At Theorify, we value the trust educators, schools, and students place in us. This Privacy Policy details how Theorify QPTool collects, processes, stores, and protects your personal and educational data.

1. Information We Collect

• Account Information: When you register, we collect your username, email address, school/institution name, and teaching subject. Passwords are never stored in plaintext and are securely hashed using industry-standard cryptographic algorithms (`scrypt`/`pbkdf2`).
• Question Paper & Educational Content: Questions, sections, exam titles, uploaded school logos/diagrams, and PDF metadata you create on the platform.
• Payment & Transaction Information: When you subscribe to a Pro plan, payments are processed directly by our PCI-DSS compliant partner Razorpay. Theorify does NOT store your credit/debit card numbers, CVVs, or UPI PINs. We only retain Razorpay transaction IDs, order IDs, timestamps, and payment statuses for invoice accounting.
• Technical Usage & Logs: IP address, browser type, device information, and session cookies strictly for authentication and security rate-limiting.

2. How We Use Your Information

• To authenticate you and manage your cloud test paper library.
• To allocate and deduct AI question generation credits accurately.
• To provide customer support and notify you of subscription renewals or major security updates.
• To protect the platform against unauthorized access, IDOR vulnerabilities, and denial-of-service attempts.

3. Data Sharing & Third-Party Disclosure

We do NOT sell, rent, or trade your personal information or exam content to third parties or advertising brokers. Data is shared strictly with essential service providers necessary for operation:

• Razorpay: To process secure payments and verify transactions.
• AI Processing Providers: Automated language models strictly for processing your specific question generation prompts. Prompts are not used to train public models without consent.
• Legal Compliance: If required by Indian law enforcement or court order.

4. Data Security & Storage

All data transmission between your browser and our servers is encrypted using 256-bit SSL (HTTPS). Uploaded images, question paper files, and database records are isolated per user account with strict authorization checks.

5. Cookies & Session Management

We use secure, HTTP-only, and SameSite session cookies solely to maintain your logged-in state across browser sessions. We do not deploy intrusive third-party cross-site trackers.

6. Your Rights & Data Deletion

You have the right to access, edit, or delete any question papers stored in your library. If you wish to permanently delete your account and associated records, submit a deletion request to support@theorify.in and we will purge your data within 7 business days.

7. Contact Data Protection Officer / Grievance

If you have privacy concerns or grievance requests, please contact:
Grievance Officer: Theorify Privacy Team
Email: support@theorify.in
Jurisdiction: Haryana / New Delhi, India