Back to home
    SocraStudy

    Privacy Policy

    Last updated: March 9, 2026

    1. Introduction

    SocraStudy ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our AI-powered study platform. We comply with applicable data protection regulations including GDPR and CCPA.

    2. Information We Collect

    Account Information

    Email address, display name, profile picture, and authentication data (including data from third-party sign-in providers like Google).

    User Content

    Documents you upload (PDFs, text files, images), notes you create, and study materials generated from your content (flashcards, quizzes, summaries, exam practice).

    Usage Data

    Study activity, quiz scores, learning progress, session duration, feature usage patterns, and device/browser information.

    Payment Information

    Billing details are processed securely by Stripe. We store only your subscription status, plan type, and billing period — never your full card details.

    3. How We Use Your Information

    • Core Service Delivery: Process your documents, generate study materials, power AI tutoring, and track your learning progress.
    • Personalization: Adapt difficulty levels, recommend study techniques, and generate performance reports based on your activity.
    • AI Processing: Your document content is sent to AI language models to generate explanations, questions, and summaries. This processing is transient — AI providers do not store your content after processing.
    • Communication: Send account-related emails (verification, password reset, subscription updates).
    • Improvement: Analyze aggregate, anonymized usage patterns to improve the platform.

    4. Data Storage & Security

    Your data is stored securely using industry-standard encryption (AES-256 at rest, TLS 1.3 in transit). Documents are stored in encrypted cloud storage with access controls ensuring only you can access your content. We implement row-level security policies to prevent unauthorized access between user accounts. Regular security audits and penetration testing are conducted.

    5. Data Sharing

    We do not sell your personal data. We share data only with:

    • AI Service Providers: Document content is processed by AI models to generate study materials. Content is not stored by these providers after processing.
    • Payment Processor (Stripe): For subscription billing.
    • Infrastructure Providers: Cloud hosting and database services that process data under strict data processing agreements.
    • Legal Requirements: When required by law, court order, or to protect our rights.

    6. Your Rights

    You have the right to:

    • Access: Request a copy of all personal data we hold about you.
    • Rectification: Update or correct your personal information via Settings.
    • Deletion: Request deletion of your account and all associated data.
    • Portability: Request your data in a machine-readable format.
    • Objection: Object to processing of your data for specific purposes.
    • Restriction: Request limited processing of your data.

    To exercise these rights, contact us at privacy@socrastudy.com. We will respond within 30 days.

    7. Cookies & Tracking

    We use essential cookies for authentication and session management. We do not use third-party advertising trackers. Analytics data is collected in aggregate, anonymized form to improve the platform.

    8. Data Retention

    Your data is retained as long as your account is active. Upon account deletion, all personal data and content is permanently deleted within 30 days. Anonymous, aggregated analytics data may be retained indefinitely. Billing records are retained for 7 years as required by financial regulations.

    9. Children's Privacy

    SocraStudy is not intended for children under 13. We do not knowingly collect data from children under 13. Users between 13 and 18 must have parental consent. If you believe a child under 13 has created an account, contact us immediately.

    10. International Data Transfers

    Your data may be processed in countries other than your own. We ensure appropriate safeguards (Standard Contractual Clauses or equivalent) are in place for international transfers.

    11. Changes to This Policy

    We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.

    12. Contact Us

    For privacy-related inquiries: privacy@socrastudy.com

    Data Protection Officer: dpo@socrastudy.com

    Unlock the full SocraStudy experience

    Unlimited documents, AI-powered flashcards, quizzes, exams, and more. Start studying smarter today.