Privacy Policy

1. Information We Collect

• Account Information: Name, email address, and authentication credentials when you create an account (via email or Google Sign-In).
• Reading Data: Books you upload, reading progress, chapter bookmarks, and reading history. Your uploaded files are stored securely and are only accessible to you.
• AI Interaction Data: Debate conversations, mind map content, and AI-generated responses created during your use of the platform.
• Usage Data: Pages visited, features used, session duration, and general interaction patterns to help us improve the product.
• Device Information: Browser type, operating system, and IP address collected automatically for security and analytics purposes.

2. How We Use Your Information

• To provide, maintain, and improve the Socratree platform and its features.
• To personalize your experience, including remembering reading progress and language preferences.
• To generate AI-powered debates, mind maps, and other intelligent features using third-party AI services.
• To communicate with you about your account, updates, and service-related announcements.
• To detect and prevent fraud, abuse, and security incidents.

3. Lawful Basis for Processing (GDPR)

• Contractual Necessity (Art. 6(1)(b)): We process your Account and Reading Data to provide you the core Socratree service as agreed in our Terms of Service.
• Legitimate Interest (Art. 6(1)(f)): We process Usage and Device Data to secure our platform, prevent fraud, and understand general product usage.
• Consent (Art. 6(1)(a)): Where required by law, we rely on your explicit consent to process specific files or use specific voluntary features.

4. Third-Party Services & International Transfers

We use the following third-party processors. Where data is transferred outside the European Economic Area (EEA), we ensure adequate legal frameworks such as Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework are in place:

• Supabase — Authentication, database, and file storage (AWS Infrastructure). See Supabase Privacy Policy.
• OpenAI — Powers AI debates and mind map generation. Text excerpts from your books are sent to OpenAI's API strictly to fulfill your request. OpenAI retains API data for a maximum of 30 days solely for abuse monitoring and explicitly does NOT use your data to train their foundational models. See OpenAI API Data Usage Policy.
• Vercel — Hosts our web application. See Vercel Privacy Policy.
• Google — Provides Google Sign-In authentication. See Google Privacy Policy.

5. Data Storage & Security

• Your data is stored in isolated, secure cloud environments provided by Supabase.
• We use industry-standard security measures including HTTPS encryption, row-level security policies, and secure authentication tokens.
• Uploaded book files are stored in private storage buckets accessible only to you.
• We do not sell, rent, or share your personal data with third parties for marketing purposes.
• Retention Policy: We keep your account data and uploaded books as long as your account remains active. If you delete your account, or request deletion of a specific file, it is permanently purged from our systems within 30 days.

6. Your Rights

Under GDPR and applicable privacy laws, you have the right to:

• Access your personal data and request a copy of the information we hold about you.
• Correct inaccurate or incomplete personal data.
• Delete your account and all associated data. You can request account deletion by contacting us.
• Export your data in a portable format.
• Withdraw consent for data processing at any time by deleting your account.

7. Cookies & Local Storage

• We use localStorage to save your language preference, reading progress, and authentication session.
• We do not use third-party tracking cookies or advertising pixels.
• No data is shared with advertising networks or data brokers.

8. Children's Privacy

Socratree is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on the platform. Your continued use of Socratree after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy or your data, please contact us at:

privacy@socratree.com