StudyFFectiveBack to home

Privacy Policy

Last updated: September 15, 2026

This Privacy Policy explains how StudyFFective ("we", "us", "our") collects, uses, shares and protects personal information. StudyFFective is operated by Dean Pavlovsky, a sole proprietor based in Ontario, Canada. This policy applies to our web app and related services. By using StudyFFective, you agree to the handling of information described here.

1. Information We Collect

  • Account information: your name and email address, a hashed version of your password (we never store your password in plain text), or your Google account identifier if you sign in with Google, plus your plan and subscription status.
  • Your content: the files you upload (such as PDFs, slides, documents and optional audio or video), the text extracted from them, and the study material we generate from them, including summaries, flashcards, quizzes and chat messages.
  • Usage and plan data: actions you take, feature usage counts and quotas, and billing status. We do not store your full card details; those are handled by Stripe.
  • Technical data: your IP address, basic request logs (such as time, endpoint and error information), and browser or device information, together with cookies needed to keep you signed in.

2. How We Use Information

We use personal information to:

  • provide and operate the Service, including extracting text and generating summaries, flashcards, quizzes and chat answers;
  • manage your account, subscription and billing through Stripe;
  • keep the Service secure, prevent abuse and enforce our usage limits;
  • respond to support requests and send service or policy updates;
  • comply with legal obligations.

We do not use your content for advertising, and we do not sell your personal information.

3. AI Processing

To generate study material, we send the relevant uploaded file content, or the text extracted from it, to our AI provider, DeepSeek. DeepSeek processes that text to return the requested output. This means the text you upload is transmitted to and processed by a third party. Please do not upload highly sensitive material, such as health, financial or confidential third-party information, that you are not comfortable sharing for this purpose.

4. Service Providers (Subprocessors)

We share information with trusted providers who help us run the Service, under agreements that limit their use of it:

  • Stripe for payment processing and subscription billing (card data is handled by Stripe);
  • DeepSeek for the AI model used to generate summaries, flashcards, quizzes and chat answers;
  • Oracle Cloud Infrastructure for hosting and database, with primary data stored in the Canada Southeast (Toronto) region;
  • Resend for transactional email such as password resets and account notifications, if enabled.

We may also disclose information if required by law, to protect rights and safety, or as part of a business transfer.

5. Legal Bases and Consent

Where required, we process personal information based on your consent, which you give when you create an account and upload content. We also process information to perform our contract with you (providing the Service and billing), for our legitimate interests (security, abuse prevention and improving the Service), and to meet legal obligations. You may withdraw consent at any time by contacting us, though this may mean you can no longer use some or all of the Service.

6. Cookies

We use only essential cookies needed to keep you signed in and to protect your session. We do not currently use analytics or advertising cookies, and we do not run third-party advertising trackers. If this changes, we will update this policy and, where required, ask for your consent.

7. Retention

We keep account information and your content for as long as your account exists and as needed to provide the Service. When you delete your account or ask us to delete your data, we remove it from active systems, and it may remain in encrypted backups for a limited period (generally up to 30 days) before being overwritten. We may retain limited records, such as billing or security logs, for longer where the law requires it or to resolve disputes.

8. International Transfers

We are based in Canada and store primary data in the Oracle Cloud Canada Southeast (Toronto) region. Some providers, such as Stripe and DeepSeek, may process information in other countries, including the United States, where privacy laws may differ. Where we transfer personal information across borders, we take reasonable steps to protect it through contractual and organisational safeguards.

9. Security

We protect your information using measures such as HTTPS encryption in transit, hashing of passwords and session tokens, access controls and separate storage of uploaded files. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep it private.

10. Your Rights

Depending on where you live, you may have the right to:

  • access a copy of the personal information we hold about you;
  • correct information that is inaccurate or incomplete;
  • request deletion of your account and personal information;
  • withdraw consent or object to certain processing;
  • complain to a privacy regulator, such as the Office of the Privacy Commissioner of Canada or the Information and Privacy Commissioner of Ontario.

To make a request, email dean.pavlovsky@gmail.com. We may need to verify your identity before acting. We will respond within the time required by applicable law.

11. Children's Privacy

StudyFFective is not intended for children under 13, and we do not knowingly collect personal information from them. If you are between 13 and the age of majority in your jurisdiction, you may use the Service only with the consent and involvement of a parent or guardian. If we learn that a child under 13 has provided us with personal information, we will delete it. Parents or guardians can contact us to request removal.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, take reasonable steps to notify you. Your continued use of the Service after an update means you accept the revised policy.

13. Contact

For questions, requests or complaints about privacy, contact Dean Pavlovsky at dean.pavlovsky@gmail.com.