Privacy Policy

• Account data (email, name) provided via Auth0 when you sign up or log in.
• Subscription and billing data processed by our payment processor (Stripe). We do not store full card numbers.
• Usage data — search queries, pages visited, feature interactions, and performance metrics — to operate and improve the service.
• CardCut inputs — source URLs and article text you submit are processed to generate cards. We do not store your source text beyond the duration of your session.
• Device and technical data — browser type, IP address, and operating system — collected automatically for security and diagnostics.
• Cookies and similar technologies — used for authentication sessions and basic analytics. We do not use advertising trackers.

• To authenticate you and secure your account.
• To process payments and manage your subscription.
• To deliver and improve search results and CardCut output.
• To respond to support requests and account inquiries.
• To monitor for abuse, fraud, and policy violations.
• To send transactional emails (receipts, password resets). We do not send marketing emails without your consent.

We share data only with vendors necessary to operate the service — including Auth0 (authentication), Stripe (billing), and hosting/infrastructure providers. We do not sell, rent, or trade your personal information to any third party for marketing purposes. All vendors are contractually required to handle your data in accordance with applicable privacy law.

When you use CardCut, the source URL and article text you provide are sent to an AI model to generate a debate card. This content is processed in real time and is not retained after your session ends. AI-generated output may not be fully accurate — you are responsible for verifying citations and evidence before use in competition. Do not submit sensitive, confidential, or personally identifiable information through CardCut.

We use essential cookies to maintain your login session and keep you authenticated across pages. We use minimal analytics cookies to understand aggregate usage patterns (e.g., which pages are visited). You can disable cookies in your browser settings, but doing so may prevent you from logging in or using the service.

PrepSync is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at sebastian@prepsync.net and we will delete it promptly. Users between 13 and 18 should use the service with parental awareness.

We retain your account data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., billing records). Usage logs may be retained in anonymized form for up to 12 months.

• Access — you can request a copy of the personal data we hold about you.
• Correction — you can request that inaccurate data be corrected.
• Deletion — you can request deletion of your account and associated data.
• Portability — you can request your data in a machine-readable format.
• Opt-out — you can opt out of non-essential communications at any time.

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and, for material changes, notify you by email or via an in-app notice. Continued use of the service after changes take effect constitutes your acceptance of the updated policy.

Email sebastian@prepsync.net with any privacy questions.