Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, use our quiz platform, or contact us for support.

• Account information (customer ID, business name, email address, password)
• Profile information (timezone preferences, theme preferences)
• Quiz content you create (questions, answers, team names, scores)
• Usage data (quiz history, player interactions, session activity)
• Technical data (IP address, browser type, device information, cookies)

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our quiz platform services
• Create and manage your account and subscriptions
• Generate and display quiz content in real-time
• Store team scores and quiz history
• Send verification emails and password reset links
• Process authentication and maintain user sessions
• Respond to your support requests and communications
• Improve our services and develop new features
• Monitor and analyze platform usage and performance

3. Data Storage and Third-Party Services

We use the following third-party services to store and process your data:

• Vercel - Application hosting and deployment (quizforbrains.vercel.app)
• Upstash Redis - Database for storing customer data, quiz content, and session information
• Resend - Email delivery service for verification emails and password resets

All data is encrypted in transit using HTTPS/TLS. Database credentials and API keys are stored securely as environment variables and never exposed to client-side code.

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your consent or at your direction
• With service providers listed above who assist in our operations (under strict data processing agreements)
• To comply with legal obligations or respond to lawful requests
• To protect our rights, privacy, safety, property, or that of our users
• In connection with a business transfer (merger, acquisition, or sale of assets)

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Passwords are hashed using industry-standard bcrypt encryption before storage
• Session tokens are securely generated and validated
• Database access is restricted and monitored
• API keys and credentials are stored as encrypted environment variables
• Regular security audits and dependency updates

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account remains active or as needed to provide you services. Specific retention policies:

• Account data: Retained until you request account deletion
• Quiz content: Retained as long as your account is active
• Quiz history: Retained for the duration of your subscription
• Session data: Automatically expires after logout or timeout
• Audit logs: Retained for security and compliance purposes

Upon account deletion request, we will remove your personal information within 30 days, except where retention is required by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information through your profile settings
• Deletion: Request deletion of your account and associated data
• Restriction: Request limitation of how we process your data
• Data portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain types of processing
• Withdraw consent: Withdraw previously given consent at any time

To exercise these rights, please contact us at support@quizforbrains.com. We will respond to your request within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies to maintain your session and improve your experience:

• Essential cookies: Required for authentication and session management (quizCustomerSession, sessionId)
• Functional cookies: Remember your preferences and settings
• Performance cookies: Help us understand how you use our platform

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of our platform.

9. International Data Transfers

Your information may be transferred to and processed on servers located outside of your jurisdiction. Our hosting infrastructure (Vercel) operates globally, and our database services (Upstash Redis) may store data in various regions.

When your data is transferred internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

10. Children's Privacy

Our service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

11. Changes to This Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top of this policy
• Sending an email notification for significant changes (if you have provided an email address)

Your continued use of our services after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days and work with you to resolve any concerns about how we process your personal information.