Legal, privacy & service documentation
This center explains the rules for using MCQPREP, what information the service handles, how uploaded study materials are processed, and the choices available to users.
Plain-language notice. These documents are intended to be clear and complete. They do not limit rights that cannot lawfully be limited. The operator should obtain local legal review before commercial launch or expansion into a new jurisdiction.
Terms of Service
Agreement and eligibility
By creating an account, uploading a file, or otherwise using MCQPREP, you agree to these Terms and the incorporated policies below. If you use the service for a school, employer, or other organization, you represent that you have authority to act for it. You must be legally capable of entering a binding agreement. Users below the age at which they can independently consent to online services in their country must use MCQPREP only with authorization from a parent, guardian, or educational institution.
The service
MCQPREP converts user-provided PDFs into AI-assisted exams, flashcards, summaries, and rewritten questions. Features, token allowances, limits, and supported formats may change to maintain security, quality, or availability. The service may be suspended for maintenance, legal compliance, security risk, or misuse.
Your account
You are responsible for accurate account information, safeguarding your credentials, and activity under your account. Notify the operator promptly if you suspect unauthorized access. Accounts may not be sold, transferred, or used to evade access controls or usage limits.
Your content and permission to process it
You retain ownership of material you upload and of rights you may have in your prompts. You grant MCQPREP a limited, non-exclusive license to host, copy, sanitize, transmit, and process that material solely to operate, secure, improve, and support the requested service. You confirm that you have permission to upload the material and to use it for the requested purpose. This license ends when the content is deleted, subject to reasonable backup, security, and legal-preservation periods.
AI output and educational disclaimer
Generated content may be incomplete, inaccurate, misleading, or unsuitable for a particular curriculum. It is study assistance, not an official answer key, accreditation service, professional advice, or substitute for instruction. Verify important facts against the original material and instructor guidance. You remain responsible for how you use or share outputs.
Suspension; termination
The operator may restrict or terminate access when reasonably necessary to address a violation, protect users or systems, comply with law, or prevent harm. Where appropriate, notice and an opportunity to correct the issue will be provided. You may stop using the service at any time and may request account deletion.
Disclaimers and liability
To the fullest extent permitted by applicable law, MCQPREP is provided “as is” and “as available,” without implied warranties of merchantability, fitness for a particular purpose, non-infringement, uninterrupted availability, or error-free output. The operator is not liable for indirect, incidental, special, consequential, or punitive losses, or loss of data, grades, opportunity, or profits, arising from use of the service. Nothing excludes liability, warranties, remedies, or consumer rights that applicable law does not permit the parties to exclude.
Privacy Notice
MCQPREP processes information to provide user-requested study tools, secure the platform, administer accounts, and comply with law. It does not claim ownership of uploaded educational content and does not sell personal information.
| Information | Purpose | Typical source |
|---|---|---|
| Name, email, account ID, authentication provider | Create and secure accounts; identify users; provide support | You, Google sign-in, or Supabase Auth |
| Uploaded PDF, filename, file size, page count | Validate, store, display, and generate requested study material | You |
| Tool settings, generated output, model usage and token metrics | Return results, apply limits, monitor reliability and cost | Your actions and service operation |
| IP-derived security signals, timestamps, request counters, technical logs | Authentication rate limiting, abuse prevention, troubleshooting, and security | Your browser, device, and hosting systems |
| Theme, accent, and temporary workflow state | Remember preferences and complete the current workflow | Your browser storage |
Purposes and legal bases
Depending on where you live, processing is based on performance of the user agreement, legitimate interests in operating and securing the service, consent where required, and compliance with legal obligations. Where consent is the basis, it may be withdrawn prospectively.
Service providers and disclosures
Information is shared only as needed with infrastructure and processing providers, including Supabase for authentication, database, and private file storage; OpenAI for requested AI generation; the hosting provider for application delivery and logs; and Google when you choose Google authentication. Information may also be disclosed to comply with valid legal process, protect rights or safety, investigate misuse, or support a business reorganization subject to appropriate safeguards.
International transfers
Providers may process information outside your state, province, or country. Where required, the operator will use recognized safeguards such as adequacy decisions, contractual protections, or another lawful transfer mechanism.
Data storage & retention
Uploaded PDFs
Validated PDFs are sanitized and stored in a private Supabase Storage bucket. Account uploads remain in the library until you delete them. Items moved to Trash are scheduled for permanent deletion after approximately 48 hours.
Guest uploads
A guest upload uses a time-limited, hashed claim credential. Unclaimed guest records and files expire after approximately 24 hours and are then eligible for deletion.
Account records
Profile, role, token balance, request, and security records are retained while the account is active and afterward only as reasonably necessary for security, dispute resolution, legal compliance, or backup rotation.
Generated results
Current generated results and workflow details may be held in your browser’s session storage. They can disappear when the browser session ends or storage is cleared. Do not treat MCQPREP as your only copy of important work.
Deletion from active systems is designed to occur on the schedules stated above, but removal from encrypted backups and provider logs may take longer. Information subject to a valid legal hold, fraud investigation, security incident, or statutory duty may be retained until that need ends.
OpenAI & automated processing
OpenAI is the external AI model provider used by MCQPREP. When you request generation, the relevant PDF and instructions are transmitted through OpenAI’s API to the model configured for that feature. The configured model may change as models are upgraded or selected for quality, safety, cost, or availability. MCQPREP does not presently describe any other third-party generative-AI provider as part of the public workflow.
- AI is used to generate study material, not to make legal, employment, credit, admissions, or similarly significant decisions about users.
- Output is probabilistic. Source grounding and structured-output controls reduce, but do not eliminate, errors.
- Do not upload highly sensitive personal, medical, financial, biometric, or confidential institutional information unless you are authorized and the processing is appropriate.
- Provider handling is also governed by the applicable provider terms and data controls. MCQPREP should not promise provider retention or training practices beyond its operative provider agreement.
Acceptable Use Policy
You may not use MCQPREP to violate law or another person’s rights; upload malware or material designed to compromise systems; bypass limits or authentication; probe or disrupt the service; scrape or resell access without permission; impersonate others; facilitate cheating contrary to applicable academic rules; generate harassment, exploitation, discrimination, or unlawful content; or process personal information without a lawful basis. Security research requires prior written authorization. The operator may remove content or restrict access proportionately when necessary to enforce these rules.
Copyright & academic integrity
Upload only material you created, is in the public domain, is openly licensed, or you are otherwise permitted to process. Educational access does not automatically grant a right to reproduce or distribute a work. Generated material may reflect protected elements of your source and should not be republished unless you have the necessary rights.
MCQPREP supports studying; it does not authorize misrepresentation or prohibited assistance. Follow your institution’s examination, collaboration, citation, and AI-use rules. If a rights holder believes content has been used unlawfully, the operator should provide a documented notice-and-review process and collect identification of the work, the challenged material, contact details, a good-faith statement, and authority to act.
Security statement
Current controls include private object storage, signed upload flows, server-only administrative credentials, ownership checks, authentication rate limits, file-size and page limits, PDF structure validation, rejection of active PDF content, and removal of annotations and automatic actions during sanitization. No internet service is perfectly secure. Users should use unique credentials, protect their sign-in provider, and avoid uploading information unnecessary for study generation.
Your privacy rights
Depending on applicable law, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent; appeal a denied request; or complain to a data-protection authority. Some U.S. state laws also provide rights to know, correct, delete, and opt out of sale, targeted advertising, or certain profiling. MCQPREP states that it does not sell personal information or use it for cross-context behavioral advertising. Identity verification may be required, and authorized agents may need to show authority. Lawful exceptions may apply.
Cookies & browser storage
MCQPREP uses authentication cookies necessary to keep users signed in and secure sessions. Browser local storage remembers theme and color preferences. Session storage may hold uploaded-document workflow data and generated results for the current session. These technologies support requested functionality rather than cross-site advertising. Blocking necessary storage may prevent authentication or generation workflows from working.
Governing legal framework
MCQPREP must comply with laws that apply to its operator, users, and processing activities. These may include consumer-protection, privacy, copyright, electronic-communications, accessibility, and child-protection laws. Depending on deployment and user location, relevant privacy regimes may include the EU or UK GDPR, U.S. state privacy laws, Canada’s PIPEDA, or comparable national legislation. Educational-record laws such as FERPA apply only when their statutory conditions and institutional relationships are met; MCQPREP should not be represented as institutionally compliant without the necessary agreements and controls.
Any governing-law, venue, arbitration, entity identity, registered address, and region-specific addendum should be approved and published by the actual operator before commercial release. Mandatory consumer rights in a user’s home jurisdiction remain unaffected.
Questions, complaints & requests
Privacy, accessibility, copyright, security, and account-deletion requests should be submitted through the support channel published by the MCQPREP operator. A request should identify the account email, the right or issue involved, and enough detail to locate the relevant records. Never send passwords, API keys, or full identity documents in an initial request.
Operator action required before launch: publish the legal entity name, physical or registered address, monitored privacy/support email, applicable governing law, and any required data-protection representative. Those facts cannot be responsibly inferred from application code.