Privacy Policy

1. Overview

VieraStudy values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our study platform. By using VieraStudy, you agree to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address: Used for account authentication and important communications
• Name: First and last name for personalization
• Password: Securely hashed using SHA-256 encryption before storage
• Account preferences: Settings like dark mode, notification preferences

2.2 Study Content & Data

To provide our services, we store the content you create:

• Classes: Course names, descriptions, schedules, and progress
• Flashcards: Card content, decks, study sessions, and mastery levels
• Notes: Text content, formatting, and organization
• Tasks & Todos: Task descriptions, due dates, completion status
• Schedule Events: Event titles, dates, times, and descriptions
• Progress Data: Study statistics, completion rates, and performance metrics
• Pomodoro Sessions: Timer history, focus time, and productivity statistics

2.3 Technical & Usage Data

We collect limited technical information to maintain platform security and performance:

• Authentication tokens: Session management (stored in sessionStorage)
• Activity logs: Recent actions for displaying your activity feed
• Error logs: Crash reports and error messages for debugging
• Browser information: Basic compatibility and performance data

We do NOT collect: IP addresses, precise geolocation, browsing history outside VieraStudy, or device identifiers.

3. AI Features & Data Processing

VieraStudy offers AI-powered features including grammar checking, essay scoring, and study assistance. Here's how we handle AI data:

• Real-time Processing: When you use AI features, your text is sent to our AI provider, processed immediately, and results are returned to you
• No Storage: Neither VieraStudy nor our AI providers retain your AI interaction data after processing
• No Training: Your AI requests are never used to train AI models or improve algorithms
• No Third-Party Sharing: AI data is not shared with advertisers, analytics companies, or other third parties
• Secure Transmission: All AI requests are encrypted in transit using HTTPS/TLS

AI Features Include:

• Grammar and spelling checks
• Essay scoring and feedback
• Study assistance and explanations
• Content suggestions and improvements

4. Data Storage & Security

We implement industry-standard security measures to protect your information:

4.1 Encryption

• Data at Rest: All stored data is encrypted using AES-256 encryption on Cloudflare Workers infrastructure
• Data in Transit: All communications use HTTPS/TLS 1.3 encryption
• Password Security: Passwords are hashed with SHA-256 and never stored in plain text

4.2 Access Controls

• Strict authentication requirements for all user accounts
• Session tokens stored securely in browser sessionStorage
• Limited administrative access with audit logging
• Regular security monitoring and vulnerability scanning

4.3 Infrastructure

• Cloud Provider: Cloudflare Workers and Durable Objects
• Data Centers: Distributed globally with redundancy
• Backups: Automated backups with encryption
• Disaster Recovery: Multi-region failover capabilities

5. How We Use Your Data

We use your information solely to provide and improve VieraStudy services:

• Service Delivery: Store and sync your study content across devices
• Account Management: Authenticate your identity and manage your account
• Feature Functionality: Enable flashcards, notes, schedules, and other tools
• Performance Optimization: Monitor system performance and fix bugs
• Security: Detect and prevent fraud, abuse, and security threats
• Communication: Send important account updates and security notifications
• Support: Respond to your questions and technical issues

We do NOT use your data for:

• Advertising or marketing to you
• Selling or renting to third parties
• Training AI models
• Behavioral tracking or profiling
• Sharing with schools or educational institutions

6. Data Sharing & Disclosure

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We may disclose information only in these limited circumstances:

• Legal Requirements: When required by law, court order, or government request
• Safety & Security: To protect rights, property, or safety of VieraStudy, users, or the public
• Terms Enforcement: To enforce our Terms of Service or investigate violations
• Business Transfer: In the event of a merger, acquisition, or sale (users will be notified)
• With Your Consent: When you explicitly authorize sharing

Service Providers: We use these trusted third parties who are bound by privacy agreements:

• Cloudflare: Cloud infrastructure and data storage
• AI Provider: Real-time AI processing (no data retention)

7. Data Retention & Deletion

7.1 While Your Account is Active

Your study data is stored securely as long as your account remains active. This includes:

• All flashcards, notes, tasks, and schedules you create
• Progress tracking and statistics
• Account settings and preferences

7.2 Account Deletion

When you delete your account:

• Immediate: Access is revoked and account is marked for deletion
• Within 30 Days: All personal data is permanently deleted from production systems
• Backups: Data in encrypted backups is purged within 90 days
• No Recovery: Deleted data cannot be recovered

7.3 Data Retention Exceptions

We may retain certain information for legal compliance:

• Transaction records for tax and accounting purposes (7 years)
• Information required for ongoing legal matters
• Aggregated, anonymized data that cannot identify you

8. Children's Privacy (COPPA Compliance)

VieraStudy is committed to protecting children's privacy in compliance with the Children's Online Privacy Protection Act (COPPA):

• Age Requirement: Users must be 18+ or 13+ with parental consent
• Under 13 Prohibited: We do not knowingly collect information from children under 13
• Parental Consent: Users ages 13-17 must have verifiable parental permission
• Minimal Collection: We collect only information necessary for service functionality
• No Marketing: We do not market to children or share their data

If We Discover Underage Users: If we learn that a child under 13 has created an account without parental consent, we will immediately delete the account and all associated data.

Parents: If you believe your child under 13 has created an account, please contact us immediately at [email protected].

9. Your Privacy Rights

You have the following rights regarding your personal data:

9.1 Access & Export

• View all your stored data through your account dashboard
• Export your data in standard formats (JSON, CSV)
• Request a complete copy of your information

9.2 Correction & Update

• Edit your account information at any time
• Update or delete study content you've created
• Modify preferences and settings

9.3 Deletion

• Delete your entire account and all data through account settings
• Request specific data deletion by contacting us

9.4 Object & Restrict

• Object to certain data processing activities
• Request restricted processing in specific situations

To exercise your rights: Contact us at [email protected] or manage settings in your account dashboard.

10. Cookies & Tracking

VieraStudy uses minimal tracking technologies:

10.1 Essential Storage

• sessionStorage: Stores authentication token (clears when browser closes)
• No Cookies: We do not use traditional cookies
• localStorage: Stores user preferences like dark mode setting only

10.2 Third-Party Tracking

• No Analytics: We do not use Google Analytics or similar tracking
• No Advertising: No advertising cookies or pixels
• No Social Media: No Facebook Pixel or social tracking

11. International Users & Data Transfers

VieraStudy is operated in the United States. If you access our service from outside the US:

• Your data may be transferred to and stored in the United States
• Data protection laws may differ from your country
• We use encryption and security measures to protect international transfers
• By using VieraStudy, you consent to this transfer

12. Security Measures

We implement comprehensive security practices:

• Encryption: AES-256 for data at rest, TLS 1.3 for data in transit
• Authentication: Secure password hashing with SHA-256
• Session Management: Secure token-based authentication
• Access Logs: Monitoring of administrative access
• Vulnerability Testing: Regular security audits and testing
• Incident Response: Documented procedures for breach response

In the Event of a Breach: We will notify affected users within 72 hours and take immediate action to secure systems and prevent further unauthorized access.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements:

• The "Effective Date" at the top will be updated
• Material changes will be communicated via email or prominent notice
• We will maintain an archive of previous versions
• Continued use after changes constitutes acceptance

We encourage you to review this policy periodically.

14. Contact Information

For privacy questions, concerns, or requests regarding your personal data:

Email: [email protected]

Website: https://vierastudy.com

Response Time: We aim to respond to all privacy inquiries within 5 business days.

15. Additional Legal Information

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we don't sell data)
• Right to non-discrimination for exercising rights

European Users (GDPR)

While VieraStudy is US-based, we respect GDPR principles:

• Legal basis for processing: Contract performance and legitimate interests
• Data minimization: We collect only necessary information
• Right to portability: Export your data anytime
• Right to be forgotten: Delete your account and all data