Privacy Policy
Effective date: 21 May 2026 · Contact: Niraja194@gmail.com
1. Who we are
ExamPack (“we”, “us”, “our”) is an AI-powered study tool that turns uploaded documents into interactive exam prep dashboards. We are operated as an independent service and accept payments in Indian rupees (INR) via Razorpay.
2. Information we collect
- Account data — name, email address, and (if using Google Sign-In) your Google profile information.
- Uploaded documents — files you upload (PDF, DOCX, PPTX) are stored in Supabase Storage to enable AI processing. You may delete your packs at any time.
- AI-generated content — the topics, MCQs, definitions, and revision blocks produced from your upload are stored alongside your pack.
- Payment metadata — plan type and Razorpay order/payment IDs. We never see or store your card number, UPI handle, or banking credentials; those are handled entirely by Razorpay.
- Usage data — standard server logs (IP address, browser type, pages visited) retained for up to 30 days for security and debugging.
3. How we use your information
- To provide, operate, and improve the ExamPack service.
- To authenticate your account and enforce plan limits.
- To process payments and verify plan upgrades.
- To respond to support requests sent to our email.
We do not use your content to train AI models, and we do not sell your personal data to third parties.
4. Third-party services
- Supabase — database and file storage (servers in the EU/US). Your data is governed by the Supabase Privacy Policy.
- OpenRouter — routes AI requests to Anthropic Claude models for content generation. Document text is sent to OpenRouter for processing.
- Razorpay — payment processing. Card and UPI details are collected by Razorpay directly and are subject to the Razorpay Privacy Policy.
- Google — optional Sign-In with Google, governed by Google's Privacy Policy.
5. Public sharing
If you enable the public share link for a pack (available on 1-Year Pro), anyone with the link can view the pack's content without an account. You can disable sharing at any time, which immediately removes public access.
6. Data retention and deletion
Your account data and packs are retained until you delete them or close your account. To delete your account and all associated data, email
Niraja194@gmail.com.
7. Security
Data is stored in Supabase with row-level security policies. File uploads go directly from your browser to Supabase Storage via pre-signed URLs. We use HTTPS for all connections and HMAC-SHA256 to verify payment signatures.
8. Changes to this policy
We may update this policy as the service evolves. Material changes will be noted on this page with an updated effective date. Continued use of the service after changes constitutes acceptance.