Privacy Policy

1. Who we are

LectoAI ("we", "us") provides an AI-powered study assistant that turns lecture PDFs into summaries, flashcards, and quizzes. This Privacy Policy explains how we handle personal data when you use our website and services.

2. Data we collect

• Account data: When you sign in, Clerk collects and processes authentication data such as your email address, name, and profile image. We receive a subset of this information to associate your study materials with your account.
• Uploaded content: PDF files you upload, extracted text, and AI-generated study materials (summaries, flashcards, quiz questions) stored in your workspace.
• Usage data: Basic technical logs (e.g. request timestamps, error reports) needed to operate and secure the service. We do not currently use third-party advertising analytics; if that changes, we will update this policy.
• Local storage & cookies: Essential cookies and browser local storage for authentication state (Clerk), cookie consent preference, and anonymous device identifiers when you use the app without signing in.

3. How we use your data

We use your data to:

• Provide, maintain, and improve LectoAI
• Generate and store your study materials
• Authenticate you and protect against abuse
• Respond to support and privacy requests
• Comply with legal obligations

4. Authentication (Clerk)

Sign-in and sign-up are handled by Clerk. Clerk processes credentials and session tokens according to their privacy policy. We do not store your password. Session tokens are verified on our backend to identify your account.

5. AI processing (important)

To generate study materials, the text extracted from your uploaded PDFs is sent to third-party AI providers, currently including Google Gemini, Groq, and Anthropic Claude (depending on availability and configuration). These providers process your content solely to produce the requested output (summary, flashcards, quiz). We do not sell your PDF content to AI vendors for model training through these API integrations; processing is limited to fulfilling your request. Each provider's data handling is governed by their respective terms and privacy policies.

Do not upload documents containing sensitive personal data you are not comfortable sharing with these subprocessors.

6. Retention & deletion

We retain your account data and generated study materials while your account is active. You may delete individual lectures or subjects from your workspace. To request full account deletion and erasure of associated data, email privacy@lectoai.app. We will respond within 30 days unless a longer period is permitted by law.

7. Your rights (GDPR & similar laws)

If you are in the EEA, UK, or another region with similar protections, you may have the right to:

• Access — obtain a copy of personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format where applicable
• Objection / restriction — object to or restrict certain processing
• Withdraw consent — where processing is based on consent

To exercise these rights, contact privacy@lectoai.app. You may also lodge a complaint with your local supervisory authority.

8. Cookies

We use essential cookies for authentication and security. Non-essential cookies are not used for advertising. You can control cookie consent via the banner on our site; closing the banner without accepting does not enable optional tracking (we do not run optional tracking cookies at this time).

9. International transfers

Our service providers (hosting, database, AI APIs, Clerk) may process data in the United States or other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

10. Contact

Privacy questions or requests: privacy@lectoai.app