Information we process
- Account information such as your email address, phone number when enabled, user identifier, and authentication status.
- Presentation settings such as title, occasion, audience, expected concerns, requested language, challenge level, and question count.
- Files you choose to upload, including PDF, PPTX, or DOCX content, for the purpose of generating the requested practice.
- Usage and entitlement records such as generation count, file type and size, subscription state, timestamps, error details, and security logs.
- First-touch acquisition information after registration, such as the landing path, referral hostname, and UTM campaign parameters. We do not use third-party advertising cookies for this record.
- Support messages and feedback you choose to send.
- Stripe customer, checkout, and subscription identifiers. We do not receive your complete payment-card number.
How we use information
We use information to authenticate accounts, generate personalized questions and reference answers, provide free and paid entitlements, secure and troubleshoot the service, respond to support and privacy requests, enforce our terms, and comply with law. We do not sell personal information.
Files and generated practice
Uploaded file content is processed to answer the request. QuestionReady application code does not write the uploaded document body or generated answer text to its business database. A recent practice may be stored locally on your device. Hosting and AI providers may process request data under their own contractual retention and security terms. Do not upload state secrets, regulated data, third-party confidential information, or personal information you are not authorized to process.
Service providers
We use Supabase for authentication and account data, Render for cloud hosting, OpenAI for AI generation, Stripe for web subscription payments, and Sentry for privacy-filtered error monitoring. These providers process information on our behalf or as independent controllers for their functions. Their infrastructure may process data in countries other than yours.
Retention
We retain account and entitlement data while your account is active and for a reasonable period afterward when needed for security, disputes, or legal obligations. Security and diagnostic logs are kept only as reasonably necessary. Stripe may retain transaction records as required by financial law and its contracts. Account deletion removes data controlled by QuestionReady subject to backups, fraud prevention, and legal retention requirements.
Your choices and rights
You can clear local practice history and request account deletion from the account screen. Depending on your location, you may also have rights to access, correct, copy, restrict, object to, or delete personal information, and to withdraw consent. Email support@questionready.com. We may verify your identity before completing a request.
Security, children, and changes
We use HTTPS, access controls, server-side secret isolation, file validation, and rate limits. No online service can guarantee absolute security. QuestionReady is not directed to children under 14. We may update this policy as the product or law changes; material changes will be communicated through the service or by other appropriate means.