

A plain-language summary of the data categories, purposes, recipients, retention & deletion rules, and your rights, for the Donewells storefront and its products.

Who we are

The Donewells storefront (donewells.com) is operated by Nanchong Gaoping District Jingcheng AI Infrastructure Software Consulting Center. Contact for any privacy matter: [email protected].

Data categories

Account email: Account identifier and delivery of transactional notifications. Provided by you at registration.
Essay text: The material you upload so the service can draft a first-pass score and comments. Stored separately from identity data.
Rubrics: The scoring rubric defined by the teacher, used to generate drafts.
Generated results: The score draft, comment draft, and review checklist produced for you.
Technical logs: Operational logs for availability and aggregated usage statistics.
Support communications: Records of your support requests and our replies.

What we deliberately do not store or collect

No card data storage: we do not store full card numbers, CVV/CVC, or any sensitive authentication data. Checkout and payment are handled by Paddle as Merchant of Record; card data is processed and hosted by Paddle and never reaches our systems.
No proactive PII collection: the upload flow does not require names, student IDs, or school fields.
No advertising trackers on this site.

Recipients (who data is shared with)

LLM provider — essay text, rubrics, and generated results are processed to produce score/comment drafts. Not used to train models.
Payment processor (Paddle, Merchant of Record) — order, payment, tax, invoice, and refund data is processed by Paddle under its own buyer privacy policy.
Hosting provider — application hosting and data storage infrastructure.
Product analytics — aggregated, non-identifying usage statistics only; essay text and personal data are never sent to analytics.

Retention & deletion

Each data category has a defined retention approach and a deletion runbook. Deletion requests are executed by a real deletion runbook (not policy text alone): we verify, delete, and confirm. If a deletion fails, we record the failure honestly and tell you — we never claim a deletion that did not happen.

Your rights

Access, correction, deletion, restriction, and export requests are all handled through a unified support entry. Identity is verified against your registered email before a request is executed.

Contact support (privacy request entry)

Minors

Minors are excluded from this phase: direct registration, purchase, and data submission by minors are excluded. Because essays are free text, they may contain minors' personal information written inside the essay; we treat that as an explicit residual risk subject to stricter regional review, not as absent data. Age assessment status is currently NOT_ASSESSED.