Privacy Policy

This policy explains what Ozyplan collects, how it is used, and the choices you have. It describes the product as actually built.

Information we collect

• Account information — your email address and name, used to sign you in and personalize the app.
• Academic profile — optional details you choose to add (grade/year, school, weekly study hours, time zone, academic goal) used to tailor planning.
• Content you provide — courses you create, documents you upload (such as syllabi and coursework) and the text extracted from them, and course data you import from a learning management system (e.g. Canvas via read-only access, or an ICS calendar feed).
• AI results — analyses, briefings, forecasts, and plans generated for you and saved to your account.
• Usage & billing records — logs of AI operations (feature, model, token counts, estimated cost) and your subscription status. Payments are handled by Stripe; we do not store your full card number.
• Product analytics — event records (such as "account created" or "briefing generated") with small, non-sensitive properties. These never contain your coursework content or AI prompts.

Service providers who process your data

To operate the service, your data is processed by:

• Supabase — database, authentication, and file storage that hosts your account and content.
• OpenAI — generates AI analyses and plans. To do this, the relevant coursework text is sent to OpenAI for processing.
• Stripe — processes subscription payments and stores billing details.
• Vercel — hosts and serves the application.

We do not sell your personal information. We share it only with the processors above to run the service, or where required by law.

How long we keep it

We retain your data while your account is active. When you delete your account, your profile, courses, documents, AI results, plans, usage records, and subscription record are deleted, and your stored files are removed. Analytics records are de-identified.

Your choices and rights

• Export — download a JSON copy of your data from Account → Privacy & Data.
• Delete — permanently delete your account and associated data from the same screen.
• Manage sources — remove uploaded files, courses, and disconnect LMS integrations at any time.

Security

Access to your data is enforced by row-level security so you can only reach your own records. Files are stored in a private bucket served through short-lived signed links, LMS tokens are encrypted at rest, and traffic is served over HTTPS.

Children

The service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us so we can remove it. We make no certified compliance claims (including FERPA, COPPA, or GDPR) in this template; consult counsel for your requirements.

Contact

Questions about privacy? Email vidyasetu.support@gmail.com.