This policy explains what data MCQForge collects, how we use it, and the choices you have. We aim to collect the minimum needed to operate the service well.
1. What we collect
- Account info: name, email, hashed password (never stored in plain text).
- Uploaded content: PDFs, images, DOCX, XLSX, and text files you submit for extraction, plus the extracted MCQ data.
- Usage data: pages processed, MCQs generated, feature usage, error logs.
- Payment data: subscription identifiers and transaction metadata returned by Stripe. Card numbers are never sent to our servers — Stripe processes them securely as our payment provider.
- Cookies: an authentication cookie (JWT) and a language preference cookie.
2. How we use your data
- To provide the extraction service and your account dashboard.
- To enforce plan limits and process paid subscriptions.
- To improve service quality (aggregated, de-identified analytics only).
- To respond to support requests.
- To send transactional emails (password resets, payment confirmations). We do not send marketing email without consent.
3. AI processing
When you upload a file, its text content is sent to a third-party AI provider (Google) to extract MCQs. This provider processes the data under its own data-handling commitments and does not use API content to train its public models. We do not share your private files with anyone else.
4. Where data is stored
Your data is stored in MongoDB databases. Files may be retained while your account is active, plus a short backup window. Passwords are hashed with bcrypt; password-reset tokens are stored only as SHA-256 hashes.
5. Sharing
We do not sell your personal data. We share data only with processors strictly needed to run the service (AI providers, email delivery, hosting). Each processor is bound by confidentiality obligations.
6. Your choices
- Access or update your account info from your dashboard.
- Delete individual MCQs or uploaded files at any time.
- Request a copy of your data — including the questions you created — by emailing privacy@mcqforge.com. We provide it free of charge whatever your subscription status.
- Request full account deletion by emailing support@mcqforge.com.
- Set your language preference from the navbar.
7. Children
MCQForge is not intended for users under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
8. Security
We use TLS in transit, hashed passwords at rest, rate limiting, and access controls. No system is perfectly secure — please use a strong, unique password and report suspicious activity.
9. Changes
We will notify you of material changes via email or in-app notice at least 14 days before they take effect.
10. Contact
Privacy questions? Email privacy@mcqforge.com.
11. Advertising
We show ads on some public pages of MCQForge. Google and its advertising partners use cookies to serve those ads, including ads based on your previous visits to this site or other sites, so the advertising you see may be personalized. Advertisers never receive your uploaded files, your generated questions, or your account details. In the EEA, the UK and Switzerland we ask for your consent before personalized advertising cookies are set, using Google’s certified consent notice.
- Turn off personalized ads from Google in your Google Ads Settings at myadcenter.google.com.
- Opt out of personalized ads from other participating vendors at www.aboutads.info/choices.
- See the partners Google works with, and how they use data from sites like this one, at policies.google.com/technologies/partner-sites.
- Change or withdraw a consent choice by clearing this site’s cookies in your browser — the consent notice appears again on your next visit.