Privacy Policy

1. Who we are

StudocAI is a product of DJ Cloud Solutions ("DJ Cloud Solutions", "StudocAI", "we", "us"). We provide AI-powered study tools at studocai.com. This policy explains what personal information we collect, how we use it, and the choices you have.

For billing-related questions, see Section 6 (Payments and Paddle). For everything else, contact privacy@studocai.com.

2. Information we collect

We collect the minimum needed to run the service.

• Account information you give us at signup: full name, email address, password (stored hashed by our auth provider), country, and how you heard about us.
• Content you upload or create: documents, lecture audio, notes, quiz responses, presentations, mind maps, and chat messages with the AI Tutor.
• Usage data: which tools you use, when, how often, and how many credits each action consumes.
• Device and log data: IP address, browser, operating system, error logs, and approximate location derived from IP.
• Cookies and local storage: a session cookie set by our auth provider (Supabase), a theme preference, and your interaction with the launch promo banner.
• Communications: messages you send to support, including any attachments.

3. How we use your information

• Operate the product — authenticate you, store your content, deliver AI outputs, and keep your credit balance accurate.
• Process payments — share the minimum required data with Paddle so they can charge your card and remit applicable tax. See Section 6.
• Improve the service — diagnose bugs, measure feature usage in aggregate, and prioritize what to build next.
• Protect users and the service — detect fraud, abuse, and security incidents.
• Communicate with you — transactional notices (receipts, password resets, account changes) and, only if you opt in, product updates.
• Comply with legal obligations — respond to lawful requests and enforce our terms.

4. AI processing and your content

When you use an AI tool, the content you submit (your question, document text, recording transcript, etc.) is sent to Microsoft Azure OpenAI to generate a response. We use Azure OpenAI under Microsoft's enterprise terms, which prohibit Microsoft from using your content to train its foundation models.

We do not sell your content to anyone. We do not use your content to train third-party models. Aggregate, non-personal usage statistics (e.g., "users generate ~3 mind maps per session") may be used internally to improve the product.

AI outputs are generated probabilistically and can be incorrect or incomplete. Treat them as study aids, not authoritative sources, and verify anything you submit for grading.

5. Who we share information with

We share personal information only with the service providers we need to run StudocAI, and only the data they need to do their job. Each provider is contractually bound to protect your data.

• Supabase — authentication and session management.
• Microsoft Azure — application hosting (Azure Web App), database (Azure SQL), AI inference (Azure OpenAI), and speech services.
• Paddle.com Market Ltd. — payment processing, fraud prevention, sales tax / VAT calculation, and billing communications. Paddle acts as the Merchant of Record for all credit pack purchases.
• Email and support tooling — to send transactional emails and respond to your inquiries.
• Law enforcement or regulators — only when legally required, and only the specific information requested.

6. Payments and Paddle (Merchant of Record)

All credit pack purchases on StudocAI are processed by Paddle.com Market Ltd. (or one of its affiliates), which acts as the Merchant of Record. This means Paddle is the seller of record for your purchase — they take payment, collect any applicable VAT or sales tax, issue receipts, and handle billing disputes and refunds.

When you check out, Paddle collects your name, email, billing address, and payment method directly. We do not see or store your card details. We receive a confirmation that the transaction completed, along with the transaction ID and amount, which we record so we can grant the credits you purchased.

Paddle's own privacy notice applies to the data they collect. Read it at paddle.com/legal/privacy.

For refund requests, see our Terms of Service. Refund requests can also be raised directly via the receipt email Paddle sends you.

7. How long we keep your data

• Account data — kept until you delete your account, then removed within 30 days, except where retention is required by law (e.g., tax records).
• Content you upload — kept until you delete it or your account, then removed within 30 days.
• Payment records — Paddle retains transaction records for the period required by their regulators (typically 7+ years for tax). We retain a summary (date, amount, pack purchased) for as long as your account exists.
• Logs and security data — typically 90 days.
• Support communications — typically 2 years.

8. Security

• Encryption in transit (TLS 1.2+) for everything between your browser and our servers, and between our servers and our providers.
• Encryption at rest for stored data, managed by Azure and Supabase.
• Role-based access controls on production systems and audit logging on administrative actions.
• No system is perfectly secure. If we discover a breach affecting your data, we will notify you and the relevant regulators as required by law.

9. Your rights

Depending on where you live (GDPR in the EU/UK, CCPA in California, similar laws elsewhere), you may have the following rights:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to fix inaccurate information.
• Deletion — delete your account and associated data from Settings → Danger Zone, or by writing to privacy@studocai.com.
• Portability — request your data in a machine-readable format.
• Objection / restriction — object to certain processing or ask us to limit it.
• Withdraw consent — for processing based on consent, withdraw it at any time.
• Complain — lodge a complaint with your local data protection authority.

10. Children

StudocAI is not directed to children under 13 (or under 16 in the EU). If you believe a child has provided us with personal information, contact privacy@studocai.com and we will delete the account.

11. International transfers

Your data may be processed in countries other than your own — primarily where our service providers operate data centers. Where required, we rely on Standard Contractual Clauses and equivalent safeguards to protect international transfers.

12. Cookies and tracking

We use a small number of first-party cookies and local storage entries: a session cookie for authentication, a theme preference, and a flag for the launch promo banner. We do not use third-party advertising cookies. If we ever add analytics, this section will be updated and (where required) a consent banner will appear.

13. Changes to this policy

We may update this policy from time to time. Material changes will be announced via email or an in-product notice at least 14 days before they take effect. The "last updated" date below always reflects the current version.

14. Contact

Privacy questions: privacy@studocai.com.

Billing or purchase questions: see the receipt Paddle sent you, or write to support@studocai.com.