Privacy Policy

1. Who we are

LectureIQ is operated by Ruby Huggins (ABN 68 280 756 725), trading as BLEECH. This policy explains how we collect, use, and protect your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information we collect

We collect the following information when you use LectureIQ:

Account information: your name, email address, and a hashed version of your password. We do not store your password in plain text.

Payment information: processed and stored by Stripe. We store your Stripe customer ID and subscription status. We do not store credit card numbers.

Course materials: files you upload (PDFs, transcripts, images, documents) and text extracted from those files. These are stored in our database to generate predictions.

Panopto credentials: if you choose to connect Panopto, we store your API client ID and an encrypted version of your client secret. Your Panopto access tokens are stored to pull transcripts on your behalf.

3. How we use your information

To provide the service: your uploaded materials are processed by our AI engine to generate exam predictions, practice questions, and study plans.

AI processing: your course materials are sent to Anthropic's Claude API for analysis. Anthropic's data usage policy applies to this processing. Under Anthropic's commercial terms, content sent via the API is not used to train their models. We send your content with XML delimiters that instruct the AI to treat it as data, not instructions.

We do not sell your personal information. We do not share your course materials with other users. We do not use your content for advertising.

4. Data storage and security

Your data is stored in Supabase (PostgreSQL) with row-level security enforced at the database level. Every query is scoped to your user ID. Another user cannot access your predictions, files, or study data even if an application-level bug exists.

Panopto client secrets are encrypted using AES-256-GCM before storage.

Our infrastructure is hosted on Vercel (frontend and API) and Supabase (database), both of which maintain SOC 2 compliance.

5. Data retention

Your data is retained for as long as your account is active. Upon account deletion or subscription cancellation, your data is retained for 90 days to allow reactivation, then permanently deleted. You can request immediate deletion by contacting ruby@bleech.au.

6. Your rights

Under the Australian Privacy Principles, you have the right to access the personal information we hold about you, request correction of inaccurate information, and request deletion of your data.

To exercise these rights, contact ruby@bleech.au. We will respond within 30 days.

7. Cookies and analytics

LectureIQ uses essential cookies for authentication (session management). We do not use tracking cookies, advertising cookies, or third-party analytics. We do not use Google Analytics, Facebook Pixel, or any similar tracking tools.

8. Third-party services

Stripe: payment processing. Subject to Stripe's privacy policy.

Anthropic (Claude API): AI processing of your course materials. Subject to Anthropic's data usage policy. API content is not used for model training.

Panopto: lecture transcript access (only if you choose to connect). We access your Panopto content using credentials you provide. We only access folders and transcripts you have permission to view.

Vercel and Supabase: infrastructure hosting.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email at least 14 days before the changes take effect.

10. Contact

For privacy inquiries or data requests:
Ruby Huggins, BLEECH
ABN 68 280 756 725
ruby@bleech.au
Gold Coast, Queensland, Australia