Privacy Policy

When you register for or use the Service, you may provide us with:

1. Account Information: Your name, email address, and any other details you voluntarily provide during registration or profile setup.
2. Uploaded Content: PDFs, Word documents, images, URLs, text, audio, and any other files or content you upload to the Service for quiz or assessment generation ("Uploaded Content"). We use Uploaded Content solely to generate assessments for you.
3. Support and Communications: Information you share when contacting us through our contact form or other support channels, including descriptions of issues and any attachments you provide.
4. Marketing Preferences: Your preferences regarding marketing or product update communications, if you opt in during sign-up.

When you access or use the Service, we may automatically collect:

1. Device and Connection Information: Your IP address, browser type and version, operating system, device type, device identifiers, and internet service provider.
2. Usage and Interaction Data: Information about how you interact with the Service, including pages visited, features used, quiz generation frequency, session duration, and error logs. This data helps us understand how users engage with the Service and identify areas for improvement.
3. Cookies and Similar Technologies: We use essential cookies to maintain your login session and ensure the Service functions correctly. We may also use analytics cookies to understand usage patterns. See Section 8 (Cookies) for more detail.

When you upload content for quiz generation:

1. Input Files: Original uploaded files (e.g., PDFs, images) are used exclusively to extract text for quiz generation.
2. File Deletion: Original uploaded files are automatically and permanently deleted from our servers immediately after text extraction is complete. We do not retain your raw uploaded files.
3. Extracted Text: The text extracted from your files is securely stored in our database to facilitate quiz generation and related service features. This extracted text is not used for any purpose beyond what is described in this Policy and is not shared with third parties except as set out in Section 5.
4. Generated Outputs: Quizzes and assessments generated by our AI are stored in your account for your access and use.

All payment-related information (credit/debit card numbers, billing addresses, etc.) is collected directly by Paddle, our Merchant of Record. We do not collect, process, or store your full payment card details. We receive only limited, non-sensitive transaction information from Paddle (such as your name, subscription plan, and payment status) to manage your account and subscription.

• To create, manage, and maintain your account;
• To process your uploaded content and generate AI-powered quizzes and assessments;
• To deliver the features and functionality of the Service;
• To verify your identity and authenticate your access;
• To communicate with you about your account, subscription, or support requests.

• To analyze usage patterns and improve the performance, reliability, and features of the Service;
• To diagnose and fix technical issues;
• To develop new features and improve AI model outputs.

We will not use your Uploaded Content to train our AI models without your explicit consent.

• To manage your subscription and coordinate with Paddle regarding your billing status and plan;
• To send you billing-related notifications (e.g., renewal reminders, receipts, and payment failure alerts) via email.

• To comply with applicable laws, regulations, and legal processes;
• To enforce these Terms of Service and our other policies;
• To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful or prohibited activities;
• To protect the rights, property, and safety of us, our users, and the public.

If you have opted in, we may send you product updates, newsletters, and promotional communications about the Service. You may opt out at any time via your account settings or by using the unsubscribe link in any marketing email.

We work with a small number of trusted third-party service providers who process data on our behalf in order to operate the Service:

1. Paddle (paddle.com): Our Merchant of Record for all payment processing. Paddle processes your billing information under its own Privacy Policy (paddle.com/legal/privacy).
2. Cloud Infrastructure Providers: We use cloud hosting and infrastructure services to store data and operate the platform. These providers have no independent right to use your data except to perform services for us.
3. Analytics Providers: We may use analytics tools such as Google Analytics to understand aggregate usage trends. These tools may collect anonymized or pseudonymized usage data.
4. AI Model Providers: Our Service relies on third-party AI model APIs to process your extracted text and generate quiz content. Uploaded content is submitted to these providers solely for the purpose of generating your outputs. We select providers that maintain appropriate data protection standards.

All our data processors are bound by data processing agreements requiring them to protect your data in accordance with applicable law.

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend our rights or property; (c) prevent or investigate possible wrongdoing in connection with the Service; or (d) protect the personal safety of users or the public.

If we are involved in a merger, acquisition, asset sale, or transfer of business, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service before your data is transferred and becomes subject to a different privacy policy.

We may share aggregated or anonymized data that does not identify you personally with third parties for research, analysis, or other purposes.

Regardless of your location, you have the right to:

1. Access: Request a copy of the personal information we hold about you.
2. Correction: Request that we correct inaccurate or incomplete personal information.
3. Deletion: Request deletion of your personal information, subject to certain exceptions (e.g., legal retention requirements).
4. Opt-Out of Marketing: Unsubscribe from marketing emails at any time via the unsubscribe link in any such email or via our contact form.

In addition to the above, if you are located in the EEA or UK, you have the right to:

1. Restriction: Request that we restrict processing of your personal data in certain circumstances;
2. Portability: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller;
3. Objection: Object to processing based on our legitimate interests, including for direct marketing;
4. Withdraw Consent: Where we rely on consent, withdraw it at any time without affecting prior lawful processing;
5. Lodge a Complaint: Lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu.

If you are a California resident, you have the right to:

1. Know: Request disclosure of the categories and specific pieces of personal information we have collected about you and the purposes for which it was used;
2. Delete: Request deletion of personal information we hold about you, subject to certain exceptions;
3. Correct: Request correction of inaccurate personal information;
4. Opt-Out of Sale or Sharing: We do not sell or share your personal information as defined under CCPA/CPRA;
5. Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.