Transparency

Privacy at ExamDraft

ExamDraft is designed so your study materials are processed only for the features you actively start. In the default mode, AI requests go through ExamDraft's proxy; in BYOK mode, your browser talks directly to the provider you selected. This page explains what is stored locally, what is sent to external AI providers, and which parts of that flow you control yourself.

Version: April 2026 Magic-link account Optional BYOK

Summary

In default mode, ExamDraft uses a magic-link account and secure server proxy.
Your API key is stored locally only if you use Advanced BYOK mode.
Analysis, generation, and AI grading send the required content to Anthropic or OpenRouter.
Analysis results and generated exams may be stored temporarily in your browser session.
If you consent to improvement, ExamDraft stores anonymized extracted text as a reviewable contribution.

Responsibility

ExamDraft is a static web application. ExamDraft is responsible for the product interface and the way these pages describe product behavior.

For content that you actively send to an AI provider, the relevant provider is additionally responsible for its own processing. That applies in particular when you trigger analysis, exam generation, or AI grading.

Contact for privacy questions: privacy@examdraft.com

1. Data stored locally in the browser

ExamDraft stores part of its state exclusively in your browser so the app can continue working across page changes and sessions.

API key for the selected provider in localStorage, if you use Advanced BYOK mode.
Provider and model preferences in localStorage.
Temporary analysis results and generated exams in sessionStorage so you can continue within the same browser session.
No persistent ExamDraft document vault for your uploaded PDFs. Files are read for processing and then only used as needed for the active flow.

2. Data sent to AI providers

When you actively use ExamDraft for analysis, exam generation, or AI grading, the required content is sent either through ExamDraft's server proxy or, in Advanced BYOK mode, directly from your browser to the provider you selected. ExamDraft currently supports providers such as OpenRouter and Anthropic.

Depending on the feature, that may include:

text extracted from past exams,
text extracted from model solutions or marking schemes,
lecture context from uploaded PDFs or from your pasted topic summary,
answers you type when using AI grading.

In the default mode, ExamDraft processes this content through its own Cloudflare infrastructure, checks credits, and forwards it to the AI provider. In BYOK mode, the transfer goes directly from your browser to the selected API. The provider's own privacy terms apply in addition, especially the Anthropic Privacy Policy and the OpenRouter Privacy Policy.

2a. Voluntary product improvement

You can use ExamDraft without contributing learning material for improvement. If you select the improvement option, ExamDraft may store anonymized extracted text from that upload and the related validated AI results to improve task detection, topic matching, and exam generation quality.

ExamDraft does not store the PDF upload as a file for this. It stores anonymized extracted text, filename, document type, subject, consent version, timestamp, a content hash for deduplication, and AI outputs such as analysis JSON or generated exams with model solutions. Contributions are marked for review first and are not automatically published. You can withdraw this consent later and request deletion of contributed content.

3. No general document vault

ExamDraft does not operate a general document vault for your uploaded exams. Without improvement consent, there is no product-side archive where ExamDraft keeps your uploads as a long-term content library.

With improvement consent, anonymized text contributions and related AI outputs are stored for review and quality improvement.

4. Usage analytics without study-content profiles

ExamDraft records basic product events such as landing page views, demo starts, upload starts, analysis, checkout, and generation so the funnel can be improved and product errors can be detected.

These events do not include PDF contents, answers, or generated exams. IP addresses are not stored raw; they are hashed. ExamDraft does not create personalized ad profiles from your study content.

5. Legal basis and user control

Where privacy law applies, local browser storage is mainly used to provide the functionality you explicitly requested. Transfers to external AI providers happen because you actively trigger those functions. In default mode, ExamDraft uses the server proxy; in BYOK mode, you use your own API key.

You decide:

whether to connect ExamDraft to an external provider at all,
which provider you use,
which documents or text you supply as context,
whether to paste a compact lecture summary instead of uploading full lecture PDFs.

6. Retention, deletion, and rights

Locally stored data remains in your browser until you remove it or until browser logic clears or replaces it. Session data is intended for the active session.

If you want to delete local ExamDraft data, you can remove the site's stored data in your browser settings. If you have questions about how an AI provider stores or further processes content after the API request reaches them, you need to contact that provider directly.

Contact: privacy@examdraft.com