Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information (email, name, profile picture via OAuth)
• Content you upload and generate (PDFs, notes, guides, flashcards, quizzes)
• Payment information (processed securely via Creem). We do not store your full payment card details; we receive payment status and transaction identifiers for account management and receipts.
• Usage data (page views, feature usage, error logs)

2. How We Use Your Information

• Provide and improve our services
• Process payments and manage your account
• Send service updates and marketing (opt-out available)
• Ensure security and prevent fraud
• Analyze usage patterns to enhance user experience

3. Data Sharing

We do not sell your personal information. We share data only with:

• Service providers: OpenRouter (text generation), Creem (payments), Vercel (hosting), Supabase (database), Cloudflare R2 (storage)
• Legal compliance: When required by law or to protect our rights
• Business transfers: In connection with any merger, acquisition, or sale of assets

4. Your Rights (GDPR/CCPA)

You have the following rights regarding your personal data:

• Access: Request a copy of your data
• Deletion: Request deletion of your account and data
• Correction: Update inaccurate information
• Opt-out: Unsubscribe from marketing emails
• Data portability: Export your data in machine-readable format

Contact us at privacy@studykit.pro to exercise these rights.

5. Cookies and Tracking

We use cookies and similar technologies:

• Essential cookies: Required for authentication and core functionality
• Analytics cookies: Optional, help us understand how you use our service
• Preference cookies: Remember your settings and preferences

Where required, we only use optional analytics cookies when you consent. You can also manage cookie preferences in your browser settings.

6. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit
• Encrypted databases for data at rest
• Regular security audits and updates
• Access controls and authentication
• Secure payment processing via PCI-DSS compliant providers

7. Data Retention

Raw files are retained for up to 7 days and outputs for up to 30 days, unless you delete your document earlier. When you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal compliance.

8. Children's Privacy

Our service is not intended for users under 13 years old. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. Our service providers (e.g., Vercel, Supabase, Creem, Cloudflare R2) may process data in other jurisdictions. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our service. Your continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or concerns, please contact: