1. Introduction
QuizAligned ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational quiz generation service.
This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Information We Collect
2.1 Personal Information
- Account Information: Name and email address for account creation
- Payment Information: Processed securely through Stripe (we do not store payment details)
- Usage Data: Quiz generation history, preferences, and access patterns
2.2 Technical Information
- Log Data: IP address, browser type, access times, and pages viewed
- Cookies: Essential cookies for authentication and preferences
3. How We Use Your Information
We process your personal data for the following purposes:
- Service Provision: To provide and maintain our quiz generation service
- Account Management: To create and manage your user account
- Payment Processing: To process subscription payments through Stripe
- Communication: To send service-related communications and support responses
- Improvement: To analyze usage patterns and improve our service
- Legal Compliance: To comply with legal obligations and resolve disputes
4. Legal Basis for Processing (GDPR)
We process your personal data based on:
- Contract Performance: To provide the services you've requested
- Legitimate Interest: To improve our service and ensure security
- Consent: Where you have provided explicit consent
- Legal Obligation: To comply with applicable laws
5. Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
- Service Providers: OpenAI for quiz generation, Stripe for payments
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with mergers or acquisitions
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication systems
- Secure hosting infrastructure
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Access: Request copies of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Request transfer of your data to another service
- Restriction: Request limitation of data processing
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for consent-based processing
To exercise these rights, contact us at support@quizaligned.com
8. Data Retention
We retain your personal data for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
Account data is retained for the duration of your account plus 2 years. Quiz data may be retained longer for service improvement purposes in anonymized form.
9. International Data Transfers
Your data may be transferred to and processed in countries outside the EEA. We ensure adequate protection through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
- Other appropriate safeguards as required by law
10. Children's Privacy
Our service is intended for teachers and educational institutions. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
12. Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.