Privacy Notice

This Privacy Notice explains how KRISH KUMAR AGRAWAL ("we", "us", "our"), trading as QuizeForge, collects, uses, and protects your personal data when you use the QuizeForge website and service (the "Service"). We act as the data controller for the personal data described below.

1. Personal data we collect

• Account data: name, email address, hashed password or OAuth identifier.
• Content you upload: notes, documents, images, PDFs, and text used to generate quizzes.
• Usage data: quizzes generated, scores, weak topics, plan and credit balance, feature toggles.
• Technical data: IP address, browser/device identifiers, log timestamps, anti-abuse fingerprint.
• Support messages: any communication you send us.

2. Purposes and legal basis

• Provide the Service (contract performance): authentication, generating quizzes, saving history, applying entitlements.
• Security and fraud prevention (legitimate interest / legal obligation): rate limiting, anti-abuse fingerprinting, logging.
• Improving the Service (legitimate interest): aggregated usage analytics.
• Customer support (contract / legitimate interest): responding to your messages.
• Legal compliance (legal obligation): tax, accounting, and lawful requests.

3. Who we share data with

We share personal data only with the following categories of recipients:

• Paddle.com Market Limited — our Merchant of Record, which processes all sales, subscriptions, payments, taxes, and invoicing on our behalf. Payment card details are collected directly by Paddle; we never see or store them.
• Cloud hosting and infrastructure subprocessors — database, storage, edge runtime, and email delivery providers used to operate the Service.
• AI model providers — used solely to generate quiz content from material you upload.
• Professional advisers — legal, tax, and accounting advisers where strictly needed.
• Authorities — where required by law or to defend our legal rights.

4. Data retention

Account data is kept while your account is active. Quiz and upload data is kept until you delete it or close your account. Billing records are retained as required by applicable law (typically up to 7 years). Logs and security data are retained for up to 12 months. When data is no longer needed it is deleted or anonymised.

5. International transfers

Data may be processed outside your country of residence by our subprocessors. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Your rights

Subject to applicable law you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data rectified.
• Have your data erased.
• Restrict or object to processing.
• Receive a portable copy of your data.
• Withdraw consent (where processing is based on consent).
• Lodge a complaint with your local data-protection supervisory authority.

We will respond to verified requests within one month.

7. Security

We apply appropriate technical and organisational measures including encryption in transit, row-level access controls, hashed credentials, and least-privilege service accounts. No system is completely secure, but we work continuously to protect your data.

8. Cookies

We use strictly necessary cookies and local storage to keep you signed in and remember your preferences. We do not run advertising trackers.

9. Contact

Questions or requests regarding this notice can be sent to KRISH KUMAR AGRAWAL at kka9437093326@gmail.com.