1. Introduction
StudyPack ("we," "us," or "our") is owned and operated by Sharpbase Technologies LLC. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service at studypack.app (the "Service"). By using the Service, you consent to the practices described in this policy.
2. Information we collect
a) Account information
When you sign in with Google, we receive and store your name, email address, and profile image. This information is used to create and manage your account.
b) Payment information
If you subscribe to a paid plan, your payment is processed by Stripe, Inc. We store your Stripe customer ID and subscription status but never store your credit card number, CVV, or full payment details. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.
c) Content you provide
YouTube URLs, uploaded documents (PDF, audio, video, text files), and pasted text that you submit for processing. Uploaded files are processed in memory and not permanently stored on our servers.
d) Usage data
We collect generation counts, chat message counts, feature usage patterns, and subscription activity to operate and improve the Service.
e) Technical data
We collect IPv4 addresses, browser type, device type, and request timestamps through server logs and application monitoring. IP addresses are stored in your account record to help prevent fraud, abuse, and unauthorized access.
3. How we use information
We use the information we collect to:
- Authenticate your identity and manage your account.
- Process your content submissions and generate study packs.
- Process payments and manage your subscription.
- Enforce usage limits and prevent abuse.
- Detect and prevent fraud, chargebacks, and unauthorized access.
- Monitor, maintain, and improve service reliability and performance.
- Communicate with you about your account, billing, or service updates.
- Comply with legal obligations.
4. Data sharing
We do not sell, rent, or share personal information with third parties for marketing purposes. We share data only with the following categories of service providers, solely to operate the Service:
- AI providers (Google Gemini) — to generate study pack content from your submissions.
- Payment processor (Stripe) — to process subscription payments.
- Authentication provider (Google OAuth) — to verify your identity at sign-in.
- Infrastructure providers (hosting, database) — to operate and deliver the Service.
We may also disclose your information if required by law, legal process, or government request, or to protect the rights, safety, or property of Sharpbase Technologies LLC, our users, or the public.
5. Data retention
We retain your data as follows:
- Account data: Retained for as long as your account is active. Deleted upon account deletion.
- Saved study packs: Retained until you delete them or your account is terminated.
- Payment records: Retained for the period required by applicable tax and financial regulations (typically 7 years).
- IP address history: Retained as part of your account record for fraud prevention.
- Server logs: Retained for a limited period for security and debugging, then deleted.
- Dispute/chargeback records: Retained indefinitely for fraud prevention and legal defense.
6. Data security
We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication, and access controls. However, no system is 100% secure, and we cannot guarantee the absolute security of your information.
7. Cookies
We use essential cookies required for authentication and the Service to function properly. These include session cookies for maintaining your login state. We do not use advertising, tracking, or third-party analytics cookies.
8. Your rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate personal data.
- Deletion: Request deletion of your account and associated data.
- Data portability: Request an export of your data in a portable format.
- Objection: Object to certain processing of your personal data.
- Withdraw consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at support@studypack.app. We will respond within 30 days. Note that deleting your account will permanently remove all your study packs and data.
9. California privacy rights (CCPA)
If you are a California resident, you have the right to: (a) know what personal information is collected, used, or shared; (b) request deletion of your personal information; (c) opt out of the sale of personal information — we do not sell personal information; and (d) not be discriminated against for exercising your privacy rights.
10. International data transfers
Your data may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to countries that may have different data protection laws than your country of residence.
11. Children's privacy
The Service is not directed at children under 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it promptly.
12. Changes to this policy
We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when it was last revised. For material changes, we will make reasonable efforts to notify you. Continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@studypack.app.
Sharpbase Technologies LLC
Email: support@studypack.app