Privacy Policy — Topic Learner

This Privacy Policy explains how [Company Legal Name] ("Topic Learner," "we," "us," or "our") collects, uses, and shares information when you use the Topic Learner website and Service (collectively, the "Service"). It should be read together with our Terms of Service.

1. Information We Collect

Account information: name, email address, and password (or authentication details) when you create an account.
Content you upload: documents, notes, slides, or other files you upload, and the quizzes, flashcards, gap-text exercises, multiple-choice questions, and dialog transcripts generated from them.
Usage data: how you interact with the Service — pages visited, features used, and similar log/device data (for example, browser type, IP address, and timestamps).
Payment information: handled by our payment processor (see Section 3); we receive limited billing details (such as plan, billing status, and a payment method reference) but not your full card number.
Communications: messages you send us, such as support requests.

2. How We Use Information

We use the information above to:

Provide, operate, and maintain the Service, including generating quizzes, flashcards, and other exercises from Your Content;
Process payments and manage subscriptions;
Respond to support requests and communicate with you about the Service (including service, security, and billing notices);
Monitor, secure, and improve the Service, including diagnosing technical issues;
Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information.

3. How We Share Information

We share information with the following categories of third parties, solely as needed to operate the Service:

AI/LLM service providers: to generate quizzes, flashcards, gap-text exercises, multiple-choice questions, and dialogs, Your Content is sent to a third-party AI service provider for processing. [Placeholder: name your specific AI provider(s) here once finalized — most privacy laws require naming your processors.] These providers process Your Content on our behalf and are contractually restricted from using it for purposes other than providing the service to us.
Payment processor: subscription payments are handled by a third-party payment processor (for example, Stripe), which collects and processes your payment details directly, subject to its own privacy policy.
Analytics providers: we may use analytics tools to understand how the Service is used (for example, aggregated page views and feature usage). [Placeholder: name your specific analytics provider once finalized.]
Service providers: hosting, storage, email delivery, and similar infrastructure providers that process data on our behalf under confidentiality obligations.
Legal & safety: if required by law, legal process, or to protect the rights, property, or safety of Topic Learner, our users, or others.
Business transfers: if we're involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this Policy.

4. Cookies & Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences (like light/dark mode), and understand aggregate usage of the Service. You can control cookies through your browser settings; disabling them may affect how the Service works.

5. Data Retention

We retain your account information and Your Content for as long as your account is active. If you delete your account, we delete or anonymize your personal information and Your Content within a reasonable period, except where we need to retain it to comply with legal, tax, or accounting obligations, or to resolve disputes.

6. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can access, update, or delete most account information directly from your account settings, or by contacting us at [support email address]. We'll respond to verifiable requests within the time required by applicable law.

If you are in the European Economic Area or UK, our legal bases for processing include performing our contract with you (providing the Service), our legitimate interests (such as securing and improving the Service), and your consent where required (such as certain cookies).

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, and correct your personal information, and to opt out of "sharing" for cross-context behavioral advertising; we do not sell or share personal information for cross-context behavioral advertising as those terms are defined by California law.

7. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

We and our service providers may process information in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for these transfers.

9. Children's Privacy

The Service is not directed to children under 13 (or the applicable minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us at [support email address] so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify active subscribers (for example, by email or an in-product notice) before the changes take effect.

11. Contact Us

Questions about this Privacy Policy or your data? Contact us at [support email address].

[Company Legal Name]
[Company Address, if required in your jurisdiction]