Privacy Policy

At Laude, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered study platform.

1. Information We Collect

1.1 Information You Provide

Account Information: Name, email, username, profile picture (via Google OAuth)
Profile Information: Bio, headline, location, website, avatar, cover image
Study Content: Notes, nodes, drawings, uploaded files, flashcards, exams
User Preferences: Theme, language, notification settings
Payment Information: Processed by Stripe (we do not store full credit card details)

1.2 Automatically Collected Information

Usage Data: Pages visited, features used, time spent, click patterns
Device Information: Browser type, operating system, IP address, device identifiers
Cookies: Session cookies, preference cookies, authentication tokens
Performance Data: Error logs, API response times, feature usage metrics

1.3 AI-Related Data

AI Prompts: Text you submit to AI features (summarize, chat, generate exams)
Voice Data: Audio recordings during Voice Tutor sessions (temporarily stored for transcription, then deleted)
Rensei Data: Exam answers, flashcard responses, conversation transcripts for mastery calculation
AI Usage Metrics: Token consumption, request frequency, feature usage

2. How We Use Your Information

2.1 To Provide the Service

Create and manage your account
Store and sync your study content across devices
Process AI requests (summarization, flashcard generation, Voice Tutor)
Calculate and display Rensei mastery scores
Enable Marketplace features (publish, discover, copy nodes)
Send transactional emails (password resets, notifications)

2.2 To Improve the Service

Analyze usage patterns to improve features
Monitor performance and fix bugs
Train and improve AI models (anonymized data only, opt-in)
Conduct A/B testing and product experiments

2.3 To Communicate With You

Send study reminders and Rensei notifications
Respond to support requests
Send product updates and feature announcements (you can opt out)

3. AI Processing and Third-Party Services

3.1 Google Cloud Platform (Gemini AI)

Laude uses Google's Gemini AI models (via Vertex AI and Gemini API) to power AI features. When you use these features, your content is:

Sent to Google Cloud servers for processing
Subject to Google Cloud Terms and Google Privacy Policy
NOT used to train Google's public models (per our enterprise agreement)
Processed in real-time and not permanently stored by Google

3.2 Voice Processing

Voice Tutor audio is:

Captured in your browser and streamed to our servers
Processed using Google Cloud Speech-to-Text and Gemini Live API
Temporarily stored for conversation context (max 1 hour)
Deleted immediately after session ends
Transcripts are analyzed for Rensei evaluation, then anonymized

3.3 Other Third-Party Services

We also use:

Google OAuth: For authentication (subject to Google's privacy policy)
Stripe: For payment processing (subject to Stripe's privacy policy)
Resend: For transactional emails (subject to Resend's privacy policy)
Vercel: For hosting and edge functions

4. Data Storage and Security

4.1 Where We Store Data

Database: PostgreSQL on Google Cloud Platform
File Storage: Google Cloud Storage (GCS)
Cache: Redis (for rate limiting and session data)
Servers: Google Cloud Run (us-central1)

4.2 Security Measures

We implement industry-standard security practices:

HTTPS/TLS encryption for all data in transit
AES-256-GCM encryption for sensitive data at rest
Authentication via secure OAuth 2.0 (Google)
Rate limiting to prevent abuse
Regular security audits and dependency updates
Access controls and audit logging

However, no system is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

5. Your Rights (GDPR & Privacy Laws)

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Deletion: Request deletion of your account and data ("right to be forgotten")
Portability: Export your data in a machine-readable format
Objection: Object to certain data processing activities
Restriction: Request limited processing of your data

To exercise these rights, contact us at privacy@laude.study.

6. Cookies and Tracking

6.1 Essential Cookies

We use cookies necessary for the Service to function:

Session cookies: Keep you logged in (next-auth.session-token)
CSRF tokens: Protect against cross-site attacks
Locale preferences: Remember your language setting

6.2 Analytics Cookies (Optional)

With your consent, we may use analytics cookies to understand how users interact with the Service. You can opt out in Settings or via your browser settings.

7. Children's Privacy

Laude is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us immediately at privacy@laude.study.

For users aged 13–18, we recommend parental guidance when using AI features.

8. Data Retention

Active accounts: Data retained indefinitely while account is active
Deleted accounts: 30-day grace period, then permanent deletion
Voice recordings: Deleted immediately after session ends
Backups: Retained for 90 days
Logs: Retained for 30 days for debugging
Anonymized analytics: Retained indefinitely for product improvement

9. International Data Transfers

Laude operates globally. Your data may be transferred to and processed in countries outside your residence, including the United States. We ensure adequate safeguards (e.g., Standard Contractual Clauses) for international transfers.

10. Your Choices and Controls

10.1 Profile Visibility

You can control whether your profile is public (required to publish nodes to Marketplace) in Settings → Profile.

10.2 Email Preferences

You can opt out of promotional emails via the unsubscribe link or in Settings → Notifications. You cannot opt out of transactional emails (e.g., password resets).

10.3 Data Export and Deletion

Request data export or account deletion by contacting privacy@laude.study. We will respond within 30 days.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or in-app notification. Your continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or requests, contact:

Email: privacy@laude.study
Support: support@laude.study
Data Protection Officer: dpo@laude.study

This Privacy Policy is part of our Terms of Service.