Privacy Policy
Effective version 2026-08-30 · Last updated August 30, 2026
1. Information we collect
Depending on how you use StudyArea.ai, we may process:
- Account data: name, email, password hash, language, learner type, theme, verification status, one-time verification-token hashes, accepted Terms version/timestamp, account status and linked Google identity identifiers.
- Study content: notes, uploaded files, extracted text, Study Sets, website/YouTube transcript content, recordings/transcripts, flashcards, quizzes, answers, plans and generated learning materials.
- Usage data: feature usage, study time, streaks, mastery, quiz performance, timestamps, rate-limit counters and security/audit records.
- Support data: support messages and contact details.
- Payment records: PayPal subscription identifiers, plan/status, transaction references, amounts and billing dates. StudyArea.ai does not store your full card or PayPal password.
- Technical/security data: session identifiers, IP-derived rate-limit/security keys, browser request metadata and server logs needed to secure and operate the service.
2. How we use information
We use information to provide requested features, authenticate accounts, personalize learning, process study material, maintain chat continuity, generate educational content, track progress, operate subscriptions, prevent abuse, scan uploads, troubleshoot, provide support, comply with legal obligations and improve reliability.
3. Legal bases for processing
Where GDPR or similar law applies, processing may rely on one or more lawful bases depending on the activity: performance of our contract with you (for account and requested study features), legitimate interests (for security, fraud prevention, reliability and service administration), consent where specifically requested, and compliance with legal obligations (including accounting, tax, dispute and law-enforcement requirements).
You may withdraw consent where consent is the applicable basis, without affecting processing that was lawful before withdrawal. Some information is necessary to provide the service; if you do not provide it, the corresponding feature may not be available.
4. AI and third-party processing
When you use AI-powered features, relevant prompts, recent chat history and selected study context may be transmitted to one of the AI providers configured by the StudyArea.ai operator, which can include OpenAI, Cloudflare Workers AI, Groq, NVIDIA NIM, OpenRouter and Mistral. The specific provider may change automatically when a provider is unavailable or reaches configured limits.
Only send study material you are permitted to process through these services. Third-party providers process data under their own terms and privacy policies. StudyArea.ai keeps the conversation state in its own database so provider failover does not require loading your entire account into each provider.
5. Payments
Premium payments are handled through PayPal. We receive identifiers, subscription status, transaction amounts/currency and billing timing necessary to activate and administer Premium. Payment-card details are handled by PayPal rather than stored by StudyArea.ai.
7. Retention and deletion
We retain account and study data while your account is active and as reasonably necessary to provide the service, resolve disputes, enforce agreements, prevent fraud, meet accounting/legal requirements and maintain backups. Deleted or archived content may remain temporarily in backups or logs until normal rotation. Transaction and legal/audit records may be retained longer where required.
8. Privacy rights
Depending on your location and whether the applicable law covers the operator, you may have rights to request access, correction, deletion, restriction, portability or objection concerning personal data, and to receive information about data use/sharing. California residents may have rights such as know, delete, correct, opt out of qualifying sale/sharing and non-discrimination if the CCPA/CPRA applies to the operator.
StudyArea.ai does not sell personal information as a data-broker business model. Requests can be sent to support@studyarea.ai. We may verify your identity before fulfilling a request and may retain information where an exemption or legal obligation applies.
If GDPR applies, you may also have the right to lodge a complaint with the competent data-protection supervisory authority. If a US state privacy law applies, additional appeal or opt-out rights may apply as provided by that law.
9. Security
StudyArea.ai uses measures including password hashing, CSRF and same-origin controls, secure sessions, output escaping/CSP, rate limits, protected storage, file signature validation, document active-content checks and optional required antivirus scanning. No internet service can guarantee absolute security, so you should also protect your credentials and avoid uploading unnecessary sensitive information.
10. International processing and service providers
Depending on hosting and AI/payment/email providers, information may be processed in countries other than your own. Where required, the operator should use appropriate contractual or legal transfer mechanisms with service providers.
11. Children
StudyArea.ai is intended for learners who can lawfully use the service under local law. Where parental consent is legally required, the parent or guardian is responsible for providing it. We do not knowingly invite children to bypass applicable age/consent rules.
12. Contact
Operator: StudyArea
Country: Greece
Privacy/support contact: support@studyarea.ai