Privacy Policy

1 Information We Collect

We collect information to provide a superior user experience and core functionalities. The categories of information we collect include:

• Early Access Waitlist Contact & Consent Audit: During our pre-launch phase, we collect your email address, consent timestamp, IP address, and browser user-agent solely to maintain verifiable proof of consent (UK GDPR Art. 7(1)) and to send launch notices and onboarding invitations.
• Account Credentials: When you register an account, we collect your name, email address, and hashed credentials.
• Academic / Content Data: To deliver our AI-powered features, we store your uploaded slides (PDFs, PPTX), voice/audio recordings, transcription texts, summaries, and generated note contents. Audio files are processed solely for automated transcription and text generation. We do not analyse audio content for biometric features, and we do not use audio data to identify unique individuals, build biometric voiceprints, or track user identity.
• Payment & Subscription Info: Credit card processing is handled safely via Stripe. We do not store full payment credentials on our server database.
• Application Usage Metrics: Technical details such as access times, page views, and user flows to optimise interface responsiveness.

2 How We Use Your Data

Your information is used strictly to power and improve the Lecture Lens platform. Specifically, we use it to:

• Create and manage your user account, subscription states, and personal workspace.
• Perform audio transcriptions and generate AI study summaries, definitions, and slide-level notes.
• Process secure subscription payments, renewals, upgrades, and downgrades.
• Diagnose bugs, optimise application speeds, and improve AI model performance.

3 Data Storage & Security Measures

We use robust encryption standards to protect your academic content, account parameters, and transcripts both in transit and at rest. Access control is enforced across all backend microservices. While we deploy industry-standard safeguards, please note that no internet transmission is 100% immune from unexpected interruptions, and we encourage strong passwords.

4 Data Sharing & Authorised Sub-processors

We do not sell, rent, monetise, or trade your personal data or uploaded lecture audio to advertisers, data brokers, or third parties.

To operate Lecture Lens, we engage selected third-party service providers ("Sub-processors") who process limited categories of data on our behalf under strict Data Processing Agreements (DPAs) compliant with GDPR Article 28 and applicable privacy regulations:

All third-party sub-processors are required to implement technical and organisational measures safeguarding personal data in accordance with international data transfer standards (including Standard Contractual Clauses where applicable).

5 Cookies and Tracking

We only use cookies that are strictly necessary to provide the service. These include session security cookies (to authenticate your account), CSRF tokens (to prevent cross-site request forgery), and cookies storing your theme preference (dark/light mode).

We do not use advertising, marketing, tracking, or analytical cookies. Since we only use strictly necessary cookies, no cookie consent banner is shown.

6 Your Control & Rights (GDPR & CCPA Compliance)

Depending on your location (including the European Economic Area under GDPR and California under CCPA), you possess specific legal rights regarding your personal data:

• Right to Access & Data Portability (GDPR Art. 20 / CCPA): You have the right to receive a complete, machine-readable copy of your personal data. You may download your notes and summaries individually from your dashboard, or use the self-service Download My Data (JSON) tool in your Settings > Privacy & Data tab to export your complete profile, course hierarchy, lectures, notes, transcripts, and summaries.
• Right to Erasure / Right to be Forgotten (GDPR Art. 17): You retain complete control over your data. Under Settings > Privacy & Data, you may choose between two deletion mechanisms:
  • 30-Day Recovery Deactivation: Your account is deactivated immediately and scheduled for automated cascade deletion after 30 days. You can reactivate anytime during this period by logging in.
  • Immediate Permanent Erasure: Irreversibly purges your account credentials, uploaded slides, audio recordings, transcripts, summaries, and notes from our database and storage immediately. No recovery is possible.
• Right to Withdraw Consent (UK / EU GDPR Art. 7(3)): You may withdraw your consent for pre-launch waitlist notifications at any time with immediate effect. To do so, visit our self-service Unsubscribe page or email privacy@lecturelens.io. Withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Non-Discrimination: We will not discriminate against you (such as charging different prices or providing a different quality of service) for exercising any of your privacy rights.

7 Children's Privacy & Age Restrictions (COPPA & GDPR Art. 8)

Lecture Lens is designed for higher education students, secondary students, and adult learners. We do not knowingly collect, solicit, or maintain personal information or voice recordings from children under the age of 13 in the United States (in accordance with the Children's Online Privacy Protection Act, COPPA) or under the age of 16 in the European Economic Area / United Kingdom (in accordance with GDPR Article 8).

If we discover that personal data of an individual below these age thresholds has been collected without verified parental or educational institution consent, we will promptly delete that information from our active databases and cloud storage. If you believe a minor has provided us with personal information in violation of this policy, please contact us immediately at privacy@lecturelens.io.

8 Changes to this Policy

We reserve the right to modify this Privacy Policy. If updates occur, we will post the changes to this URL page and update the timestamp at the top of this document. We recommend periodic reviews to stay fully informed.