Your Privacy Matters: We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use MCQ Pilot.
1. Information We Collect
1.1 Personal Information
We collect personal information that you voluntarily provide to us when you:
- Create an account (email address, password)
- Subscribe to our service (billing information processed by Stripe)
- Contact us for support
1.2 Usage Information
We automatically collect certain information when you use our Service:
- Question usage statistics (number of questions asked, dates)
- Browser and device information
- IP address and location data
- Service usage patterns and performance metrics
1.3 Content Information
When you use our Service, we temporarily process:
- Images uploaded for OCR processing
- Extracted text from images
- Questions and AI-generated responses
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process your questions and generate AI responses
- Manage your account and subscription
- Enforce usage limits based on your plan
- Provide customer support
- Send important updates about our Service
- Analyze usage patterns to improve our Service
- Comply with legal obligations
3. Data Processing and Storage
3.1 Question Content
Important: We do not permanently store your questions or images. Content is processed temporarily for AI analysis and then deleted.
3.2 Data Retention
- Questions and Images: Deleted immediately after processing
- Usage Statistics: Stored for billing and limit enforcement
- Account Information: Retained while your account is active
- Billing Records: Retained for 7 years for legal compliance
4. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
4.1 Service Providers
We use trusted third-party services:
- Supabase: Database and authentication services
- Stripe: Payment processing (they have their own privacy policy)
- OpenAI: AI processing services
- Google Cloud Vision: OCR processing services
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- SSL/TLS encryption for data transmission
- Secure authentication with Supabase
- Regular security audits and updates
- Limited access to personal information
- Data minimization practices
6. Your Privacy Rights
You have the right to:
- Access: Request a copy of your personal information
- Correction: Update or correct your personal information
- Deletion: Request deletion of your personal information
- Portability: Receive your data in a structured format
- Objection: Object to certain processing of your data
- Withdrawal: Withdraw consent at any time
7. Cookies and Tracking
Our Service uses minimal cookies and tracking:
- Authentication cookies to keep you logged in
- Local storage for user preferences
- No third-party advertising cookies
- No social media tracking pixels
8. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.
10. Third-Party Services
Our Service integrates with third-party services that have their own privacy policies:
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last updated" date
- Sending you an email notification for material changes
12. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
Email: privacy@mcqpilot.com
Website: https://mcqpilot.com
Data Protection Officer: dpo@mcqpilot.com
13. GDPR Compliance
If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). We process your personal information based on:
- Contract: To provide our Service to you
- Legitimate Interest: To improve our Service
- Consent: For marketing communications (opt-in)
- Legal Obligation: To comply with applicable laws
14. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, use, and disclose about you.