Privacy Policy

[LEGAL ENTITY NAME] ([ENTITY TYPE]), [REGISTERED OFFICE ADDRESS], decides why and how your personal data is processed. This policy explains what we collect and why, who else handles it, how long we keep it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act).

What we collect

• Account data: your name and email address. Your password is stored only as a hash, never in readable form.
• Uploaded documents: the PDF, DOCX or PPTX files you upload, and the text extracted from them.
• Study activity: the lessons, notes, quizzes, chat messages, viva answers and settings you create or choose while using StudyCast.
• Calendar feed URLs: only if you choose to import a calendar feed.
• Technical data: the sign-in cookie described in the Cookie Policy, and server logs used for security and abuse prevention.

Why we use it

• To create your account and sign you in.
• To turn your documents into audio, video, notes, quizzes and chat answers, which is the service you asked for.
• To keep StudyCast secure, prevent abuse and respond to valid legal requests.
• To answer your questions and complaints.

We do not sell your data and we do not use it for advertising.

Who processes your data

To generate output, parts of your document text are sent to these providers. They process it for us.

• Google (Gemini API), United States and other countries where Google operates: writes lesson scripts, notes, quizzes and chat answers.
• NVIDIA (NIM API), United States: generates images for narrated video.
• Microsoft (Edge text-to-speech service), United States and other countries where Microsoft operates: turns text into spoken audio.
• Hosting, [HOSTING PROVIDER AND LOCATION]: stores the database and uploaded files.

Your data therefore leaves India. The DPDP Act allows this unless the Government restricts a country. [LAWYER: confirm the cross-border position at launch.]

About Google: Google’s published terms say that content sent through its free tier may be used to improve its products, and that content sent through its paid tier is not. Those are Google’s stated terms, not ours. We intend to use the paid tier [OWNER: confirm the billing account is paid]. Please check Google’s current terms yourself, because they can change. Do not upload anything you are not comfortable sending to these providers.

How long we keep it

• Uploaded files are deleted after the retention window configured for the service. The default is 7 days.
• Cached generated speech that has not been used for 30 days (the default) is removed.
• Your account data stays until you ask us to erase it. [LAWYER: confirm account and log retention periods.]

Lessons you share by link are visible to anyone with the link until you stop sharing them.

Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold and how it is used (access);
• ask us to correct or complete your data (correction);
• ask us to erase your data (erasure);
• withdraw your consent, as easily as you gave it;
• complain to us (grievance), and then to the Data Protection Board of India.

To use any of these rights, email [DATA PROTECTION CONTACT EMAIL] from the address on your account. We may need to confirm it is you.

Complaints

If we do not resolve your request, use our grievance process. Our Grievance Officer is [GRIEVANCE OFFICER NAME].

Security

We protect your data with reasonable safeguards, including hashed passwords and access controls. No system is perfectly secure. If a breach affects you we will tell you as the law requires.

Children

StudyCast is for people aged 18 and over. If you are under 18, a parent or guardian must agree on your behalf. [LAWYER: confirm the age and parental consent approach.]

Changes

We will update the date above when this policy changes and tell you about material changes.