StudyCloud

Legal

Privacy Policy

This policy explains what personal data StudyCloud collects, why we collect it, how long we keep it, and the rights you have over it.

Last updated: 4 August 2026

1. Who We Are

StudyCloud operates the studycloud.io platform for cloud storage, sharing, streaming, and monetization of digital educational content. For personal data relating to your account, billing, and platform usage, StudyCloud acts as the data controller. For files you upload and share with others, StudyCloud acts as a processor on your behalf, and you remain responsible for the lawful basis of that content.

2. Data We Collect

2.1 Data you provide

  • Account data: email address, name, password hash, profile settings, notification preferences.
  • Security data: multi-factor authentication factors, trusted devices, API keys.
  • Billing data: plan selection, billing interval, invoices, wallet balance, coupon and referral codes. Card details are captured and stored by our payment processors, not by StudyCloud.
  • Content: files, folders, notes, highlights, comments, tags, and course structures you upload or create.
  • Support data: messages you send via the contact form or support tickets.

2.2 Data collected automatically

  • Usage data: uploads, downloads, storage and bandwidth consumption, playback and reading progress, share-link visits and view counts.
  • Technical data: IP address, browser and device type, timestamps, referrer, and acquisition parameters.
  • Diagnostics: error reports and job logs used to keep processing pipelines reliable.

2.3 Data from third parties

If you connect a cloud-drive account to import files, we receive the authorization tokens and file metadata required to perform the import. Payment processors return transaction status and identifiers.

3. Why We Use Your Data

  • To provide the Service — authentication, storage, streaming, sharing, downloads, transcription, translation, and dubbing (performance of a contract).
  • To bill and collect payments — subscriptions, one-off purchases, wallet payouts, invoicing (contract and legal obligation).
  • To enforce quotas and prevent abuse — storage and bandwidth accounting, rate limiting, fraud and piracy detection (legitimate interests).
  • To secure the platform — access logging, incident investigation, backup integrity (legitimate interests, legal obligation).
  • To communicate — transactional email such as welcome, security, billing, share and job notifications; product updates where permitted (contract, legitimate interests, or consent).
  • To improve the Service — aggregated analytics on performance and reliability (legitimate interests).

We do not sell your personal data, and we do not use your uploaded files to train our own AI models.

4. AI Processing

When you request transcription, caption translation, or dubbing, the relevant audio, text, or caption segments are transmitted to AI processing providers acting under contract as our subprocessors, solely to return the requested output. Outputs are stored with your file so they can be replayed and downloaded. AI features are optional and only run when you or an authorized administrator start a job.

5. Cookies and Similar Technologies

We use strictly necessary cookies and browser storage to keep you signed in, remember trusted devices, preserve player and reader preferences, and protect against abuse. We also use limited first-party measurement to understand feature usage and share-link traffic. You can clear or block storage in your browser, but essential functions such as sign-in will not work without it.

6. Sharing and Subprocessors

We share personal data only with service providers that help us run StudyCloud, including:

  • Cloud database, authentication, and application hosting providers;
  • Object storage and content delivery providers for file storage and streaming;
  • Payment processors for subscriptions, purchases, and payouts;
  • Transactional email providers;
  • AI providers for transcription, translation, and speech synthesis.

Providers act on our documented instructions under written data-processing terms. We may also disclose data where required by law, to enforce our Terms, to respond to valid rights-holder complaints, or in connection with a merger or acquisition (with notice to affected users).

7. International Transfers

Our infrastructure and providers may process data outside your country, including in the United States and the European Union. Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

8. Data Retention

  • Account and content data: retained while your account is active.
  • Deleted files: moved to trash and recoverable for a limited period, then permanently removed from primary storage; residual copies may persist in encrypted backups for a short rolling window.
  • Billing records: retained as long as required by tax and accounting law.
  • Security and access logs: retained for a limited period for incident investigation.

When you close your account, we delete or anonymize personal data except where retention is legally required.

9. Security

We apply layered technical and organizational safeguards, including encryption in transit, encryption at rest with our storage providers, row-level access control in our database, scoped and expiring signed URLs for file access, hashed credentials, optional multi-factor authentication, scoped API keys, and least-privilege administrative access. No system is perfectly secure; you are responsible for using strong, unique credentials and for controlling who receives your share links. We will notify affected users and competent authorities of a qualifying personal data breach as required by law.

10. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to receive a portable copy, and to withdraw consent at any time. You can update most account data directly in your settings, export or delete your data from the platform, and manage email preferences from your notification settings. To exercise any other right, email contact@studycloud.io. We respond within the period required by applicable law and may ask you to verify your identity. You also have the right to complain to your local data protection authority.

11. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy as the Service evolves. Material changes will be communicated by email or in-app notice before they take effect, and the "last updated" date above will change.

Contact Us

For any questions, notices, or requests relating to this policy, contact StudyCloud at: