PRIVACY POLICY

PARADIGM US OPERATION INC.

Last Updated: Monday, March 24, 2026

1. Introduction

This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

2. Information We Collect

  • Account Information

    • Name, email, phone number (if provided), and third-party authentication data (Google, WeChat).
  • User Interactions

    • We log all interactions, including chats and uploads, for the purpose of improving our AI and enhancing the user experience.
  • Non-Personal Data

    • Device information, browser type, and usage logs may be collected for analytics and optimization.
  • Cookies

    • Our platform uses cookies and similar technologies to enhance your experience, personalize content, analyze usage, and improve our services.
    • By using our services, you consent to the use of cookies.
    • You can manage or disable cookies through your browser settings, but some features may not function properly if cookies are disabled.
    • For more details, refer to our Cookies Policy.

3. Use of Your Data

We use collected information for:

  • Account management
  • Improving and refining our AI models (excluding data received from third-party services such as Google — see Section 6)
  • Analytics and research (using aggregated, non-personally identifiable data)
  • Marketing and communications (e.g., newsletters, updates), if you opt in

4. Data Sharing and Disclosure

  • Service Providers

    • Vercel for hosting, Polar for payment processing, WeChat and Google for authentication, and Turso and Amazon Web Services for data storage.
  • Research and Analytics Partners

    • Aggregated, anonymized data may be shared with research groups and analytics tools.
  • We do not sell or rent your personal data to third parties.

5. Data Retention and Security

  • Storage

    • Data is stored on secure AWS, Vercel, and Turso/Fly.io servers with standard SaaS protections.
  • Retention

    • We retain personal information as long as you maintain your account.
    • Interaction logs and non-personal data may be kept indefinitely for AI training. This does not apply to data received from Google APIs, which is used only to provide the service and is not retained for AI training (see Section 6).
  • Security Measures

    • We use industry-standard encryption and secure hosting.
    • No system is completely secure, but we take reasonable measures to protect your data.

6. Google User Data

Paradigm Study's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Scope of access: When you connect your Google account, we may access Google Drive files, Google Calendar events, Gmail messages, and Google Classroom data, depending on the permissions you grant.

How we use Google data:

  • Google user data is used solely to provide the core features of Paradigm Study (e.g., displaying your files, allowing the AI tutor to read or edit documents you explicitly select).
  • Google user data is not used for advertising, retargeting, or serving ads.
  • Google user data is not used to train or improve AI models.
  • Google user data is not sold, rented, or shared with third parties except as necessary to fulfill your request (e.g., sending a user-selected document to an AI inference API to process your request).

Storage and security: Google OAuth tokens are encrypted at rest using AES-256-GCM. Google user data is transmitted over TLS.

Revocation: You can disconnect your Google account at any time from your account settings, which deletes all stored tokens and revokes access.

7. International Compliance

  • By using our Service, you consent to the transfer and processing of your information.
  • We comply with applicable local laws and regulations.

8. User Rights

  • Access, Correction, Deletion

    • You may request access to or deletion of your personal data at any time.
    • Deleting your account removes personal data, but non-personalized data may remain for AI training.
  • Opt-Out

    • You may opt out of marketing communications at any time.

9. Children’s Privacy

  • Our Service is accessible to all ages.
  • We do not knowingly collect personal data from children under applicable age limits without parental consent.

10. Changes to the Privacy Policy

  • We may update this Privacy Policy periodically.
  • Significant changes will be notified via email or in-service notifications.
  • Continuing to use the Service after updates indicates acceptance of the revised Privacy Policy.