Privacy Policy

Last updated: October 02, 2026

1. Data Controller

The data controller for this Service is:

  • Company Name: QuizForge
  • Registered Address: [Company Legal Address]
  • Privacy Contact Email: privacy@quizforge.ai
  • Data Protection Officer: [Contact information, or "Not applicable"]

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Email, name, password (encrypted storage)
  • Payment Information: Transaction amount, payment status. We do not store complete card numbers — card data is processed by our payment processor (see Section 5).
  • Communication Records: Emails, support tickets, and feedback you send to customer support
  • Other Business-Related Fields: [As applicable]

2.2 Information We Collect Automatically

  • Device and Network: IP address, device model, operating system, browser type, timezone
  • Usage Behavior: Page visits, feature usage, operation logs, session duration
  • Log Data: Request time, error logs, performance data
  • Other Business Data: [As applicable, e.g., search records]

3. How We Use Your Information

Purpose Legal Basis
Provide and maintain ServiceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interest
Service notifications (billing, security, policy updates)Legitimate interest
Security and fraud preventionLegitimate interest
Product optimization and analyticsLegitimate interest
Legal complianceLegal obligation
Marketing — [describe content type] (optional)User consent

We may aggregate or de-identify data for statistical analysis. Such data cannot be identified to specific individuals.

4. Cookies and Tracking Technologies

Type Purpose Can be Disabled
Strictly NecessaryMaintain login, core functionalityNo
FunctionalLanguage preferences, personalized settingsYes
AnalyticsAnonymous usage statistics, product optimizationYes
Marketing (optional)Targeted advertising and performance measurementYes

Analytics tools used: [Fill in tool name and link to its privacy policy, e.g., Google Analytics]. You can adjust preferences through browser settings or our Cookie Management Center.

5. Sharing and Disclosure of Personal Information

We do not sell your personal information, including as "sale" is defined under applicable laws such as CCPA. We only share your information in the following circumstances:

  • Service Providers: Cloud computing, payment, customer support, analytics, etc. — bound by confidentiality agreements. Payment card data is exclusively processed by our PCI-DSS compliant payment processor Waffo Pancake and is not stored on our servers.
  • Business Partners: [If applicable, describe cooperation type and data scope; otherwise delete]
  • Legal and Regulatory Requirements: As required by law, court order, or legitimate requests from authorities
  • Business Transactions: In cases of merger or acquisition, with advance notice and ensuring protection obligations continue
  • With Your Consent: For other purposes only with your explicit prior consent

6. Data Security Measures

  • Transmission Encryption: TLS / HTTPS
  • Storage Security: Sensitive data such as passwords encrypted or hashed
  • Access Control: Principle of least privilege; employees sign confidentiality agreements
  • Regular Security Audits and Vulnerability Scans
  • [Other security measures, such as ISO 27001, SOC 2, etc.]

In the event of a security incident affecting your rights, we will notify you and relevant regulatory authorities within [timeframe, e.g., "within 72 hours of discovery"] as required by law. Please keep your account credentials secure and do not share them with others.

7. Personal Information Retention Period

Data Type Retention Period Post-Expiration Handling
Account InformationDuring active period; deleted within 90 days of account deletionDelete or anonymize
Transaction RecordsAs required by law, typically 7 yearsDelete or archive
Customer Support Records[X] yearsSecure deletion
Security Audit Logs[X] monthsSecure deletion
[Other data types][Period][Method]

8. Your Data Rights

To exercise the following rights, please contact us. We will process your request within 30 calendar days.

Right Description
Right to KnowUnderstand what data we collect and use
Right to AccessObtain a copy of your personal data
Right to RectificationCorrect inaccurate or incomplete personal data
Right to ErasureRequest deletion of personal data under specific conditions
Right to RestrictionRequest suspension of data processing under specific circumstances
Right to PortabilityExport your data in a machine-readable format
Right to ObjectObject to processing based on legitimate interests or marketing
Right to Withdraw ConsentWithdraw consent where processing is based on consent

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications and Opt-Out

With your consent, we may send marketing information related to [describe marketing content type] via email, SMS, or in-app notifications. You can unsubscribe at any time: click the "Unsubscribe" link in emails, turn off marketing notifications in account settings, or contact us. Opting out does not affect service necessary notifications (such as billing, security reminders).

10. International Data Transfers

Our servers and partners may be located in [fill in main regions, e.g., Singapore, United States]. For cross-border transfers, we ensure data security through:

  • Signing data processing agreements incorporating EU Standard Contractual Clauses (SCCs)
  • Transferring only to recipients with equivalent protection levels
  • [Other safeguards, such as adequacy decisions, BCRs, etc.]

11. Children's Privacy

This Service is for users who are at least [13 / 16 / 18] years old. We do not knowingly collect information from minors below this age. If you believe your child has provided us with information, please contact us immediately, and we will delete it as soon as possible.

12. Third-Party Links and Services

This Service may contain links to third parties or integrate with third-party services. This Policy applies only to information we collect directly. We are not responsible for third parties' data practices. We recommend reviewing their policies before using them.

13. Changes to This Policy

For material changes, we will notify you at least 15 days in advance via platform announcements or your registered email, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance of the updated Policy.

14. Contact Us

  • Privacy Contact Email: privacy@quizforge.ai
  • Customer Support Email: support@quizforge.com
  • Company Name: QuizForge
  • Mailing Address: [Mailing Address]
  • Service Hours: [e.g., Monday to Friday 09:00–18:00 UTC+8]

This Privacy Policy is for reference only and does not constitute legal advice. We recommend consulting a qualified legal professional with appropriate credentials in your target market before official publication.