At StudyFast, we take your privacy seriously. This policy explains how we collect, use, store, and protect your personal information. We only collect what's necessary to provide our service and never sell your data to third parties.
We never sell your data
Your information is never sold to advertisers or third parties
Enterprise-grade security
Encryption, access controls, and 24/7 monitoring
Your data, your control
Export or delete your data anytime
1. Information We Collect
Account Information
When you create an account, we collect:
Email address
Name (optional, via OAuth providers)
Profile picture (if signing in with Google or GitHub)
Authentication credentials (managed by Clerk)
Usage Data
To provide and improve our service, we collect:
Course PDFs you upload
Generated quizzes, flashcards, and exams
Quiz scores and study progress
Upload timestamps and activity logs
IP address (for anti-abuse protection)
Payment Information
Payment details are handled securely by Stripe. We do not store your credit card information. Stripe provides us with:
Subscription status
Payment method type (e.g., "Visa ending in 4242")
Billing history
Technical Data
Browser type and version
Device type and operating system
IP address and approximate location
Usage patterns and feature interactions
2. How We Use Your Information
We use your information to:
Provide the Service: Process PDFs, generate quizzes, track your progress
Manage Your Account: Authenticate you, manage subscriptions, send notifications
Improve Our Service: Analyze usage patterns, fix bugs, develop new features
Communicate: Send service updates, billing notifications, support responses
Comply with Law: Meet legal obligations and enforce our Terms of Service
3. How We Store Your Data
Database: User data and content are stored in Supabase (PostgreSQL), hosted in secure cloud infrastructure.
File Storage: Uploaded PDFs are stored temporarily during processing and then removed. Generated content is stored in our database.
AI Processing: PDFs are sent to OpenAI for processing. OpenAI does not use your data to train their models (per OpenAI API terms).
Retention: We retain your data as long as your account is active. Deleted accounts have data permanently removed within 30 days.
4. Data Security
We implement security measures to protect your information:
Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
Access Control: Limited employee access with audit logs
Authentication: Secure authentication via Clerk (industry-leading provider)
Payment Security: PCI-compliant payment processing via Stripe
Rate Limiting: Protection against automated attacks and abuse
Monitoring: 24/7 security monitoring and incident response
While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any security incidents.
5. Third-Party Services
We use trusted third-party services to operate StudyFast:
Clerk: Authentication and user management
Stripe: Payment processing and subscription management
Supabase: Database hosting and storage
OpenAI: AI-powered quiz generation
Vercel: Hosting and deployment
These services have their own privacy policies. We carefully vet all third-party providers to ensure they meet high privacy and security standards.
6. Cookies and Tracking
We use cookies and similar technologies for:
Essential Cookies: Required for authentication and core functionality
Performance Cookies: Help us understand how you use the service
Preference Cookies: Remember your settings and preferences
You can control cookies through your browser settings, but disabling essential cookies may affect service functionality.
7. Data Sharing
We never sell your data. We only share information in these limited cases:
Service Providers: Third parties that help us operate (see Section 5)
Legal Requirements: When required by law, court order, or legal process
Business Transfers: In case of merger, acquisition, or sale (with notice to users)
With Your Consent: When you explicitly authorize sharing
We do not share your personal information for advertising or marketing purposes.
8. Your Rights
You have the following rights regarding your personal data:
Access: Request a copy of your personal data
Correction: Update incorrect or incomplete information
Deletion: Request deletion of your account and data
Export: Download your data in a portable format
Opt-Out: Unsubscribe from marketing emails (if any)
Object: Object to certain data processing activities
StudyFast is intended for users 13 years and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will delete it.
10. International Data Transfers
Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us: