Privacy Policy
Last updated: November 7, 2025
What We Collect
We collect the following types of information:
- Account Information: Email address, name, and profile data you provide during registration
- Usage Data: Information about how you use our platform, including design sessions, problem attempts, and progress tracking
- Device Information: Browser type, operating system, IP address, and device identifiers for security and analytics
- Payment Information: Billing details processed securely through Stripe (we do not store credit card information)
How We Use Your Information
We use your information for the following purposes:
- Authentication: To provide secure access to your account through Supabase Auth
- Service Delivery: To provide our system design learning platform and track your progress
- Payments: To process subscriptions and billing through Stripe
- Analytics: To understand platform usage and improve our services
- Support: To provide customer support and respond to your inquiries
Legal Basis
We process your data based on:
- Consent: When you create an account and use our services
- Contract: To fulfill our service agreement and provide the platform
- Legitimate Interest: To improve our services and ensure platform security
Third-Party Services
We use the following third-party services:
- Supabase: Authentication, database, and file storage services
- Stripe: Payment processing and subscription management
- Vercel: Hosting and analytics (cookieless analytics)
- Email Services: For account notifications and support communications
Cookies and Tracking
We use minimal tracking:
- Essential Cookies: Required for authentication and platform functionality
- Analytics: We use cookieless analytics (Vercel Analytics) that do not track personal information
- No Third-Party Tracking: We do not use Google Analytics or other tracking services
Data Retention and Deletion
We retain your data as follows:
- Account Data: Retained while your account is active and for 30 days after deletion
- Usage Data: Retained for up to 2 years for analytics and service improvement
- Payment Data: Retained as required by law and Stripe's data retention policies
- Deletion: You can request account deletion at any time through your account settings
Your Rights
You have the following rights regarding your data:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data
- Portability: Export your data in a machine-readable format
- Objection: Object to processing based on legitimate interests
To exercise these rights, contact us at: privacy@studysystemdesign.com
International Transfers
Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place for such transfers, including:
- Standard contractual clauses with our service providers
- Adequacy decisions by relevant data protection authorities
- Other appropriate safeguards as required by applicable law
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to your registered email address
- Displaying a notice on our platform
Your continued use of our services after such changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this privacy policy or our data practices, please contact us: