Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

Personal Information

• Email address (when you sign up for an account)
• Name (if provided)
• Payment information (processed securely through Stripe)

Usage Information

• Text content and prompts you provide for conversion
• Images you upload (JPG, PNG, WebP formats)
• PDF documents you upload, including any personal information they happen to contain
• Generated flashcards and decks saved to your account history
• Credit balance and purchase history
• Usage patterns and preferences
• Device, browser, and IP address information

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your content for conversion to flashcard formats
• Transmit your text prompts and the images and PDF documents you upload to our AI provider (OpenAI) to generate flashcards
• Send you technical notices and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns

3. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• With service providers who assist us in operating our website and conducting our business
• When required by law or to protect our rights
• In connection with a business transfer or acquisition

4. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy. The text prompts, generated flashcards and decks, and uploaded files (images and PDF documents) associated with each generation are stored and remain available in your account's results history until you delete them. Uploaded files are stored on Cloudflare R2 and served via publicly accessible URLs, so a PDF you upload stays reachable by that URL for as long as you keep the result. Credit balances and account information are retained while your account is active. You may delete individual results, or your entire account and all associated data, at any time through your account settings; deleting a result also removes its stored file.

6. Cookies and Tracking

We use a strictly necessary session cookie to keep you signed in; this cookie is required for the service to work and is not optional. When you sign in with Google, Google sets its own cookies on its domain as part of that sign-in flow, and Stripe may do the same on its checkout pages during payment.

For product analytics we use Umami, a self-hosted, cookie-free analytics tool that does not use cookies or store data that identifies you individually. We only load this analytics script after you accept the cookie banner shown on the site.

Your choice is stored locally in your browser rather than on our servers, and it is not permanent: it expires after six months, at which point we ask again. You can change your decision at any time using the “Cookie settings” link in the site footer, or by clearing your browser’s site data. If we later add any analytics or tracking that works differently, previously saved choices are invalidated and we ask you again.

7. Third-Party Services

Our service relies on third-party providers that may process your data, including Google (sign-in and authentication), OpenAI (AI processing of your text prompts and the images and PDF documents you upload to generate flashcards), Stripe (payment processing), Neon (database hosting), Cloudflare R2 (storage of the images and PDF documents you upload), Resend (delivery of transactional emails such as receipts and account notices), Upstash (rate limiting), and Rollbar (error monitoring). Each of these services has its own privacy policy, and we encourage you to review them.

Rollbar works differently from the analytics described above: when something goes wrong in the application, it records technical details of the error, such as the page you were on, the error itself, and your browser and operating system. We rely on this to keep the service working and to fix faults, so it stays active regardless of your analytics choice. It is not used to build a profile of you or to track your browsing.

8. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your account and data
• Data portability

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@nextlang.co