Loading…
This Privacy Policy explains what personal information repurposed.chatgenius24x7.com (the "Site," "we," "us") collects, why we collect it, who we share it with, and the choices you have. It applies to anyone who creates an account, purchases a course, purchases AI Tutor credits, or uses the AI Tutor chat feature. It should be read together with our Terms of Service.
We are an early-stage, single-operator platform. We are being deliberately specific and honest below about what we actually collect and do — we are not claiming compliance with any particular regional privacy law (such as GDPR or CCPA), since that requires formal legal review we have not yet done. If you have specific rights under the law that applies to you, contact us and we will do our best to accommodate your request even where we haven't built a fully self-service process for it yet.
When you create an account (via our authentication provider, Supabase Auth), we collect your name, email address, and a securely hashed password. We do not see or store your plaintext password.
Every time you sign in, we record your IP address, browser/device user-agent string, and the timestamp of that login. We do this specifically to enforce our single-active-session policy (detecting and shutting down simultaneous logins to deter account sharing) and to keep a security audit trail we can review if account misuse is suspected.
Payments are handled entirely by PayPal. We never receive or store your full card number, bank details, or PayPal password. We do receive and store payment metadata from PayPal — such as the transaction ID, amount, currency, date, and what you purchased — for order records, support, accounting, and chargeback/dispute handling.
When you use the AI Tutor, we process the questions you type, along with the relevant excerpts of course transcripts your account is entitled to (retrieved to help answer your question), and send both to our chat backend and, in turn, to the underlying third-party AI language model providers that actually generate the answer (see Section 4). Uploading your own documents to a study set is not available on the Site today; if and when it is, content from those documents would be processed the same way, and only when you ask a question that draws on them.
Because this Site's content is clinician-facing, one request rather than a disclosure: please do not type patient-identifying information into the AI Tutor. Your questions leave our infrastructure and are processed by the third-party AI providers described in Section 4, and this Site is not built or certified to hold identifiable patient records.
We collect basic usage information (which pages/courses you access, credit consumption per AI Tutor message) needed to run and bill for the service, and some data stored only in your browser's local storage (such as your light/dark theme preference), which never leaves your device.
We do not sell your personal information to third parties, and we do not use your AI Tutor conversations for advertising.
We share information with the following third parties, only as needed to run the Site:
We do not otherwise share your personal information with third parties, except where required by law, to enforce our Terms of Service, or with your consent.
We are early-stage and, honestly, have not yet finalized a formal data-retention schedule with specific time periods for each category of data. As a general practice today: account and transaction records are kept for as long as your account is active plus a reasonable period for accounting/legal purposes; login security records (IP/user-agent) are kept to support the security purposes described above; AI Tutor chat history is kept so you can return to prior conversations in a study set. We intend to formalize specific retention periods as the business matures, and will update this policy when we do rather than leave this section vague indefinitely.
We use industry-standard practices where we can — passwords are hashed by our authentication provider (never stored in plaintext), video is delivered via time-limited signed URLs rather than open links, and we log login activity to detect anomalies. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to or stored on the Site.
You can request deletion of your account and associated personal data, or a copy of the data we hold about you, at any time by emailing [email protected] from the email address on your account. We will verify the request and act on it within a reasonable time. Note that we may need to retain certain records (such as payment transaction records) even after account deletion where we have a legitimate accounting, fraud-prevention, or legal reason to do so.
We use a small, secure, httpOnly session cookie to identify your active login session (used to enforce the single-active-session policy described above) and standard cookies set by our authentication provider. We also use your browser's local storage for non-sensitive UI preferences such as your light/dark theme choice. We do not currently use third-party advertising or tracking cookies.
The Site is intended for adults — specifically physicians and other clinicians seeking professional education — and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
The Site may be accessed from many countries, and our infrastructure and the third-party providers listed in Section 4 may process data in locations other than your own. We are not claiming compliance with any specific country or region's data-protection framework in this policy; if you have specific legal rights that apply to you based on where you live, contact us at the address below and we will do our best to honor them.
We may update this Privacy Policy as the Site evolves — for example, when Phase 2 AI Tutor billing and usage-transparency features (per our own architecture roadmap) go live, or once we finalize a formal data-retention schedule. We will update the "Last updated" date above whenever we do.
Questions about this Privacy Policy, or a request to access, export, or delete your data, can be sent to [email protected].