Introduction

ZealWorxs LLC dba Squizpro ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the Squizpro quiz platform at squizpro.com (the "Service").

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

Information We Collect

We collect information you provide directly to us, including:

Account Information: Email address, name, and password when you create an account. You may also sign in through Google OAuth, in which case we receive your name and email from Google.
Quiz Content: Quizzes and questions you create, answers you submit during quiz sessions, and study progress data including scores and timing.
Uploaded Documents: PDFs, images (including HEIC format), and other files you upload for AI-powered quiz generation. These files are processed by our AI service and stored temporarily in our cloud storage.
Payment Information: For paid subscriptions and credit top-ups, we use Stripe to process payments. We store your Stripe customer ID and subscription ID. We do not store your credit card number, expiration date, or CVC on our servers.
Support Requests: Name, email, category, description, and any screenshots you submit through our support form or via email to [email protected].
Teacher Data: If you use the Teacher tier, we collect group names, student email addresses you add to groups, and assignment configurations.

How We Use Your Information

We use your information to:

Provide, maintain, and improve the Service
Process subscription payments and credit purchases through Stripe
Generate quizzes from your uploaded documents using AI
Send transactional emails: account verification, password resets, subscription confirmations, cancellation notices, and quiz-ready notifications
Respond to support requests
Track anonymized usage patterns to improve the platform (see Analytics section below)
Detect and prevent abuse, fraud, and unauthorized access

AI Document Processing

When you use the AI quiz generation feature, your uploaded documents (PDFs, images, and URLs) are sent to Anthropic's Claude API for processing. Anthropic processes your content to extract text and generate quiz questions. According to Anthropic's API terms, data sent through the API is not used to train their models and is not retained after processing.

We store metadata about each AI generation job (file names, processing status, credit cost, and content analysis results) in our database. The uploaded files themselves are stored in our cloud storage (see Data Storage below) and are accessible only to the account that uploaded them.

Data Storage

Your data is stored across the following systems:

Database: Account data, quiz content, session history, and billing records are stored in a PostgreSQL database hosted on Railway.
File Storage: Uploaded documents, avatar images, and quiz images are stored in Railway Buckets (powered by Tigris, an S3-compatible object store). All files are private. Access is granted through signed URLs that expire after 2 hours.
Static Assets: Site images, stylesheets, and scripts are served through Whitenoise with compressed static file storage.

Data Security

We implement appropriate security measures to protect your personal information:

All data is transmitted over HTTPS
Passwords are securely hashed using Django's built-in PBKDF2 algorithm
File uploads use time-limited signed URLs with cryptographic authentication
Payment data is handled entirely by Stripe and never touches our servers
Webhook signatures are verified to prevent forged requests
Database access is restricted to application services within our private network

Your Rights

You have the right to:

Access your personal data through your account settings
Correct inaccurate data by updating your profile
Delete your account and associated data by contacting us
Export your quiz data (available via CSV export for Teacher tier users)
Cancel your subscription at any time through your dashboard

Cookies and Analytics

Squizpro takes a privacy-first approach to analytics. Here is exactly what we do and do not do:

Essential Cookies (Required)

We set two cookies that are necessary for the Service to function:

sessionid: Keeps you logged in. Expires when your browser session ends or after 2 weeks of inactivity.
csrftoken: Protects against cross-site request forgery attacks. This is a security measure required by our web framework.

These cookies do not track you across other websites and contain no personal information.

Analytics (Cookieless)

We use PostHog for product analytics. PostHog runs in cookieless mode, which means:

No analytics cookies are set on your browser
No persistent identifiers are stored on your device
Analytics data is held in memory only and does not survive a page refresh
Session recording is disabled
Automatic interaction capture (autocapture) is disabled

We collect only page views and page exits to understand which parts of the Service are used. For logged-in users, we link this data to your account to improve your experience. For anonymous visitors, no identifying information is collected.

Analytics requests are routed through our own domain (ph.squizpro.com via a Cloudflare Worker proxy). Your browser does not make direct requests to any third-party analytics service.

Because we do not set tracking cookies, no cookie consent banner is needed.

What We Do Not Do

We do not use advertising cookies
We do not sell your data to advertisers or data brokers
We do not use third-party tracking pixels
We do not build advertising profiles
We do not share analytics data with third parties

Third-Party Services

We use the following third-party services to operate the platform:

Stripe: Payment processing for subscriptions and credit top-ups. Stripe's privacy policy applies to payment data they collect. Stripe Privacy Policy
Anthropic (Claude API): AI-powered quiz generation from uploaded documents. Documents are processed and not retained by Anthropic. Anthropic Privacy Policy
Resend: Transactional email delivery (account notifications, support replies, subscription confirmations)
PostHog: Cookieless product analytics (see Cookies and Analytics section above)
Cloudflare: DNS, CDN, and analytics proxy services
Railway: Application hosting and database infrastructure
Google: OAuth authentication for users who choose to sign in with Google

Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

If you are a teacher using Squizpro with students under 13, you are responsible for obtaining appropriate parental consent before adding those students to your groups. Teachers should not add student email addresses for minors without verifiable parental consent as required by the Children's Online Privacy Protection Act (COPPA).

If we learn that we have collected personal information from a child under 13 without parental consent, we will delete that information promptly. If you believe a child under 13 has provided us personal information, please contact us at [email protected].

Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it (for example, billing records for tax purposes).

Uploaded documents used for AI quiz generation are stored as long as your account is active. Quiz content you have created remains associated with your account until you delete it or delete your account.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send an email notification.

Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].

ZealWorxs LLC dba Squizpro
Arizona, United States