Privacy Policy

1. Introduction

Illinotes (“we,” “our,” or “us”) is a student note-sharing platform designed for university students. This Privacy Policy explains how we collect, use, and protect your information when you use our website at illinotes.com. By using Illinotes, you agree to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

• Account information: Your email address, collected when you sign up via Supabase Auth.
• User content: Notes, comments, file attachments, and any other content you post on the platform.
• Usage data: Likes, mentions, and interactions with other users' content.
• Session data: An authentication cookie (access_token) used to keep you logged in.

We do not collect payment information, phone numbers, or any government-issued identification.

3. How We Use Your Information

We use your information to:

• Provide and operate the Illinotes platform.
• Send transactional emails (e.g., password reset links) via our email provider, Resend.
• Notify you of @mentions in comments.
• Enforce our Terms of Service and community guidelines.
• Improve platform performance and fix bugs.

We do not sell, rent, or share your personal information with advertisers or third-party marketers.

4. Data Storage & Security

Your data is stored securely in a PostgreSQL database hosted by Supabase, with Row Level Security (RLS) policies enforced on all tables. File attachments are stored in Supabase Storage. We apply industry-standard security practices to protect your data from unauthorized access, but no method of electronic storage is 100% secure.

We never sell your data to advertisers or data brokers.

5. AI Features

Illinotes offers AI-powered features including the AI Tutor chat widget and the Note Summarizer. When you use these features, the content of your notes (including extracted PDF text and images) may be sent to OpenAI's API to generate responses. This data is processed in accordance with OpenAI's Privacy Policy. We recommend avoiding the submission of sensitive personal information through AI features.

6. Your Rights

You have the following rights regarding your data:

• Access and edit: You can edit or delete any notes and comments you have posted at any time.
• Account deletion: To delete your account and associated data, email us at illinotes67@gmail.com and we will process your request promptly.

7. Cookies

We use a single session cookie (access_token) to authenticate you and keep you logged in. This cookie is HTTP-only and session-scoped. We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

8. Contact

If you have questions or concerns about this Privacy Policy, please contact us at illinotes67@gmail.com.