PRIVACY POLICY
QUIZ AI Builder for Google Forms™
Last Updated: December 2025
1. INTRODUCTION AND SCOPE
QUIZ AI Builder ("we," "us," "our," or "Service Provider") is committed to transparency regarding the collection, processing, and protection of information obtained through your use of our Platform.
This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices available to you regarding your information. This Policy applies exclusively to data collected through the QUIZ AI Builder add-on for Google Forms™ (the "Platform" or "Service").
Acceptance of This Policy: By accessing, authorizing, or using the Platform in any manner, you explicitly acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and consent to our data practices as described herein. If you do not agree with this Policy, you must immediately discontinue use of the Platform.
Integration with Terms of Service: This Privacy Policy is incorporated by reference into our Terms of Service. Capitalized terms not defined in this Policy have the meanings assigned to them in the Terms of Service.
Contact: qcmiabuilder@gmail.com
2. PRIVACY BY DESIGN: ANONYMIZATION AND DATA MINIMIZATION
2.1 Our Core Privacy Principle
QUIZ AI Builder is designed with privacy at its foundation. By design, your data remains on your Google account at all times, never permanently saved in our database.
2.2 No Real Names Required
Critical Notice: The Platform does NOT collect or require your real legal name or surname.
If display names are needed for any purpose, the Platform uses anonymous identifiers:
- "Pseudo 1" - A user-selected alias or display name
- "Pseudo 2" - An optional secondary alias or display name
These fields are explicitly intended for pseudonyms, usernames, or aliases of YOUR choosing — NOT your real legal name or any directly identifiable personal information.
2.3 User Responsibility for Pseudonyms
You are solely responsible for:
- Selecting pseudonyms that do not reveal your real identity
- Avoiding the use of your actual legal name in these fields
- Understanding that any personally identifiable information you voluntarily include in pseudonym fields is provided at your own risk
Our Position: We strongly discourage and do not request the submission of real names in pseudonym fields. We treat pseudonym data as non-personal identifiers selected by users for account differentiation purposes.
2.4 Pseudonymization Benefits
This approach ensures:
- Your privacy is protected even in the unlikely event of a data breach
- Minimal personal data is ever processed
- Compliance with data minimization principles under GDPR and other privacy laws
3. INFORMATION WE COLLECT
We collect minimal information necessary to provide, maintain, and improve our Platform services.
3.1 Account and Authentication Information
When you authorize the add-on with your Google account, we access:
- Email Address: Provided through Google OAuth authentication for account identification, license verification, and communication purposes
- Google OAuth Tokens: Secure tokens allowing limited access to your Google Forms for quiz creation and management
- Account Creation Date: Timestamp of first authorization
We explicitly DO NOT collect:
- Your real legal name or surname
- Your physical address
- Your telephone number
- Your date of birth
- Government identification numbers
- Profile photos or images
3.2 Usage and Subscription Data
To provide the service, we store:
- Usage Counter: Number of quizzes/questionnaires generated (to enforce Free tier limits of 3 generations)
- Subscription Status: Whether you are on Free or Premium tier
- Subscription Details: For Premium users, billing cycle and subscription dates
Storage Location: This data is stored in Google's PropertiesService associated with your Google account, NOT on external servers.
3.3 User-Provided API Key
If you choose to use automatic AI generation:
- Gemini API Key: Your personal API key for Google Gemini AI
Storage: Your API key is stored ONLY in your Google account's PropertiesService (UserProperties). We do NOT have access to, transmit, or store your API key on our servers.
Your Responsibility: You are responsible for:
- Keeping your API key confidential
- Any costs associated with your Gemini API usage
- Complying with Google's Gemini API Terms of Service
3.4 Quiz Configuration Data (Temporary Processing Only)
When you generate quizzes, we temporarily process:
- Subject/Topic: The subject matter you specify for quiz generation
- Use Type Selection: Your selected category (Education, Survey, Training, HR, Marketing, Health)
- Language Preference: Selected interface language (English, Français, العربية, Español)
- Question Configuration: Number of questions, difficulty level, question types selected
- Source Text/Prompts: Text you input for AI-powered quiz generation
CRITICAL DATA HANDLING:
✅ This content is transmitted to Google Gemini API for content generation
✅ We DO NOT permanently store your input content or generated quizzes on our servers
✅ Content is processed in real-time and immediately delivered to your Google Forms
✅ After delivery, no copy of your content remains in our systems
✅ We DO NOT use your content to train AI models or for any other purpose
3.5 Google Forms Integration Data
When you authorize our Platform to integrate with Google Forms™:
What We Access:
- OAuth Authorization Tokens: Secure tokens for Google Forms access
- Google Form Metadata: Form ID and title for quiz insertion
- Write Access: Permission to add questions to your authorized Forms
What We DO NOT Access:
✅ We DO NOT read existing questions in your Google Forms
✅ We DO NOT access your Google Drive files
✅ We DO NOT access your Gmail, Google Calendar, or other Google services
✅ We DO NOT access responses or results submitted to your Forms
✅ We ONLY write new quiz content to Forms you explicitly authorize
Google API Compliance: Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
3.6 Automatically Collected Technical Information
When you access the Platform through Google Forms, Google may automatically collect:
- Browser Information: Browser type and version
- Device Information: Operating system, device type
- IP Address: For security and fraud prevention (handled by Google)
- Access Timestamps: When you use the add-on
Note: Most technical data is collected and processed by Google as part of the Google Workspace infrastructure, not by us directly.
3.7 Support Communications
If you contact us for support:
- Email correspondence content
- Technical issue descriptions
- Feedback or suggestions you provide
3.8 Information We Explicitly DO NOT Collect
To maximize your privacy, we DO NOT collect:
❌ Real legal names or surnames
❌ Physical home or mailing addresses
❌ Telephone or mobile numbers
❌ Date of birth or age
❌ Government-issued identification numbers
❌ Sensitive personal data (health, biometric, genetic, religious, political, sexual orientation)
❌ Financial account numbers or complete payment card details
❌ Content of your existing Google Forms
❌ Responses submitted to your Google Forms
❌ Student data or educational records
❌ Information about minors
4. HOW WE USE YOUR INFORMATION
We process collected information for the following legitimate purposes:
4.1 Service Provision
- Authenticating your identity via Google OAuth
- Tracking quiz generation count for Free/Premium tier enforcement
- Processing quiz generation requests through Google Gemini API
- Inserting generated content into your authorized Google Forms
- Managing subscription status and billing
4.2 Platform Improvement
- Analyzing aggregated, anonymized usage patterns
- Debugging technical issues
- Developing new features and improvements
Limitation: We DO NOT use individual user content (quiz inputs or outputs) to train AI models or develop other products.
4.3 Communication
- Responding to support inquiries
- Sending service announcements and policy updates
- Sending subscription and payment notifications (via Stripe)
Opt-Out: You may unsubscribe from promotional emails at any time. Transactional emails necessary for account management cannot be disabled.
4.4 Security and Compliance
- Detecting and preventing fraudulent activity
- Enforcing our Terms of Service
- Complying with legal obligations
5. INFORMATION SHARING AND DISCLOSURE
We are committed to protecting your information and limiting disclosure to necessary parties.
5.1 Third-Party Service Providers
We share limited information with the following trusted service providers:
Google Gemini API:
- Purpose: AI-powered quiz question generation
- Data Shared: Your input prompts and quiz parameters (temporarily)
- Data Policy: https://ai.google.dev/gemini-api/terms
- Note: According to Google's API policies, API data is generally NOT used for model training
Google Workspace (Forms, OAuth):
- Purpose: Authentication and Google Forms integration
- Data Shared: OAuth tokens, Form metadata for quiz insertion
- Data Policy: https://policies.google.com/privacy
Stripe (Payment Processing):
- Purpose: Processing Premium subscription payments
- Data Shared: Email address, transaction details, payment status
- Data Policy: https://stripe.com/privacy
- Note: We DO NOT receive or store complete credit card numbers or CVV codes
5.2 Google API Limited Use Disclosure
Our use of information received from Google APIs strictly adheres to Google API Services User Data Policy, including Limited Use requirements.
We explicitly DO NOT:
❌ Transfer Google user data to third parties for advertising purposes
❌ Use Google data for interest-based advertising or targeted ads
❌ Sell Google user data to data brokers or information resellers
❌ Use Google data for creditworthiness or lending decisions
❌ Share Google data with HR systems or employment decisions
❌ Use Google data to train generalized AI/ML models
We ONLY use Google API data to:
✅ Authenticate user access to their Google account
✅ Insert quiz content into authorized Google Forms
✅ Execute user-initiated actions on their Google Forms
5.3 Legal and Regulatory Disclosures
We may disclose your information when we believe in good faith that disclosure is necessary to:
- Comply with applicable laws, regulations, or legal processes
- Respond to valid court orders, subpoenas, or regulatory inquiries
- Enforce our Terms of Service
- Protect our rights, property, or safety, or that of our users
User Notification: When legally permitted, we will attempt to notify affected users of legal disclosure requests.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets:
- Your information may be transferred to successor entities
- We will require that the new entity honors this Privacy Policy
- You will be notified of any changes to data handling practices
5.5 What We DO NOT Do With Your Data
We explicitly DO NOT:
✅ Sell, rent, or lease your personal information
✅ Share your data with advertisers
✅ Provide information to data brokers or marketing lists
✅ Use your quiz content to train AI models
✅ Access your Google Drive, Gmail, or other Google services
✅ Share identifiable data with competing platforms
6. DATA STORAGE AND LOCATION
6.1 Where Your Data Is Stored
| Data Type | Storage Location |
|-----------|------------------|
| Email address | Google's servers (via OAuth) |
| Usage counter | Your Google account (PropertiesService) |
| Subscription status | Your Google account (PropertiesService) |
| API key | Your Google account (UserProperties) |
| Quiz content | NOT stored (real-time processing only) |
| Payment data | Stripe's servers |
Key Point: We do NOT operate external databases containing your personal information. Your data remains within Google's infrastructure or with Stripe for payment processing.
6.2 International Data Transfers
Your information may be processed in:
- Google's global infrastructure (for Forms, OAuth, PropertiesService)
- Stripe's infrastructure (for payment processing)
- Google's AI infrastructure (for Gemini API processing)
By using the Platform, you consent to the transfer and processing of your data in these locations.
For EU Users: We rely on Google's and Stripe's compliance mechanisms (Standard Contractual Clauses, adequacy decisions) for international transfers.
7. DATA RETENTION AND DELETION
7.1 Retention Periods
| Data Type | Retention Period |
|-----------|------------------|
| Email (for authentication) | Duration of account + legal retention |
| Usage counter | Duration of account |
| Subscription status | Duration of account + 7 years (tax compliance) |
| API key | Until you delete it or revoke access |
| Quiz content | NOT retained (processed in real-time only) |
| Support emails | 3 years |
| Payment records | 7-10 years (legal requirement) |
7.2 Account Deletion
Your Right to Delete: You may request deletion of your account and data at any time by:
- Revoking the add-on's access in your Google account settings
- Contacting us at qcmiabuilder@gmail.com
Deletion Process:
- Your access will be immediately revoked
- Data in PropertiesService will be cleared
- You will receive confirmation of deletion
Retention Exceptions: We may retain certain information after deletion:
- Transaction records for tax compliance (as required by law)
- Anonymized analytics that cannot identify you
- Information required for ongoing legal matters
8. DATA SECURITY
8.1 Security Measures
We implement reasonable security measures:
Technical Security:
- OAuth 2.0 for secure Google authentication
- HTTPS/TLS encryption for all data transmission
- No storage of sensitive data on external servers
- Reliance on Google's and Stripe's enterprise-grade security
Google's Security: Your data stored in PropertiesService benefits from Google's security infrastructure, including encryption, access controls, and security monitoring.
Stripe's Security: Payment processing is handled by Stripe, which is PCI-DSS compliant and implements industry-leading security measures.
8.2 Security Limitations
YOU ACKNOWLEDGE AND ACCEPT THAT:
- No data transmission over the Internet is 100% secure
- We cannot guarantee absolute protection against all threats
- Third-party services (Google, Stripe, Gemini) maintain their own security practices
- You are responsible for keeping your Google account and API key secure
8.3 Breach Notification
In the event of a data breach affecting your information:
- We will investigate and assess the impact
- We will notify affected users without undue delay as required by law
- We will report to relevant authorities if legally required
- We will take remedial actions to prevent future incidents
9. AUTOMATED DECISION-MAKING AND PROFILING
9.1 No Automated Decision-Making
The Platform does NOT engage in:
- Automated decision-making that produces legal or similarly significant effects on you
- Profiling that significantly affects your rights or interests
- Algorithmic decisions about credit, employment, insurance, or similar matters
9.2 AI-Generated Content Clarification
While the Platform uses artificial intelligence (Google Gemini) to generate quiz content:
- This is a content generation tool, not automated decision-making about you
- AI generates educational content based on your prompts, not decisions affecting your rights
- You have full control to review, edit, accept, or reject all AI-generated content
- No decisions about you are made automatically by the AI
9.3 Your Rights Regarding Automated Processing
Under GDPR Article 22 and similar laws, you have the right to:
- Not be subject to decisions based solely on automated processing that significantly affects you
- Obtain human intervention in any such decisions
- Express your point of view and contest automated decisions
Since we do not engage in such automated decision-making, these rights are preserved by design.
10. YOUR PRIVACY RIGHTS
Your rights vary depending on your location and applicable laws.
10.1 Universal Rights (All Users)
All users have the right to:
- Access: Request information about data we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your account and data
- Withdraw Consent: Withdraw consent for data processing
- Opt-Out: Unsubscribe from promotional communications
To exercise these rights: qcmiabuilder@gmail.com
10.2 European Union / United Kingdom (GDPR)
If you are in the EEA, UK, or Switzerland, you have additional rights:
- Right to Access (Article 15): Obtain a copy of your personal data
- Right to Rectification (Article 16): Correct inaccurate data
- Right to Erasure (Article 17): Request deletion ("right to be forgotten")
- Right to Restriction (Article 18): Limit processing in certain circumstances
- Right to Data Portability (Article 20): Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller
- Right to Object (Article 21): Object to processing based on legitimate interests
- Right Not to Be Subject to Automated Decision-Making (Article 22): See Section 9 above
- Right to Lodge a Complaint: File a complaint with your supervisory authority
Legal Bases for Processing (Article 6):
- Contractual Necessity: To provide Platform services
- Legitimate Interests: Service improvement, security, fraud prevention
- Consent: Where you have provided explicit consent
- Legal Obligation: To comply with applicable laws
Supervisory Authorities:
- EU: https://edpb.europa.eu/about-edpb/about-edpb/members_en
- UK ICO: https://ico.org.uk/make-a-complaint/
- France CNIL: https://www.cnil.fr/
Response Time: Within one (1) month, extendable by two additional months for complex requests.
10.3 California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights:
Right to Know (CCPA § 1798.100):
- Categories of personal information collected
- Specific pieces of personal information held about you
- Categories of sources from which information is collected
- Business purposes for collecting information
- Categories of third parties with whom information is shared
Right to Delete (CCPA § 1798.105): Request deletion of personal information we have collected, subject to legal exceptions.
Right to Correct (CPRA § 1798.106): Request correction of inaccurate personal information.
Right to Opt-Out of Sale/Sharing (CCPA § 1798.120):
- We DO NOT sell personal information for monetary consideration
- We DO NOT share personal information for cross-context behavioral advertising
- Therefore, no opt-out mechanism is required
Right to Limit Use of Sensitive Personal Information (CPRA § 1798.121): We do not collect or process sensitive personal information as defined by CPRA.
Right to Non-Discrimination (CCPA § 1798.125): We will not discriminate against you for exercising your CCPA rights.
Authorized Agents: You may designate an authorized agent to submit requests on your behalf. We may require written authorization and identity verification.
Verification: We verify your identity before processing requests by matching information you provide with our records.
Response Time: Within forty-five (45) days, extendable by an additional forty-five (45) days if necessary.
10.4 Virginia Residents (VCDPA)
If you are a Virginia resident, the Virginia Consumer Data Protection Act provides you with the following rights:
- Right to Confirm: Confirm whether we are processing your personal data
- Right to Access: Access your personal data
- Right to Correct: Correct inaccuracies in your personal data
- Right to Delete: Delete personal data you have provided or we have obtained
- Right to Data Portability: Obtain a copy of your personal data in a portable format
- Right to Opt Out: Opt out of targeted advertising, sale of personal data, or profiling
Opt-Out Rights Clarification:
- We DO NOT sell personal data
- We DO NOT engage in targeted advertising
- We DO NOT profile users for decisions with legal or significant effects
Appeals Process: If we decline your request, you may appeal by contacting us at qcmiabuilder@gmail.com with "VCDPA Appeal" in the subject line. We will respond within sixty (60) days. If your appeal is denied, you may contact the Virginia Attorney General at https://www.oag.state.va.us/
Response Time: Within forty-five (45) days, extendable by an additional forty-five (45) days.
10.5 Colorado Residents (CPA)
If you are a Colorado resident, the Colorado Privacy Act provides you with similar rights:
- Right to Confirm and Access: Confirm processing and access your personal data
- Right to Correct: Correct inaccuracies
- Right to Delete: Delete personal data
- Right to Data Portability: Obtain a portable copy
- Right to Opt Out: Opt out of targeted advertising, sale of personal data, or profiling
Opt-Out Rights Clarification: We DO NOT sell data, engage in targeted advertising, or profile users.
Appeals Process: If we decline your request, you may appeal by emailing qcmiabuilder@gmail.com with "CPA Appeal" in the subject line. We will respond within forty-five (45) days. If denied, you may contact the Colorado Attorney General at https://coag.gov/
Response Time: Within forty-five (45) days, extendable by an additional forty-five (45) days.
10.6 Connecticut Residents (CTDPA)
If you are a Connecticut resident, the Connecticut Data Privacy Act provides you with:
- Right to Confirm and Access: Confirm processing and access your data
- Right to Correct: Correct inaccuracies
- Right to Delete: Delete personal data
- Right to Data Portability: Obtain a portable copy
- Right to Opt Out: Opt out of targeted advertising, sale, or profiling
Opt-Out Rights Clarification: We DO NOT sell data, engage in targeted advertising, or profile users.
Appeals Process: If we decline your request, you may appeal by emailing qcmiabuilder@gmail.com with "CTDPA Appeal" in the subject line. We will respond within sixty (60) days. If denied, you may contact the Connecticut Attorney General at https://portal.ct.gov/AG
Response Time: Within forty-five (45) days, extendable by an additional forty-five (45) days.
10.7 Utah Residents (UCPA)
If you are a Utah resident, the Utah Consumer Privacy Act provides you with:
- Right to Confirm and Access: Confirm processing and access your data
- Right to Delete: Delete personal data you have provided
- Right to Data Portability: Obtain a portable copy
- Right to Opt Out: Opt out of targeted advertising or sale of personal data
Opt-Out Rights Clarification: We DO NOT sell data or engage in targeted advertising.
Response Time: Within forty-five (45) days, extendable by an additional forty-five (45) days.
10.8 Other U.S. State Privacy Laws
As additional U.S. states enact comprehensive privacy legislation (including but not limited to Texas, Oregon, Montana, Delaware, Iowa, Tennessee), we will update this Policy to reflect your rights under applicable state laws.
10.9 Canadian Residents (PIPEDA)
If you are a Canadian resident, the Personal Information Protection and Electronic Documents Act (PIPEDA) provides you with:
- Right to Access: Access personal information held about you
- Right to Challenge Accuracy: Challenge the accuracy and completeness of information
- Right to Correction: Request correction of inaccurate data
- Right to Withdraw Consent: Withdraw consent for data processing (subject to legal restrictions)
- Right to Complain: File a complaint with the Privacy Commissioner of Canada
Contact: Office of the Privacy Commissioner of Canada
Website: https://www.priv.gc.ca/en/
Toll-free: 1-800-282-1376
10.10 Australian Residents
If you are an Australian resident, the Privacy Act 1988 provides you with:
- Right to Access: Access personal information held about you
- Right to Correction: Request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading information
- Right to Complain: Lodge a complaint about privacy breaches
Contact: Office of the Australian Information Commissioner (OAIC)
Website: https://www.oaic.gov.au/
Phone: 1300 363 992
10.11 New Zealand Residents
If you are a New Zealand resident, the Privacy Act 2020 provides you with:
- Right to Access: Access personal information held about you
- Right to Correction: Request correction of inaccurate information
- Right to Complain: Lodge a complaint about privacy breaches
Contact: Office of the Privacy Commissioner
Website: https://www.privacy.org.nz/
Phone: 0800 803 909
10.12 Brazilian Residents (LGPD)
If you are a Brazilian resident, the Lei Geral de Proteção de Dados (LGPD) provides you with:
- Right to Confirmation and Access: Confirm processing and access your data
- Right to Correction: Correct incomplete, inaccurate, or outdated data
- Right to Anonymization, Blocking, or Deletion: For unnecessary or excessive data
- Right to Data Portability: Receive your data in a structured format
- Right to Deletion: Delete data processed with your consent
- Right to Information: Know about sharing with third parties
- Right to Revoke Consent: Withdraw consent at any time
Contact: Autoridade Nacional de Proteção de Dados (ANPD)
Website: https://www.gov.br/anpd/
10.13 How to Submit Privacy Rights Requests
Email: qcmiabuilder@gmail.com
Subject Line: "Privacy Request - [Your Request Type] - [Your Location]"
Required Information:
- Email address associated with your account
- Description of the right you wish to exercise
- Your location/jurisdiction (for applicable law determination)
- Any specific details about your request
Verification: We may verify your identity before processing requests to protect your privacy. This may include:
- Confirming the email address associated with your account
- Asking security questions
- Requesting additional documentation (in rare cases)
Our Response:
- Acknowledgment within 5-10 business days
- Substantive response within applicable legal timeframes (typically 30-45 days)
- If we cannot fulfill your request, we will explain the reasons
No Fee: There is no fee for submitting requests unless they are manifestly unfounded, excessive, or repetitive.
10.14 Appeals Process
If we decline or partially deny your privacy rights request:
Step 1: You may appeal by sending an email to qcmiabuilder@gmail.com with:
- Subject line: "Privacy Appeal - [Original Request Type]"
- Explanation of why you disagree with our decision
- Any additional information supporting your appeal
Step 2: We will review your appeal and respond within:
- 60 days for Virginia and Connecticut residents
- 45 days for Colorado, Utah, and other US state residents
- 30 days for EU/UK residents
Step 3: If your appeal is denied, our response will include:
- Detailed explanation of the denial reasons
- Information on how to contact the relevant regulatory authority in your jurisdiction
Regulatory Contacts by Jurisdiction:
- EU: Your national data protection authority
- UK: Information Commissioner's Office (ICO)
- France: CNIL
- California: California Attorney General
- Virginia: Virginia Attorney General
- Colorado: Colorado Attorney General
- Connecticut: Connecticut Attorney General
11. COOKIES AND TRACKING TECHNOLOGIES
11.1 Minimal Cookie Usage
As a Google Forms add-on, QUIZ AI Builder operates within Google's infrastructure and uses minimal cookies:
Essential Cookies (Required):
- Google authentication session cookies
- Security cookies for OAuth
- Session management cookies
We DO NOT use:
- Advertising or marketing cookies
- Third-party tracking cookies
- Cross-site tracking technologies
- Web beacons or tracking pixels for advertising purposes
11.2 Third-Party Cookies
Google and Stripe may set their own cookies as part of their services:
Google Cookies:
- Purpose: Authentication, security, service functionality
- Types: Session cookies, preference cookies
- Duration: Varies by cookie type
- Policy: https://policies.google.com/privacy
Stripe Cookies:
- Purpose: Payment processing, fraud prevention
- Types: Security cookies, functional cookies
- Duration: Varies by cookie type
- Policy: https://stripe.com/privacy
11.3 Cookie Management
Browser Controls: You can manage cookies through your browser settings:
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions
Note: Disabling essential cookies may prevent the Platform from functioning properly.
11.4 Do Not Track (DNT) Signals
Do Not Track is a browser setting that requests websites not to track your browsing activity.
Our Response to DNT Signals: We currently do not respond to DNT signals because:
- There is no uniform industry standard for DNT implementation
- Our Platform does not engage in cross-site tracking
- We do not use tracking for advertising purposes
If a standardized DNT protocol is adopted in the future, we will update this Policy accordingly.
Regardless of DNT settings:
- We do NOT track you across third-party websites
- We do NOT sell your data to advertisers
- We do NOT engage in behavioral advertising
12. CHILDREN'S PRIVACY
12.1 Age Restrictions
The Platform is NOT directed to or intended for individuals under 18 years of age.
We do NOT knowingly collect personal information from children under 18.
12.2 Parental Notice
If you are a parent or guardian and believe your child has provided information to us:
- Contact us immediately at qcmiabuilder@gmail.com
- We will investigate and delete such information promptly
- We may request verification of parental authority
12.3 Educational Use
If educators use the Platform to create quizzes for students:
- The educator (adult) must be the one using the Platform
- Student data should NEVER be entered into the Platform
- Educators are responsible for obtaining any required parental consents
- Compliance with COPPA, FERPA, and other student privacy laws is the educator's responsibility
WE DO NOT PROCESS:
- Student names or personal information
- Student educational records
- Information protected under FERPA, COPPA, or similar laws
13. THIRD-PARTY LINKS AND SERVICES
13.1 Integrated Third-Party Services
The Platform integrates with:
Google Services:
- Google OAuth (authentication)
- Google Forms API (quiz insertion)
- Google Gemini API (AI generation)
Privacy Policy: https://policies.google.com/privacy
Stripe:
- Payment processing for Premium subscriptions
Privacy Policy: https://stripe.com/privacy
13.2 External Links
The Platform may contain links to external websites or resources. We are not responsible for:
- The privacy practices of third-party websites
- Content, accuracy, or availability of external sites
- Any damages resulting from your use of third-party services
Recommendation: Review the privacy policies of any third-party websites you visit.
14. POLICY UPDATES
14.1 Right to Modify
We reserve the right to update this Privacy Policy at any time for reasons including:
- Changes in applicable laws or regulations
- New features or services
- Modifications to data practices
- Clarifications or corrections
14.2 Notification of Changes
For material changes affecting your rights or data processing, we will provide notice via:
- Email to your registered address
- Prominent notice in the Platform
- Updated "Last Modified" date at the top of this Policy
Effective Date: Changes become effective fifteen (15) days after notice, except for legally required changes which may be immediate.
14.3 Continued Use
Your continued use of the Platform after the effective date of changes constitutes acceptance of the updated Policy. If you disagree, discontinue use and request account deletion.
14.4 Version History
We maintain prior versions of this Privacy Policy. You may request previous versions by contacting qcmiabuilder@gmail.com.
15. CONTACT INFORMATION
For questions, concerns, or requests regarding this Privacy Policy:
QUIZ AI Builder
Email: qcmiabuilder@gmail.com
For Data Subject Requests (access, deletion, correction, portability):
Email: qcmiabuilder@gmail.com
Subject Line: "Privacy Request - [Request Type] - [Your Location]"
For Appeals of Denied Requests:
Email: qcmiabuilder@gmail.com
Subject Line: "Privacy Appeal - [Original Request Type]"
For Security Concerns:
Email: qcmiabuilder@gmail.com
Subject Line: "URGENT: Security Concern"
Response Times:
- Acknowledgment: 5-10 business days
- Substantive response: Within applicable legal timeframes (30-45 days)
- Appeals: 45-60 days depending on jurisdiction
16. LEGAL DISCLAIMERS
16.1 No Absolute Privacy Guarantee
YOU ACKNOWLEDGE AND AGREE THAT:
- No method of data transmission or storage is 100% secure
- We cannot guarantee absolute protection against all security threats
- You use the Platform and share information at your own risk
- Third-party services maintain their own security practices
16.2 User Responsibility
You are responsible for:
- Maintaining the security of your Google account
- Not entering real names in pseudonym fields
- Keeping your API key confidential
- Not submitting sensitive personal data or student information
16.3 Third-Party Practices
We are not responsible for:
- Privacy practices or security measures of third-party services
- Data breaches occurring at Google, Stripe, or other third parties
- Changes to third-party privacy policies
16.4 Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR:
- Unauthorized access to your information due to circumstances beyond our control
- Data breaches at third-party services
- Your voluntary disclosure of personal information in pseudonym fields
- Privacy issues arising from your failure to follow our recommendations
ACKNOWLEDGMENT AND CONSENT
BY USING THE PLATFORM, YOU ACKNOWLEDGE THAT:
- You have read and understood this Privacy Policy
- You consent to the collection and processing of information as described
- You understand that pseudonym fields (Pseudo 1, Pseudo 2) should NOT contain your real name
- You accept the security limitations and liability disclaimers
- You consent to international data transfers
- You acknowledge this Policy may be updated and continued use constitutes acceptance
- You understand your data primarily remains within Google's infrastructure
- You are responsible for not submitting student data or sensitive personal information
- You understand your privacy rights and how to exercise them
- You understand the appeals process if your privacy requests are denied
IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, DO NOT USE THE PLATFORM.
Google Forms™ and Google Workspace™ are trademarks of Google LLC. QUIZ AI Builder is not affiliated with, endorsed by, or sponsored by Google LLC.