Draft — not yet legally reviewed. This document is a standard SaaS template adapted to this product. It has not been reviewed by a lawyer and should not be relied on as final until it has been, particularly before accepting real paying customers or handling personal data outside a test context.

Privacy Policy

Last updated: 7 July 2026

1. What we collect

By design, this platform collects only the minimum needed to run the Service: full name and work email address for organization owners, admins, and invited members. We do not collect government IDs, banking details, or other sensitive personal identifiers as part of the platform itself. Individual product modules may collect additional information necessary for that module's function (for example, exam results within the Quiz module); this is documented separately where relevant and remains owned by the subscribing organization.

2. How we use it

To create and authenticate your account and organization;
To operate the module launcher and enforce subscription entitlements;
To process subscription billing via Stripe;
To send essential service communications (invites, billing notices, security alerts);
To provide customer support when requested.

We do not sell personal data, and we do not use it for third-party advertising.

3. Subprocessors

We use the following subprocessors to operate the Service:

Vercel — application hosting
Supabase — database, authentication, and file storage
Stripe — subscription billing and payment processing
Cloudflare — domain registration and DNS

Some modules may additionally use Groq and/or Jina AI for optional AI-assisted features (e.g. a knowledge-base chatbot); these process only the specific content relevant to that feature.

4. Cookies

We use a single essential session cookie (issued by our authentication provider, Supabase) to keep you signed in. We do not use advertising or third-party tracking cookies on this platform.

5. Data retention

We retain account and organization data for as long as the organization's subscription is active. Following cancellation or termination, data is retained for a reasonable period to permit export, then deleted or anonymized, except where retention is required by law (e.g. billing records).

6. Your rights

Depending on your location, you may have rights to access, correct, export, or request deletion of your personal data. Requests can be made by contacting us at the address below, or by your organization's admin on your behalf.

7. Security

Data is encrypted in transit (HTTPS) and at rest by our infrastructure providers. Access to each organization's data is isolated at the database level and scoped to members of that organization.

8. Children's privacy

The Service is intended for business use by working adults and is not directed at children. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified to Organization Owners by email or in-product notice before taking effect.

10. Contact

Privacy questions or requests can be sent to virtual.office.solutions.pvt@gmail.com.