US Privacy Policy
Effective August 6, 2026
1. Who controls the data
EstudoGenial is operated by Mauricio Carvalho, an individual located in Brazil, who determines how the service processes personal data. The operator is not a corporation or other legal entity and has no company, headquarters, or office in the United States. Privacy requests and questions may be sent to estudogenial.ai@gmail.com.
2. Scope and age
This Policy applies to the US EstudoGenial website and service. The commercial service is only for United States residents age 18 or older and is not directed to children or teenagers. We collect date of birth to enforce eligibility. If we learn that an account belongs to someone under 18, we may suspend it and delete or restrict associated information, subject to fraud, security, billing, and legal retention needs.
3. Data we collect and its source
- Account and eligibility: name, email, country, date of birth, password hash, account status, verification status, and legal acceptances, provided by you or created during registration.
- Authentication and security: session and refresh-token records, IP address, browser/user-agent information, timestamps, security events, rate-limit information, and limited request logs, collected automatically when you use the service.
- Study activity: selected objectives and subjects, generated question assignments, answers, scores, timing, simulations, progress, reports, usage limits, and study recommendations, created from your activity and the service's processing.
- Writing and AI interactions: writing you deliberately submit, requested feedback, disclosure acknowledgement, study context, generated feedback, model and prompt-version metadata, token estimates, and operational status. Writing is not sent for AI feedback until the specific disclosure is acknowledged and the configured provider is approved for that processing.
- Billing: plan, subscription state, Stripe customer/subscription/invoice/payment/refund identifiers, amount, currency, renewal and cancellation state, payment-failure events, and receipt or invoice links. Stripe collects complete payment-card details; EstudoGenial does not store complete card numbers.
- Preferences and analytics: marketing and analytics choices, consent history, allowed product events, objective, subject, plan, campaign parameters, and generic error categories. Optional analytics does not accept essays, answers, email, or other free-form user text.
- Communications and requests: messages you send to support, privacy requests, identity-verification events, status, decisions, and related correspondence.
- Operational information: task status, delivery logs for transactional email, system health, error category, latency, AI usage/cost estimates, alerts, and audit records generated by the service and its providers.
4. Why we use data
We use data to create and secure accounts; enforce adult and residency eligibility; provide questions, scoring, progress reports, personalized recommendations, and requested writing feedback; apply usage limits; process subscriptions, refunds, invoices, cancellation, and payment recovery; send transactional messages; respond to support and privacy requests; prevent fraud and abuse; diagnose failures; maintain records of consent and contractual terms; comply with law; and establish or defend legal claims.
Marketing communications and optional product analytics are controlled separately and may be declined or withdrawn. Security, billing, requested educational processing, legal records, and essential service messages are not optional analytics.
5. AI processing, errors, and provider data use
Questions, explanations, recommendations, and writing feedback may be generated with Google Gemini or another disclosed AI provider. AI output may contain factual errors, fabricated statements, omissions, inconsistency, or social and data-derived bias. Do not include information in a writing submission that is not necessary for feedback, and independently verify important results.
If EstudoGenial uses a Gemini service associated with active Cloud Billing, Google's published terms state that prompts and responses are not used to improve Google's products, although limited logging and processing may occur for safety, abuse prevention, operation, and legal requirements. Unpaid Gemini services have materially different data-use terms and may use submitted content and generated responses to improve products and may involve human review. EstudoGenial therefore blocks transmission of user writing unless the deployment has explicitly confirmed a provider configuration approved for personal-content processing. Provider terms and configurations may change; we will update this disclosure and request renewed acknowledgement when a material change affects submitted writing.
6. Service providers and disclosures
We disclose only data reasonably necessary for the service:
- Stripe: checkout, subscription management, invoices, refunds, fraud controls, and billing portal; receives identity, contact, transaction, and payment information.
- Google/Gemini or another configured AI provider: question generation and, only after disclosure and acknowledgement, requested writing feedback; receives study context, prompts, submitted writing when applicable, and technical metadata.
- Hosting, database, storage, and backup providers: run and protect the application and may process account, study, billing metadata, logs, and stored content.
- Email/SMTP provider: sends verification, security, privacy, support, and billing messages and processes recipient address, name, and transactional content.
- Operational alerting, including ntfy when configured: receives minimized technical alerts; alerts should not contain essays, answers, passwords, full payment data, or unnecessary personal content.
- Professional advisers and authorities: information may be disclosed where reasonably necessary for legal advice, compliance, fraud investigation, protection of rights or safety, or a valid legal demand.
7. International processing
The operator works from Brazil. Data may be stored or processed in Brazil, the United States, and any other country where Stripe, Google, hosting, email, infrastructure, support, or security providers and their subprocessors maintain facilities. Privacy laws and government-access rules can differ by location. We use provider agreements, access controls, minimization, and other appropriate contractual and technical safeguards where applicable, but we do not represent that data remains exclusively in one country.
8. No sale or targeted advertising
We do not sell personal data or share it for cross-context behavioral or targeted advertising. The US product does not load Meta Pixel, Google Analytics/Ads, TikTok Pixel, Hotjar, session-replay tools, data-broker SDKs, or behavioral advertising networks. If that practice changes, we will update this Policy and provide legally required notice and choices before enabling it.
9. First-party analytics and communications
Optional first-party analytics uses a limited event and property allowlist. It does not accept free-form answers, essays, email, card data, CPF, or telephone number. In the US service, an anonymous acquisition identifier is not connected to the authenticated user profile. You may change optional analytics and marketing choices in the Privacy Center. We may still send account verification, security, billing, legal, privacy-request, and service messages necessary for your account.
10. Retention
We retain personal data only for as long as reasonably necessary for the purposes described, including service delivery, security, disputes, accounting, tax, fraud prevention, and legal compliance. Current operational periods include:
- detailed consented analytics: 90 days;
- aggregated analytics without educational text: 24 months;
- temporary privacy export files: 24 hours;
- HTTP request logs when enabled: 30 days;
- Celery task-run metadata without task arguments: 90 days;
- educational content: deleted when an eligible account-deletion request is completed.
Account information is retained while the account is active and for a reasonable period needed to complete deletion, prevent abuse, or meet legal duties. Billing, invoice, refund, chargeback, tax, legal-acceptance, fraud, security, backup, support, and provider records may follow different legally or operationally necessary periods. Deletion from active systems may not immediately remove data from encrypted backups or independent provider systems. Stripe, Google, email, and infrastructure providers apply their own documented retention duties. We will not claim that every record is deleted immediately.
11. Your privacy rights
We offer all US users, subject to identity verification and lawful exceptions, the ability to:
- confirm whether we process their personal data;
- access and obtain a portable copy;
- correct inaccurate information;
- request deletion;
- withdraw optional marketing or analytics consent;
- object to or ask questions about processing;
- receive equal service without unlawful discrimination for exercising a right;
- appeal a denied request; and
- use an authorized agent where applicable law requires it and authority can be verified.
Submit requests through the authenticated Privacy Center or email estudogenial.ai@gmail.com. We may verify control of the account by a code sent to the verified email and may request proportionate information to verify an authorized agent. We aim to respond within 45 days. Where permitted and reasonably necessary, we may extend the period and will explain the extension. We may deny or limit requests that cannot be verified, conflict with another person's rights, are manifestly unfounded or excessive, threaten security, or must be limited for fraud, billing, legal retention, or other lawful reasons. Appeal by replying to the decision or emailing the privacy address with the request number; the appeal will be reviewed by a person not responsible for the initial decision where practicable.
12. Account deletion and billing records
Canceling a subscription does not delete an account. Account deletion is a separate verified request. A paid subscription must first be canceled and paid access allowed to expire, unless an eligible refund ends access immediately. When deletion is completed, sessions are revoked, educational content is removed, optional-consent records are removed or de-identified, and local identity is anonymized. Limited billing, refund, fraud, security, legal-acceptance, tax, or dispute records may be retained where required or reasonably necessary.
13. Security and incidents
We use reasonable technical and organizational safeguards appropriate to the service, including access controls, hashed passwords and refresh tokens, restricted public files, database controls, transport security in production, provider authentication, logging minimization, and operational monitoring. No system is completely secure. We investigate suspected incidents and will notify affected users and competent authorities when required by applicable law. Report a suspected security or privacy issue to estudogenial.ai@gmail.com.
14. Changes and contact
We may update this Policy as the service, providers, or law changes. Material changes will be communicated through the service or email and may require renewed acceptance. The effective date identifies the current version.
Privacy, security, support, and appeals: estudogenial.ai@gmail.com.