Privacy Policy

1. What we collect

• Account data: email address, password (stored as a salted hash), email verification status.
• Usage data: credit balance, lecture and course generation history (topic, prompt, mode, quality tier, timestamps).
• Session data: authentication tokens stored in your browser’s localStorage.
• Product analytics: first-party events (page views, generation actions) sent to our own backend. We do not use third-party trackers, advertising pixels, or analytics SDKs.
• Payment data: subscription payments processed by Lemon Squeezy. We receive only the order/subscription ID, status, plan, and amount — we never see or store your full card details.

2. Why we use it

• to provide the Service and your generation history;
• to authenticate you and protect your account;
• to process subscription payments, renewals, and refunds;
• to debug, prevent abuse, and improve the product based on aggregate usage.

3. AI processing

When you submit a generation request, your prompt is sent to large-language-model providers (such as OpenAI and Anthropic) through their APIs to produce the lecture content. These providers process the data per their own privacy and data-retention policies. Do not include personal or confidential information in your prompts.

4. Sharing

We do not sell your data. We share data only with service providers strictly necessary to operate the Service: cloud hosting, the AI providers above, the payment processor, and email delivery. Each acts as a processor on our behalf.

5. Storage and security

Data is hosted on Google Cloud Platform. Passwords are stored as salted hashes; authentication uses signed tokens. We use HTTPS for all traffic.

6. Retention

We keep your account data and history for as long as your account is active. You can request account deletion at any time by emailing us — your data will be removed within 30 days, except where retention is required for billing or legal compliance.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise any of these rights, contact us using the email below.

8. Cookies

We do not set tracking cookies. We use browser localStorage to keep you signed in and to remember your language preference. Clearing your browser storage will sign you out.

9. Children

The Service is not intended for users under 16. We do not knowingly collect data from children.

10. Changes

We may update this Policy. Material changes will be reflected in the “Last updated” date.

11. Contact

Privacy questions or deletion requests: darthhash@gmail.com.