Privacy Policy

1. Who We Are

StudyVector ("we", "us", "our") is an exam-specific revision platform for GCSE, A-Level, and admissions students. We are the data controller responsible for your personal data. If you have questions about this policy, contact us at privacy@studyvector.co.uk.

2. Data We Collect

• Account data: email address, name, and password hash when you sign up.
• Usage data: study sessions, topics viewed, quiz answers, error logs, and exam results to personalise your learning experience.
• Technical data: browser type, device information, IP address, and cookies for analytics and security.
• Payment data: processed securely by our payment provider (Stripe). We never store your full card details.

3. Legal Basis for Processing (GDPR Art. 6)

• Contract performance: processing necessary to provide our service to you.
• Legitimate interests: improving our platform, preventing fraud, and ensuring security.
• Consent: for non-essential cookies and marketing communications — you can withdraw consent at any time.
• Legal obligation: where required by applicable law.

4. How We Use Your Data

• Providing and personalising your learning experience.
• Generating personalised lessons, quizzes, and revision plans.
• Tracking your study progress and performance analytics.
• Processing payments and managing subscriptions.
• Communicating service updates and (with consent) marketing.
• Ensuring platform security and preventing abuse.

5. Data Sharing & Transfers

We do not sell your personal data. We share data only with trusted processors who help us operate the platform:

• Cloud hosting: our backend infrastructure stores data securely.
• AI providers: prompts and context needed for your revision (including text and, where you use features that create visuals, image-generation prompts) are sent to our AI providers to produce educational content and illustrations. We do not sell prompts for advertising. Generated images may be cached in our storage so we do not repeat identical requests; see our Cookie Policy for analytics.
• Payment processing: Stripe processes payments under their own privacy policy.

Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses or adequacy decisions).

6. Data Retention

We retain your account data for as long as your account is active. Study data is kept to provide continuity in your learning. If you delete your account, we will erase your personal data within 30 days, except where retention is required by law.

7. Your Rights (GDPR)

Under GDPR and UK data protection law, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict processing of your data.
• Data portability — receive your data in a machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time for consent-based processing.

To exercise any of these rights, email privacy@studyvector.co.uk. We will respond within 30 days.

8. Cookies

We use essential cookies to keep you logged in and ensure the platform functions correctly. We use optional analytics cookies only with your consent. You can manage your cookie preferences via the cookie banner or by contacting us.

9. Children's Privacy & Age Policy

StudyVector is designed for students aged 13 and above. Users under 13 must have parental consent to use the platform. If you are under 16, we encourage you to review this policy with a parent or guardian. We do not knowingly collect data from children under 13 without verifiable parental consent.

10. Your Data Rights — Export & Deletion

You have the right to request a copy of all personal data we hold about you in a machine-readable format (data portability). You also have the right to request deletion of your account and all associated data. To exercise either right, email privacy@studyvector.co.uk or use our contact form. We will process your request within 30 days.

11. Data Security

We use industry-standard security measures to protect your data, including HTTPS encryption for all connections, encrypted storage for sensitive data, and secure authentication protocols. Access to personal data is restricted to authorised personnel only.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. The "last updated" date at the top reflects the most recent revision.

13. Contact & Complaints

For any privacy concerns, contact us at privacy@studyvector.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).