Privacy Policy

LookMyClass (“we”, “our”, or “us”) is an AI-powered quiz and test generation platform operated by Akdron Consultancy Pvt Ltd, a company registered in India. This Privacy Policy explains what personal information we collect when you use LookMyClass, how we use it, and what choices you have.

By creating an account or using any part of the service, you agree to the practices described in this policy. If you do not agree, please do not use the service.

Account Information

• Full name (optional)
• Email address
• Password (stored as a bcrypt hash — we never store your plain-text password)
• Google account ID and profile name if you sign in with Google
• Email verification status and timestamp
• Account creation date

Content You Provide

To generate quizzes, you submit content to our service. This may include:

• Text topics and sub-topic descriptions
• PDF files (uploaded for document-based quiz generation)
• Images (uploaded for image-based quiz generation)
• Quiz configuration settings (question count, difficulty, AI model choice)

Uploaded files are processed in memory and transmitted to AI providers. PDF and image files are not permanently stored on our servers beyond the time needed to complete your request.

Generated Quizzes

Every quiz you generate is saved to your account in our database, including the questions, answer options, correct answers, difficulty settings, and the topic or source description. Quizzes you choose to share publicly are accessible to anyone with the share link.

Usage and Technical Data

• Login timestamps and IP addresses (used for rate-limiting and security)
• Credit balance and transaction history
• Quiz attempt data (scores, time taken, answers selected) for shared public quizzes
• Browser session cookies (required for authentication — see Cookies section)

Payment Information

Credit purchases are processed by Razorpay. We never receive or store your card number, CVV, or bank account details. We store only the Razorpay order ID, payment ID, amount paid, and credit units added to your account for our records.

• Service delivery — to authenticate you, process quiz generation requests, manage your credit balance, and save your quiz history.
• AI processing — your content is transmitted to OpenAI or Anthropic (depending on the model you select) to generate questions. See the AI Processing section below.
• Transactional emails — to send you account verification, password reset, and payment confirmation emails via Brevo.
• Security and abuse prevention — to enforce rate limits on login attempts and quiz generation, detect suspicious activity, and protect other users.
• Service improvement — aggregate, anonymised usage patterns (e.g., which models are most popular) may be analysed to improve the platform. Individual quiz content is not used for this purpose.
• Legal compliance — to meet obligations under applicable law, including responding to valid legal process.

What Is Sent to AI Providers

When you request a quiz, we construct a prompt that includes:

• The topic or sub-topics you entered (text mode)
• The extracted text from your uploaded PDF (PDF mode)
• Your uploaded images as base64-encoded data (image mode)
• Your configuration preferences (question count, difficulty, language)

This prompt is sent over an encrypted HTTPS connection to OpenAI or Anthropic servers. Your account name and email are never included in the prompt.

AI Provider Data Retention

OpenAI and Anthropic have their own data retention and privacy policies. By default, API requests may be retained by these providers for a period of time for safety monitoring and abuse prevention purposes. Neither provider uses API data to train their production models by default without a separate data-sharing agreement.

Generated Quiz Storage

AI-generated questions and answer choices are stored in our database under your account. You can view, share, or delete your quizzes at any time from the My Quizzes page. Quizzes you share publicly are accessible without authentication via a unique link.

No Automated Decision-Making

AI is used solely to generate quiz content from your input. We do not use AI to make any automated decisions about you, your account, or your access to the service.

We use the following third-party services to operate LookMyClass. Each has its own privacy policy and data practices.

We do not sell, rent, or trade your personal data with any third party for marketing purposes. Data is shared with the services above only to the extent required to operate the platform.

• Account data — retained for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, subject to legal retention requirements.
• Generated quizzes — stored indefinitely until you delete them or your account is deleted.
• Uploaded files (PDFs and images) — processed in memory only; not stored on our servers after your request is fulfilled.
• Login attempt logs — retained for 90 days for security purposes, then automatically deleted.
• Payment records — retained for 7 years to comply with Indian financial regulations (GST Act, Income Tax Act).
• Password reset and email verification tokens — automatically expire and are purged by MongoDB TTL indexes within 24–48 hours of expiry.

We implement appropriate technical and organisational measures to protect your personal information:

• Passwords are hashed using bcrypt with a cost factor of 12 — we cannot recover your password
• Session tokens are signed with HS256 (HMAC-SHA256) and stored as HttpOnly cookies
• All data transmission uses TLS/HTTPS encryption
• Database access is restricted to authenticated application servers
• Rate limiting on login endpoints to prevent brute-force attacks
• Credit purchase flows use Razorpay's PCI-DSS compliant payment infrastructure

No system is completely secure. In the event of a data breach that is likely to affect your rights and freedoms, we will notify affected users and relevant authorities as required by law.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your account and associated personal data.
• Portability — request your quiz data in a machine-readable format.
• Objection — object to certain types of processing.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

Users in the European Economic Area (EEA) have rights under the General Data Protection Regulation (GDPR). Users in California have rights under the California Consumer Privacy Act (CCPA).

To exercise any of these rights, contact us at privacy@lookmyclass.com. We will respond within 30 days.

LookMyClass uses a single first-party session cookie named lookmyclass_session to keep you logged in. This cookie is:

• HttpOnly — not accessible to JavaScript
• Secure in production — only sent over HTTPS
• SameSite=Lax — protected against cross-site request forgery
• Valid for 7 days, after which you will need to log in again

We do not use advertising cookies, tracking pixels, or any third-party analytics cookies. We do not serve ads. The only cookies set by LookMyClass are the session cookie described above and a temporary CSRF state cookie during Google OAuth sign-in (deleted immediately after).

LookMyClass is not directed at children under the age of 13 (or under 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us immediately and we will delete the information.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify you by email (sent to the address associated with your account) at least 7 days before the change takes effect.

Continued use of the service after the effective date of any change constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please reach out to us: