Privacy policy

1. Who is responsible

The controller is Fintenso International LLC, 7901 4th St N, St. Petersburg, FL 33702, USA. Email: [contact email].

Our representative in the EU under Art. 27 GDPR: [name, EU address, email].

2. This website

• No tracking. The website uses no analytics, no advertising and no tracking cookies. Fonts are served from our own domain, so your browser doesn't contact Google.
• Server logs. Our host, Vercel, processes your IP address and technical request data to deliver the pages and protect them against attacks (Art. 6 (1) (f) GDPR). Logs are kept for [retention period].
• No cookies. This website doesn't set cookies or store anything in your browser.
• Demo. The demo player loads audio files from this website. Nothing is recorded or sent anywhere.

3. The app

When you use StudyBoom, we process:

• Account data: name, email, country, sign-in details (Art. 6 (1) (b) GDPR).
• Your material and what we make from it: uploads, extracted text, narrations, audio, transcripts, notes and practice questions (Art. 6 (1) (b) GDPR). It's private to your account.
• Voice questions: your recording is sent for transcription and isn't stored. The text of the question and the answer are saved in your notes until you delete them.
• Purchases and coins: licence, storage plan, coin ledger and receipts (Art. 6 (1) (b) and (c) GDPR). Card details go to Stripe; we never see the full card number.
• Usage and costs: which actions ran, when, and what they cost us, to bill coins correctly and keep the service running (Art. 6 (1) (b) and (f) GDPR).

4. AI providers and training

We don't train AI models on your material. We send it to AI providers only to do the work you asked for, under business API terms that don't allow them to use it for training. [Confirm per provider; for Google, use the paid Gemini API tier only.]

5. Service providers

We use these processors under data processing agreements [confirm each DPA is signed]. We use EU data regions where available.

6. Transfers outside the EU

We're a US company, and some providers process data in the US. Transfers rely on the EU-U.S. Data Privacy Framework where the recipient is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46 GDPR).

7. How long we keep data

• Your material and everything made from it: 60 days from creation, or as long as a storage plan runs (then a 14-day grace period).
• Account data: until you delete your account.
• Purchase records: as long as tax law requires [e.g. 10 years].

8. Your rights

You have the right to access, correct and delete your data, to restrict or object to processing, and to data portability (Art. 15–21 GDPR). Write to [contact email]. You can also complain to a data protection supervisory authority, for example the one where you live.

9. US privacy rights

We don't sell personal information or share it for cross-context behavioral advertising. Residents of California and other states with privacy laws can request access, correction or deletion at [contact email].

10. Children

StudyBoom is not intended for children under [minimum age].

11. Changes

We'll update this policy when our processing changes and show the date at the top.