Privacy Policy

This policy describes how Estuqia collects, uses and protects the personal data of its users, in accordance with Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act.

The data controller is: To be completed upon company registration.

Contact: our contact form

Estuqia collects the following data categories:

• Account data: email address, hashed password, first name, education level, learning preferences.
• Uploaded documents: PDF or image files uploaded for processing.
• Generated content: cheatsheets, quizzes, flashcards, summaries produced by the Service.
• Technical data: IP address, browser type, access logs, session identifiers.
• Usage data: quota consumption, study-tool history.

• Service provision and contract execution (GDPR art. 6.1.b);
• Security, fraud prevention and quota enforcement (legitimate interest, art. 6.1.f);
• Service-related communications (contract execution);
• Compliance with legal and accounting obligations (art. 6.1.c).

Your data is accessible only by authorized staff and selected technical processors:

• Hosting & database: cloud provider underlying the Service backend;
• CDN and network protection: Cloudflare, Inc.;
• AI processing: provider(s) of the AI models used for content generation;
• Transactional email: messaging provider (to be confirmed at launch).

Estuqia does not sell or rent your personal data to third parties for commercial purposes.

Some processors may be located outside the European Union. In that case, transfers are governed by appropriate safeguards (European Commission Standard Contractual Clauses or adequacy decisions).

• Account data: while the account is active, then 12 months after deletion for evidence purposes;
• Uploaded documents and generated content: until user-initiated deletion or account deletion;
• Technical logs: 12 months maximum;
• Accounting data: 10 years (statutory obligation).

Under the GDPR, you have the following rights:

• Right of access, rectification and erasure of your data;
• Right to restriction and objection to processing;
• Right to data portability;
• Right to set post-mortem directives;
• Right to lodge a complaint with the CNIL (www.cnil.fr).

To exercise your rights: our contact form.

Estuqia implements appropriate technical and organizational measures: encrypted connections (HTTPS), per-user data isolation (Row Level Security), password hashing, token-based authentication, sensitive-access logging.

The Service is primarily intended for students. Minors under 15 must obtain parental consent before registering, in accordance with GDPR article 8.

This policy may be updated. Any material change will be notified to users by email or in-app.