Web privacy & material processing
This notice covers Quiz Notebook’s web study space, paid passes and AI deck commissions. Also read our general privacy policy. Privacy contact: Son Hyeonho · yseedu@naver.com · 02-565-6540.
Data collected & purposes
- Sign-in: email, authentication/session logs, IP and browser information, for account verification and abuse prevention.
- Purchases: order ID, product, amount, status, payment identifiers and consent version, for payment, entitlement and refunds. Quiz Notebook does not store card numbers or CVCs.
- Devices: entered name/type, identifier, last activity and editing-lock information, for registration and concurrent-use management.
- Private sync: encrypted decks, revision, timestamp and material rights, for cross-device use of decks you select.
- Commissions: submitted text/brief, email confirmation, agreement, review, results and delivery records, for intake review, AI production, human review, delivery and support.
Storage is different from AI transmission
Private synced decks are encrypted in the browser with your recovery key; never send the key to us. Commission material is encrypted on the server but designated operators can read it for production/review. After you agree to terms, material is sent to OpenAI and Anthropic for creation and separate review. Your entire private deck collection is never sent automatically.
Your own API requests travel browser → Quiz Notebook server → selected AI provider. The key passes through memory during processing and is not implemented for storage in the account DB or browser’s persistent storage. This does not guarantee zero retention under the provider’s own policies.
Processors & overseas processing
We use Netlify (US: hosting, functions, database), Resend (US: sign-in/transaction emails), OpenAI (US: generation) and Anthropic (US: generation/review). Requested features may send necessary information over encrypted connections. Toss Payments handles Korean payments. Overseas cards and PayPal are not available yet.
Email/sync receive account, device and encrypted data; AI receives selected material and requests. Your own API goes only to the selected provider. Processors retain data as needed for service, contract and law. Provider policies: Netlify · Resend · OpenAI · Anthropic. Without agreement to necessary processing, sign-in, payments, sync and AI commissions are unavailable; local-storage basics remain available.
Retention & deletion
Account, encrypted personal decks and delivered-deck rights records are kept as needed for the account and service. You may request account/deck deletion. Legally required transaction records are stored separately and not reused. Contracts, withdrawal, payment and supply records: 5 years; complaints/disputes: 3 years. Deletion results are explained after checking return of originals, unfinished production and refunds.
Operator-readable source material is deleted 90 days after the request closes. Contract, consent and delivery evidence are separated from the source and kept for legal periods. The server cannot remotely delete downloaded files or decks on your device.
Exercising your rights
Request access, correction, suspension, deletion or withdrawal of consent from your purchase email to yseedu@naver.com. We verify identity; if law or an active contract prevents immediate deletion, we explain why and for how long. Remove unnecessary sensitive information such as personal data/student grades. Under-14s should not register for this paid web service.