Privacy Policy

1. Introduction

Worksheets Builder AI ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights regarding it. By using the Service, you consent to the practices described in this policy.

We are not responsible for the privacy practices of third-party services we integrate with, including Gumroad and Google Gemini AI. Please review their respective privacy policies separately.

2. Data We Collect

We collect only what is necessary to provide the Service:

• Account information: Full name, username, email address, hashed password
• Usage data: Prompts you submit, generated images, generation history, credit usage
• Technical data: IP address (logged at registration and login), browser session data
• Subscription data: Subscription tier, status, Gumroad sale ID (no payment card data — this is handled entirely by Gumroad)
• Support data: Messages you send through our support system

3. How We Use Your Data

• To provide, operate, and maintain the Service
• To process your subscription and manage your account
• To send transactional emails (subscription confirmation, credit resets, data retention warnings)
• To respond to support requests
• To detect and prevent abuse, fraud, or Terms of Service violations
• To improve the Service based on usage patterns (aggregated, non-identifiable data only)

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

4. Data Sharing & Third Parties

We share your data only in the following limited circumstances:

• Gumroad: Payment processing and subscription management. Your billing information is handled exclusively by Gumroad and never stored on our servers. See Gumroad's Privacy Policy.
• Google Gemini AI: Your prompts are sent to Google's Gemini API to generate worksheet images. Google may process and store prompt data per their API terms. See Google's Privacy Policy.
• Hosting provider: Our server infrastructure provider has access to server-level data as part of normal hosting operations.
• Legal requirements: We may disclose your data if required by law, court order, or governmental authority.

We are not responsible for the data practices of any third-party service listed above.

5. Data Retention

• Active accounts: data retained indefinitely while subscription is active
• After subscription expiry: generated worksheets and history deleted after 60 days
• Account email and basic records: retained after deletion for legal and accounting purposes
• Support messages: retained for up to 2 years
• IP address logs: retained for up to 90 days for security purposes

6. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• Passwords hashed using Argon2id (industry-standard, not reversible)
• CSRF protection on all forms
• HTTPS/TLS encryption for all data in transit
• Prepared SQL statements to prevent injection attacks
• Sensitive files blocked from public web access

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Objection: Object to certain types of processing

To exercise any of these rights, contact us at contact@worksheetsbuilderai.my.id. We will respond within 30 days.

Note: we may be unable to fulfill deletion requests where data retention is required by law or for legitimate business purposes such as fraud prevention.

8. Cookies & Sessions

We use only essential session cookies required for authentication and security (CSRF protection). We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required as we only use strictly necessary cookies.

9. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If we become aware that we have inadvertently collected data from a child under 13, we will delete it immediately. If you believe a child has provided us with personal data, contact us at contact@worksheetsbuilderai.my.id.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the Service after changes constitutes acceptance of the updated policy. We recommend checking this page periodically.

11. Contact

For privacy-related inquiries: contact@worksheetsbuilderai.my.id

Response time: within 5–7 business days.