Writeroom privacy policy

Version 1.4, effective October 31, 2026.

Writeroom is a writing app for schools. This policy explains what personal information we collect, why, who sees it, where it is kept, how long we keep it, and what your choices are. It is written for four groups of people:

• visitors to writeroom.org;
• people who send us a message through the contact form;
• people who sign up at app.writeroom.org (students can make their own account) but have not yet been given access by a school; and
• Authorized Users of a School: the students, teachers and administrators who use Writeroom through their school.

If you are a student, there is a shorter version written for you: the Student privacy notice. Parents and guardians will find a fuller version on the same page.

"Writeroom", "we" and "us" mean the person who operates writeroom.org and app.writeroom.org and who signs each School's Order Form. Writeroom is run by an individual, not a company. The operator's legal name and mailing address are given in each School's Order Form and are provided on request through the contact form at writeroom.org/contact. The capitalised terms in this policy have the same meaning as in our Terms of Use and our Student Data Protection Addendum (the "DPA").

1. The most important things to know

• Writeroom is only available through schools. We do not offer accounts to children or to the public. Students use Writeroom because their school decided to use it.
• For school users, the school is in charge of the data. The School decides what is collected and who sees it. We act on the School's instructions under a written agreement (the DPA). The School's own privacy policies and the privacy law that applies to the School govern. If anything in this policy differs from the School's agreement with us, the agreement wins.
• We do not sell personal information, show ads, or track people across the web. We use no analytics or advertising cookies, on the website or in the app.
• We do not use student writing to train AI models, and when a school turns on external AI features we send every request with settings that allow it to go only to AI providers that do not keep or train on the text.
• Student work and writing records are stored in Canada (Toronto). A short list of processing happens outside Canada; section 8 explains each item.
• Writeroom never decides anything about a student. It shows teachers how a piece of writing was made and points out moments worth a look. Teachers decide.

2. Our role, and the School's role

When a school uses Writeroom, the School is the organization that collects students' and teachers' personal information for its educational purposes. Under Canadian public sector privacy laws, that information is in the School's custody or under its control. Writeroom is the School's service provider. We process the information only to provide the Service as described here and in the DPA, and only as the School and its teachers direct through the Service's settings.

This means that for students, teachers and administrators:

• the School decides who can use Writeroom, which features are turned on, how long records are kept, and who may see them;
• questions, access requests, corrections and complaints about your information go first to the School (section 12 explains how we help);
• the School is responsible for telling students and parents about Writeroom in the way its own law requires, and we provide the notices and information it needs to do that.

For visitors to the website, people who contact us, and people who sign up without a school, Writeroom is the organization responsible for your information, and the Personal Information Protection and Electronic Documents Act (Canada) and, where it applies, the privacy law of your province, governs.

3. What we collect, and why

3.1 Website visitors

When you visit writeroom.org, the hosting service (Firebase Hosting, operated by Google) receives the technical information every web server receives: your IP address, browser type, the pages you request and the time. Google keeps these records for its own operational and security purposes under its terms. We do not add analytics, tracking pixels or advertising. We set no cookies on the website.

3.2 Contact form

If you use the contact form at writeroom.org/contact, we collect what you type: your name, role, school or board, email address, the topic you choose (Privacy, Support, Security or Schools), your message, and the approximate number of teachers and students. We use it to reply to you and to follow up about Writeroom for your school. The form is protected against spam by checks on our own server (a hidden field, a minimum time to fill it in, and limits on how often it can be sent); no third-party spam service is used. Your message is stored inside the Service in Toronto and is not emailed anywhere; we keep your message and our reply. We keep contact requests for [24 months] after our last exchange, then delete them.

3.3 People who sign up without a school

Writeroom is for Schools only. A student can make their own account at app.writeroom.org with Google or with an email address and password; teachers join through their School's teacher invite link or an invitation. An account gives no access on its own: a student gets access only by opening an assignment link their teacher shared (the School's email domain rules apply), by signing in with an address on a domain the School registered, or by an invitation. Until then, we store only your name, email address and either (for Google sign-in) your Google account identifier or (for email sign-in) a hashed password held by Firebase Authentication, and we show you a page that asks you to open the assignment link your teacher shared. If no School gives you access within 90 days, we delete the account.

3.4 Authorized Users of a School

This section describes everything Writeroom collects about students, teachers and administrators. Some items are collected only when a School administrator or a teacher turns a feature on; those are marked.

Account and identity. Your name, email address, role (student, teacher, administrator), your School, your last sign-in time, your in-app preferences (for example editor settings and whether you have seen the tour), and either your Google account identifier and profile photo address (Google sign-in) or a hashed password (email sign-in). We use this to sign you in, decide what you can see, and show your name to the people you work with. While you have a document open, the people who can see it may be shown that you are viewing it; this presence information is not stored.

Documents. The text, title, formatting and images of the documents you write or upload, comments and suggestions on them, and their version history. This is the school work itself.

Writing-process record (assignment documents only). When a student writes in a document that belongs to a teacher's assignment, Writeroom records how the writing was made:

• each edit and when it happened;
• the keys pressed inside the editor, with timing (not keys pressed anywhere else);
• text pasted or dropped into the document, and the app or website it appears to have come from;
• text copied or cut inside the document;
• text produced by voice typing (the audio is handled by the browser; we store only the words);
• where in the document the student was editing or selecting;
• when the student left the document for another tab, window or app, and for how long, including pauses such as the device sleeping or a browser dialog opening;
• the browser type and window size, and whether the document was in full screen;
• actions the assignment's rules blocked;
• version snapshots of the document so it can be replayed.

Documents a student creates on their own, outside an assignment, are not recorded and are not visible to teachers unless the student shares one. A shared personal document shows its text only, not a process record.

Outside-clipboard check (on for a new School; a School administrator can turn it off). When on, the editor looks at what is on the clipboard when the student returns to an assignment document, with the browser's permission. Only text of eight or more words that matches the document or an AI tool is kept and shown to teachers. Other items are kept only as a fingerprint (a hash) and a word count. Anything that looks like a password or a code is dropped. If a student declines the browser permission, that is not recorded as a flag. Text pasted into Writeroom itself is always recorded, as described above.

Chrome extension (only if installed, and only while an assignment document is open). The extension reports the domain of each website the student switches to (the full address only for listed AI tool sites), a count of open tabs and which of them are listed AI tool sites, and text copied on listed AI tool sites. In assignments set to supervised, it saves up to three screenshots of an AI tool tab when one is opened. It records nothing at other times, nothing on other sites' pages, and no keystrokes. Section 14 has more.

Screen supervision (only when an assignment requires it and the student agrees to share). If a teacher's assignment rules ask for screen supervision, the student is asked to share their whole screen after a notice that says, in plain words, that short clips are saved when they leave the document. While sharing, each time the student leaves the document Writeroom saves a five-second recording of the whole screen and four still images, and reads the text in the stills to name the site or app. Teachers can also watch the shared screen live; the live view is not recorded. These clips are deleted after 30 days by default.

Integrity Signals. From the writing-process record, Writeroom computes indicators for teachers: flags with a severity level, a per-document integrity score, an AI-detector score for English writing of 300 words or more (and for copied text of 40 or more words), a writing-path summary, a document risk level, and a per-student summary built from the viewing teacher's own integrity decisions. It also sends alerts to teachers. Section 5 explains how these work and what they are not.

Integrity decisions, grades and feedback. A teacher's integrity decision on a document ("No concern", "Discussed with student" or "Integrity concern confirmed by teacher") with the teacher's own note; grades, points, feedback and when work was handed back.

AI features (on for a new School; a School administrator can turn them off). While external AI is on for the School, teachers can ask for a suggested grade and feedback, students and teachers can translate text or look up a word, and teachers can ask an assistant questions about their students' work. Section 6 explains what is sent, to whom and where.

Assignments and School settings. Assignment titles, instructions, rules and starting files; the Google Classroom course name and identifier when an assignment is made from Classroom; the School's settings, teacher list, domains and seats, and who changed each setting and when.

Honesty score. One long-term percentage for each student and the history of how it changed, with the reason for each change (section 5).

Audit logs. Who viewed which student's replay, clips and analytics; decisions; hand-backs; settings changes; and any support access Writeroom staff were granted. School administrators can see their School's log.

AI spending ledger. Time, purpose, model, token counts and cost of each AI request. It contains no content.

Security logs. IP address, request path, time and a request identifier for each request to the app, kept for 30 days in Toronto and used only for security, abuse prevention and support. Logs never contain document text, clipboard contents or session tokens.

Notifications. In-app notifications (for example "your teacher opened your document") and alerts, which appear inside the Service only. Invitations are not emailed: a School administrator copies an invitation link and shares it with you. The only emails the Service sends are Firebase Authentication's own account emails (email verification, password reset and sign-in emails), sent by Google; they contain your email address, a link and the Writeroom name, and never student writing, grades or Integrity Signals.

3.5 What we do not collect

Writeroom uses the camera only when a student chooses Insert, Image, Camera to take a photo for their document; the photo is stored as an image in that document, like any uploaded image, and the camera is never turned on by Writeroom itself or used for supervision. Writeroom does not record audio (voice typing uses your browser's speech recognition and we store only the words), does not collect location, does not record keystrokes outside the Writeroom editor, does not record browsing outside an assignment document, and does not ask for date of birth, age, grade level or parent and guardian details. Your School holds those.

4. Legal basis and authority

For School users. The School collects personal information through Writeroom under the authority of the education law and the public sector privacy law that apply to it (for example, in Ontario, the Education Act and the Municipal Freedom of Information and Protection of Privacy Act). We process it for the School under a written agreement, as the School's service provider. Where the School's law requires notice to parents or students, or consent, the School gives that notice or obtains that consent. We rely on the School's authority and do not collect anything beyond what the School's use of the Service needs.

For everyone else. We collect and use your information with your consent, which you give by sending us a message or creating an account, and for the purposes a reasonable person would expect: answering you, setting up your access, and keeping the Service secure.

Children. We collect information about children only through their School and only for the School's educational purposes. Section 11 has more.

5. Automated analysis and Integrity Signals

Writeroom uses automated analysis to produce Integrity Signals. We want students, parents and schools to understand exactly what this is and is not.

What the analysis does. Writeroom looks at the writing-process record for patterns: text that arrived by paste rather than typing, typing at a speed or rhythm that is unusual for composing, long gaps or time away followed by new text, visits to listed AI tool sites during an assignment, and text whose statistical features resemble AI-generated English. It turns these into flags (each with a severity), a per-document score, a writing-path summary and alerts. It also shows a teacher a per-student summary built only from that teacher's own integrity decisions on documents the teacher can see (other teachers' decisions are included only if the School turns on decision sharing). This is automated analysis of a student's writing behaviour within an assignment, a form of profiling; the optional functions (clipboard check, extension, screen clips, external AI) are off until the School turns them on, and recording itself is disclosed to the student before it starts.

What it does not do. No decision about a student is made by the software. Writeroom does not assign grades, does not find anyone guilty of anything, does not sanction anyone, and does not report to parents. Every signal is labelled in the app as a reason to look, not proof. Only teachers of the assignment and the School's administrators see signals; students do not. A teacher records an integrity decision with one of three outcomes ("No concern", "Discussed with student" or "Integrity concern confirmed by teacher"), must write their own note (Writeroom does not draft it), and can change the decision later. Decisions are visible to the deciding teacher and School administrators; sharing them with other teachers is a School setting that is off by default.

The honesty score. Each student has one long-term honesty score, a percentage that starts at 80. Higher means more trustworthy. It rises slowly when a teacher hands back finished work that looks typical. It falls when a teacher records "Integrity concern confirmed by teacher" (by 20 to 30 points, depending on the severity the teacher chooses, and by more for each repeat) and by a few points for "Discussed with student". "No concern" costs nothing. Automated flags and AI scores alone never move it, so it reflects teachers' decisions and finished work, not a machine's guess. Every change is recorded with its reason, and it stays between 5 and 99. The score is an indicator, not a decision: Writeroom works out the number from what teachers record, and nothing happens to a student because of it. Teachers of the student and the School's administrators see it. Students do not see it in the app; students and parents can get it, with its history, through the School's access process. A School administrator can change or reset it with a written reason, and a person can always correct it.

What is applied automatically. The only automatic effects on a student are the assignment rules a teacher set: locking a document at its due date, limiting or blocking pastes, requiring full screen or screen sharing, and, with the extension, blocking listed AI chat sites during the assignment. These are rules, not judgments.

Known limits. The AI detector is not applied to writing that is not in English, and scores for short texts are held low. Dictation and non-keyboard input methods are recorded as such and are never treated as pasting. Ordinary behaviour (restoring a version, moving your own draft, a laptop going to sleep) can still produce a signal. Teachers have access to "How to read Writeroom's signals", which explains limits, accommodations and how to talk with the student.

Your rights about automated analysis. Where the law gives you a right to know that information about you was produced by automated means, to see it, to ask for it to be corrected or deleted, or to have a person review a decision, your School is the body that answers that request, because the decision (if any) is the School's. Your School can export your full writing record, the signals attached to it, the evidence behind each signal, and any decision and note, and we help your School do that. In Quebec, this section is our notice that the Service uses automated processing to produce Integrity Signals and that no decision is based exclusively on it.

6. AI features and the vendors behind them

External AI features are on when a School starts, because the School's agreement covers them: its Order Form records whether the School may use external AI, and if it may not, we lock them off. A School administrator can turn them off, or on again, at any time in Settings, where the Service shows what each feature sends, to whom and where, and records who changed the setting and when.

When they are on:

• AI marking (teacher-triggered) sends the assignment's title, the teacher's instructions and rubric, and the student's document text and title.
• Translate (student or teacher) sends the selected text or the document text and the target language.
• Dictionary (student or teacher) sends up to three words.
• Teacher assistant (teacher-triggered) sends the teacher's question and name with document titles and text, paste previews, sites visited, flags and scores, decisions and alert texts for the students the teacher asks about. Students are referred to as "Student 1, Student 2" and mapped back on our server. Student names and email addresses are not sent. The assistant summarises facts the Service already shows; it does not rate a student's honesty or character.

Requests go to OpenRouter, Inc. (United States), which routes them to the model vendor serving the chosen model: OpenAI models served through Microsoft Azure, and Anthropic models served through Amazon Bedrock. For marking, a teacher picks one of three levels (Fast, Smart or Super smart; the School administrator sets the default); Translate and Dictionary use a small OpenAI model, and the assistant uses the Smart level. These come from an allowlist that we maintain, and every request is sent with OpenRouter's "no data collection" and "zero data retention" settings, so it can be routed only to endpoints that do not retain or train on the text. No user identifier is sent. If no compliant endpoint is available, the request fails with a plain message; it never falls back to a non-compliant one. The vendors on the allowlist are named on our subprocessor list.

Writeroom itself trains nothing on student data. The AI detector runs on our own servers in Toronto and sends nothing anywhere. A student's name is not added to any request, but a name the student typed into their own work may be in the text sent for marking or translation. The model vendors are engaged through OpenRouter; Writeroom has no direct contract with them, so our protection is the routing settings above, which allow only endpoints the vendor has designated as zero data retention and no training, together with OpenRouter's agreements with those vendors.

Per-teacher AI credits. AI credits are counted per School and, where a platform or School administrator sets a limit, per teacher. For this we keep each teacher's limit, the credits they used this month and any extra credits, with no student information. Teachers see only the credits left for them, and every change is logged.

7. Who we share information with

We share personal information only with:

• Your School. Teachers and administrators see student information as section 3 describes. Teachers see only students in assignments they own or co-teach, and documents a student shared with them. School administrators can see everything in their School, and every such view is logged.
• Subprocessors. Companies that process data for us to run the Service: Google (hosting, database, files, sign-in and its account emails such as verification and password reset, and logging), and, only when a School turns external AI on, OpenRouter and the model vendors on our allowlist. Google and OpenRouter are bound by written terms to protect the data and use it only to provide their service to us; the model vendors are reached only through OpenRouter under the zero-retention, no-training routing described in section 6. We use no email delivery service; if we later use one, it will be added to the subprocessor list with the usual notice. The full list, with what each receives and where, is at writeroom.org/subprocessors. We give Schools at least 30 days' notice before adding a subprocessor.
• Authorities, when legally required. If a court, government or law enforcement body makes a legally binding demand for information, we tell the School before disclosing unless the law forbids it, disclose only what the demand lawfully requires, and where reasonable ask the requester to go to the School instead. We never volunteer personal information to a government body.
• A successor. If the Writeroom business is sold or transferred to someone else, the information stays subject to this policy and the Schools' agreements, and Schools are told in advance. Student Data will not be transferred to a successor that does not accept those agreements.

We do not sell, rent or trade personal information, and we do not share it with advertisers or data brokers.

De-identified data. We may keep technical data derived from the Service with all identifiers removed (for example error rates, feature usage counts and accuracy measurements) to operate, secure and improve the Service. We never attempt to re-identify it, never sell it, and never use student writing or writing-process records, in any form, to train or improve an AI model.

Writeroom staff. Our own staff cannot open student documents, writing records, screen clips or Integrity Signals in the live Service by default. A School administrator can grant us time-limited support access; every view during it is written to the School's audit log. We never sign in as a user.

8. Where information is stored and processed

Stored in Canada. Student work, writing-process records, files, screen clips, Integrity Signals, the database, audit logs, security logs and backups are stored in Google Cloud's Toronto region (northamerica-northeast2).

Processed outside Canada. The following involve personal information outside Canada:

Our hosting provider is operated by a United States company and its Canadian affiliate. Information held by a provider subject to another country's laws may, in some circumstances, be accessible to that country's authorities under those laws, even when it is stored in Canada. If we receive such a demand, we handle it as section 7 describes. Schools in provinces with rules about storage or access outside Canada (for example British Columbia, Nova Scotia and Quebec) decide, with our help, whether each item above is permitted for them; where an optional item is not, the School keeps that feature off.

9. How long we keep information

When a School's agreement ends, its users can read and export their work for 30 days. We delete all of the School's data from live systems within 60 days after the agreement ends, and backup copies age out within 35 days after that deletion, unless the School asks in writing during the export window for us to keep its data longer, or a law requires us to keep specific records. Audit logs and billing records are kept for the period in the table above. School administrators can also export or delete an individual student's data at any time.

Copies outside Writeroom. Teachers can download writing records and students can export their documents. Those copies are outside our systems and these retention rules; the Service reminds teachers of this on every export. Your School is responsible for them.

10. How we protect information

We host on Google Cloud, which encrypts data at rest and in transit by default. Connections to the app use HTTPS. Only our application server can read the database and files; no browser has direct access. Sessions use secure, httpOnly cookies, and every request is checked against the user's School and role. Our own administrators use multi-factor authentication and have no default access to student work. Logs contain no student text. We keep tested backups in Toronto. Our Security overview describes these measures in more detail. We do not claim any security certification we do not hold.

No system is perfectly secure. If a security incident affects a School's data, we tell the School without undue delay and within 48 hours of confirming it, give it what it needs to assess the incident and meet its own notification duties, and support its investigation. For information we hold on our own account (website, contact form, sign-ups), we report a breach that creates a real risk of significant harm to the Office of the Privacy Commissioner of Canada and to the people affected, as PIPEDA requires, and we keep a record of every breach.

11. Children and students

Writeroom is used by students from elementary to high school. We provide it only to Schools, under written agreements. We never offer accounts to children directly, never market to students, never show ads, and collect from students only what the Service described in section 3 needs.

The School decides to use Writeroom under its authority to run its educational programs and is responsible for the notices to parents and guardians, and for any consents, its law requires. In Quebec, where the consent of a parent or guardian is required for a child under 14, the School obtains it; we do not collect from children on our own account. For Schools in the United States, the School provides consent on behalf of parents for our collection from students under 13, for the School's educational use only, as described in the US schedule to our DPA.

Students are told what Writeroom records before they write: the assignment join page and the first opening of each assignment show the full list, the student acknowledges it once per assignment, and a link to the Student privacy notice is always in the editor menu. Parents and guardians who want to see their child's information, have it corrected, or ask questions should contact the School first. You can also reach us through the contact form at writeroom.org/contact (topic: Privacy); we will pass your request to the School and help it respond.

12. Your rights and choices

School users (students, parents and guardians, teachers, administrators). You have the rights your School's privacy law gives you: usually to access your personal information, to ask for corrections or deletion, to ask for a decision about you to be reviewed, and to complain. Because the information is in your School's custody, send your request to your School. Your School's administrators can export your complete record from Writeroom (including the evidence behind any signal and any decision and note), correct or delete it, and see who has viewed it. If a request reaches us directly, we pass it to your School within five business days and help the School answer it. We do not answer on the School's behalf unless the law requires us to.

Everyone else (website, contact form, sign-ups). You can ask us what personal information we hold about you, ask us to correct it, withdraw consent, or ask us to delete it, through the contact form at writeroom.org/contact (topic: Privacy). We respond within 30 days, or tell you if the law allows us longer and why. We may ask you to confirm your identity.

Choices in the app. Students can decline the clipboard permission in their browser (this is never recorded as a flag), and can choose not to install the extension unless their School requires it. Unsent copies of their writing are cleared from the device when they sign out and after 14 days. Whether a feature is available or required is the School's decision.

13. Cookies and local storage

Writeroom uses only what is needed to run the app. We set no analytics, advertising or tracking cookies, and we do not use third-party trackers.

• Session cookie (app.writeroom.org): a secure, httpOnly cookie that keeps you signed in for up to 5 days (12 hours for our own administrators). It is essential; the app cannot work without it.
• Browser storage (app): your editor preferences (zoom, ruler, language, fonts), and a copy of unsent writing so nothing is lost if your connection drops. Unsent copies are cleared on sign-out and after 14 days.
• Extension storage: the connected account's token and the list of open assignment documents, cleared when the browser closes (documents) or when you disconnect (token).
• Google sign-in: the "Sign in with Google" button loads Google's sign-in script on the sign-in page, and Google may set its own cookies there under Google's privacy policy.
• Website: no cookies.

You can clear browser storage at any time through your browser's settings; you will be signed out.

14. The Chrome extension and Google sign-in

What the extension does. For teachers, it adds Writeroom to Google Classroom assignment pages and reads the assignment's title, instructions, due date and course from the page in the teacher's own browser; it reports nothing about the teacher's browsing. For students, while an assignment document is open, it reports the domain of sites visited (the full address for listed AI tool sites), a count of open tabs and the AI tool domains among them, and text copied on listed AI tool sites; in supervised assignments it saves screenshots of an AI tool tab. It can also block listed AI chat sites and turn off AI answers in Google Search while an assignment is open, if the teacher's rules say so. It records nothing when no assignment document is open, and it never records keystrokes. Its permissions are limited to Writeroom's own addresses and the listed AI tool sites.

Chrome Web Store user data policy. Writeroom's use of information received through the Chrome extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We collect only data needed for the extension's single purpose (supporting assignment supervision in Writeroom), we transfer it only to Writeroom's own servers for that purpose, we do not use it for advertising, and we do not allow humans to read it except the School's teachers and administrators who are permitted to see the student's assignment, for security or abuse investigation, or as the law requires.

Google sign-in. When you sign in with Google, we receive your name, email address, Google account identifier and profile photo address. We use them only to create and sign in your account and to show your name and photo to the people you work with. Writeroom's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

15. Complaints and the regulators you can contact

If you have a concern about how we handle personal information, please write to our Privacy Officer first (section 17). We will acknowledge within 5 business days, investigate, and reply within 30 days.

You can also complain to a privacy regulator. For information held for a School, the regulator is the one that oversees your School:

• Ontario: Information and Privacy Commissioner of Ontario, ipc.on.ca, 1-800-387-0073
• Quebec: Commission d'accès à l'information du Québec, cai.gouv.qc.ca, 1-888-528-7741
• British Columbia: Office of the Information and Privacy Commissioner for British Columbia, oipc.bc.ca, 250-387-5629
• Alberta: Office of the Information and Privacy Commissioner of Alberta, oipc.ab.ca, 1-888-878-4044
• Other provinces and territories: your province's or territory's information and privacy commissioner or ombudsman.

For information Writeroom holds on its own account (website, contact form, sign-ups), and for Writeroom's own compliance as a business, you can contact the Office of the Privacy Commissioner of Canada, priv.gc.ca, 1-800-282-1376, or your provincial commissioner where a provincial private sector law applies (Quebec, British Columbia, Alberta).

For Schools in the United States, parents may also contact the US Department of Education's Student Privacy Policy Office or their state's education department about the School's handling of education records.

16. Changes to this policy

We will post any change here with a new version number and date, and keep earlier versions available on request. For changes that reduce protections or add a new purpose, we give Schools at least 30 days' notice by email to their administrators before the change takes effect, and we will not apply such a change to a School's existing data in a way the School's agreement does not allow. The School's agreement with us always governs for School users.

17. Contact

Privacy Officer: Writeroom's Privacy Officer, reached through the contact form at writeroom.org/contact (topic: Privacy) Support and general enquiries: the contact form at writeroom.org/contact (topic: Support or Schools) Security reports: the contact form at writeroom.org/contact (topic: Security) Mail: Writeroom is run by an individual. The operator's legal name and mailing address are given in each School's Order Form and are provided on request through the contact form

This policy is governed by the laws of [Ontario] and the federal laws of Canada that apply there.

Questions about this document? Use the contact form. All legal documents