Privacy Policy

1. Introduction

Welcome to UniNotes ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website uninotes.dev and our services.

By using UniNotes, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

2.1 Personal Information

When you create an account or use our services, we may collect:

• Account Information: Email address, name, password (encrypted)
• Profile Information: Profile picture, bio, university affiliation, study preferences
• Google OAuth Data: If you sign in with Google, we collect your name, email, and profile picture from your Google account

2.2 Content You Upload

• Notes and Documents: PDF files, images, and other educational materials you upload
• Metadata: Course names, subjects, descriptions, tags, and file information
• User-Generated Content: Comments, ratings, reviews, and feedback on notes

2.3 Usage Information

• Activity Data: Pages viewed, notes accessed, downloads, searches, and interactions
• Device Information: IP address, browser type, operating system, device type
• Analytics Data: Page views, session duration, bounce rates (via Vercel Analytics)

2.4 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session (authentication tokens)
• Remember your preferences
• Analyze site usage and improve performance
• Serve relevant advertisements (Google AdSense - see Section 6)

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide Services: Enable note uploading, sharing, browsing, and downloading
• Account Management: Create and manage your account, authenticate users
• Improve User Experience: Personalize content, recommend relevant notes
• Communication: Send notifications, updates, respond to inquiries
• Security: Detect fraud, prevent abuse, protect user data
• Analytics: Understand how users interact with our platform
• Legal Compliance: Comply with legal obligations and enforce our Terms of Service
• Advertising: Display relevant ads through Google AdSense

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Public Content

Notes you upload are publicly accessible to all users. Your profile name and basic information may be displayed alongside your uploaded content.

4.2 Service Providers

We work with third-party service providers:

• Cloudinary: File storage and media hosting for uploaded documents and images
• Supabase (PostgreSQL): Database hosting for user data and content metadata
• Google OAuth: Authentication services
• Vercel: Website hosting and analytics
• Google AdSense: Advertisement services (see Section 6)

4.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, property, or safety.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: HTTPS encryption for all data transmission
• Authentication: JWT-based secure authentication system
• Password Protection: Passwords are hashed using strong encryption
• Access Controls: Limited access to personal data by authorized personnel only
• Regular Updates: Security patches and system updates

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Google AdSense and Cookies

We use Google AdSense to display advertisements on our website. Google AdSense uses cookies and similar technologies to:

• Serve ads based on your browsing activity
• Measure ad performance and effectiveness
• Prevent fraudulent clicks

Google may use data about your visits to this and other websites to provide relevant ads. You can opt out of personalized advertising by visiting Google Ads Settings.

For more information about Google's privacy practices, visit the Google Privacy Policy.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Data Portability: Export your uploaded notes and profile data
• Opt-Out: Unsubscribe from marketing communications
• Cookie Control: Manage cookie preferences in your browser settings

To exercise these rights, please contact us at tabishbinishfaq1122@gmail.com.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., dispute resolution, fraud prevention).

9. Children's Privacy

UniNotes is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of UniNotes after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

13. Compliance

This Privacy Policy is designed to comply with:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Google AdSense Program Policies
• Children's Online Privacy Protection Act (COPPA)