Privacy Policy

This Privacy Policy describes how Maedix-Q ("we", "us", or "our") collects, uses, and shares your personal information when you use our quiz platform and video generation service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• First and last name
• Password (encrypted)
• Profile information (bio, location, social links) - optional

1.2 Usage Data

We automatically collect:

• Quiz attempts and performance data
• XP points and streak information
• Generated videos and export history
• Feature usage and interaction data

1.3 Third-Party Account Data

When you connect third-party accounts, we collect:

• Instagram: Instagram Business Account ID, username, and access tokens for posting content on your behalf
• YouTube: YouTube Channel ID, channel name, and OAuth tokens for uploading videos on your behalf

1.4 Payment Information

When you make purchases, our payment processor (Razorpay) collects payment details. We store:

• Transaction IDs and order references
• Subscription status and billing cycle
• We do NOT store your credit card numbers or bank details

2. How We Use Your Information

We use the collected information to:

• Provide and maintain our services
• Process quiz attempts and track your learning progress
• Generate and store video exports
• Post content to Instagram and YouTube on your behalf (when authorized)
• Process payments and manage subscriptions
• Send verification emails and important service updates
• Display leaderboards and public statistics
• Improve and personalize your experience

3. Third-Party Services

We integrate with the following third-party services:

3.1 Instagram (Meta)

When you connect your Instagram account, we use Meta's Instagram Graph API to post videos as Reels on your behalf. We access your Instagram Business Account according to Meta's Platform Terms. You can disconnect your account at any time from your profile settings.

3.2 YouTube (Google)

When you connect your YouTube account, we use YouTube Data API v3 to upload videos to your channel. We comply with Google's API Services User Data Policy and YouTube's Terms of Service. You can revoke access anytime via your Google Account settings or our platform.

3.3 Razorpay

We use Razorpay for payment processing. Your payment information is handled directly by Razorpay according to their privacy policy. We only receive confirmation of successful transactions.

3.4 Amazon Web Services (AWS)

We use AWS S3 to securely store your generated videos. Videos are stored with unique identifiers and are accessible only to you through your account.

3.5 Email Service

We use email services to send verification codes (OTP), password reset links, and important account notifications.

4. Data Storage and Security

• All data is transmitted over HTTPS encryption
• Passwords are hashed using industry-standard algorithms
• OAuth tokens for third-party services are encrypted at rest
• Videos are stored securely on AWS S3 with access controls
• We regularly review and update our security practices

5. Data Sharing

We do NOT sell your personal information. We may share data:

• With service providers who assist in our operations (as listed above)
• To comply with legal obligations or court orders
• To protect our rights and prevent fraud
• On public leaderboards (username and scores only, with your consent)

6. Your Rights and Choices

You have the right to:

• Access: View your personal data through your profile
• Correct: Update your profile information anytime
• Delete: Request deletion of your account and associated data
• Disconnect: Remove Instagram or YouTube connections from your profile
• Export: Request a copy of your data
• Opt-out: Unsubscribe from marketing emails

7. Data Retention

We retain your data for as long as your account is active. After account deletion:

• Personal data is deleted within 30 days
• Generated videos are deleted from our storage
• Anonymized usage statistics may be retained for analytics
• Content posted to third-party platforms remains on those platforms

8. Cookies and Tracking

We use essential cookies for:

• Session management and authentication
• Remembering your preferences (e.g., learner/creator view)
• Security and fraud prevention

9. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.