This policy explains what data MCQForge collects, how we use it, and the choices you have. We aim to collect the minimum needed to operate the service well.
1. What we collect
- Account info: name, email, hashed password (never stored in plain text).
- Uploaded content: PDFs, images, DOCX, XLSX, and text files you submit for extraction, plus the extracted MCQ data.
- Usage data: pages processed, MCQs generated, feature usage, error logs.
- Payment data: subscription identifiers and transaction metadata returned by Stripe. Card numbers are never sent to our servers — Stripe processes them securely as our payment provider.
- Cookies: an authentication cookie (JWT) and a language preference cookie.
2. How we use your data
- To provide the extraction service and your account dashboard.
- To enforce free-tier limits and process paid subscriptions.
- To improve service quality (aggregated, de-identified analytics only).
- To respond to support requests.
- To send transactional emails (password resets, payment confirmations). We do not send marketing email without consent.
3. AI processing
When you upload a file, its text content is sent to a third-party AI provider (Google) to extract MCQs. This provider processes the data under its own data-handling commitments and does not use API content to train its public models. We do not share your private files with anyone else.
4. Where data is stored
Your data is stored in MongoDB databases. Files may be retained while your account is active, plus a short backup window. Passwords are hashed with bcrypt; password-reset tokens are stored only as SHA-256 hashes.
5. Sharing
We do not sell your personal data. We share data only with processors strictly needed to run the service (AI providers, email delivery, hosting). Each processor is bound by confidentiality obligations.
6. Your choices
- Access or update your account info from your dashboard.
- Delete individual MCQs or uploaded files at any time.
- Request full account deletion by emailing [email protected].
- Set your language preference from the navbar.
7. Children
MCQForge is not intended for users under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
8. Security
We use TLS in transit, hashed passwords at rest, rate limiting, and access controls. No system is perfectly secure — please use a strong, unique password and report suspicious activity.
9. Changes
We will notify you of material changes via email or in-app notice at least 14 days before they take effect.
10. Contact
Privacy questions? Email [email protected].