1. Who is responsible for your data?
TEJAC Holding AS, registered in Norway, is the data controller for the personal data processed through SyllabusSlayer. If you have questions about this Privacy Notice or how we handle your data, email us at Hello@syllabusslayer.com.
2. What personal data we collect
We collect the following categories of personal data:
- Account data: name, email address, authentication credentials and profile information you provide when you sign up or log in (including via Google OAuth).
- Course content: syllabus PDFs, syllabus URLs, course names, weekly topics, assessment details, textbook files, textbook links and any notes or messages you enter.
- Generated content: AI-generated lectures, podcast transcripts, study plans, flashcards and tutor chat history tied to your account.
- Usage and device data: IP address, browser type, device identifiers, pages visited, feature usage and error reports.
- Support data: messages you send to our support team and any feedback you provide.
- Transaction data: records of your subscription plan, credit balance and purchase history. Payment card details are processed by Paddle and are not stored by us.
3. How we use your data
We use your personal data for the following purposes and legal bases:
- To provide the service — account creation, course import, lecture/podcast generation, study-plan creation and tutor chat. (Legal basis: contract performance.)
- To secure the service — fraud prevention, abuse detection, authentication and access control. (Legal basis: legitimate interests and legal obligation.)
- To improve the product — usage analytics, error reporting and feature development. (Legal basis: legitimate interests, with options to opt out where required.)
- To communicate with you — service announcements, billing notices and support responses. (Legal basis: contract performance and legitimate interests.)
- Marketing — only if you have given consent, for example by subscribing to a newsletter. You can withdraw consent at any time.
4. Who we share data with
We share personal data only with categories of recipients who need it to perform their role:
- Service providers and subprocessors: hosting, database, analytics, error reporting and customer-support tooling providers.
- Merchant of Record — Paddle: Paddle processes payment, subscription, invoicing, tax and refund data when you make a purchase. Paddle is an independent controller for its own processing; see Paddle’s Privacy Policy.
- AI providers: syllabus text, prompts and selected context are sent to Lovable AI Gateway / underlying model providers to generate content. These providers process data as processors under appropriate safeguards.
- Professional advisers: legal, accounting or insurance advisers where necessary.
- Authorities: law enforcement, tax authorities or regulators where required by law or a valid court order.
5. International transfers
We are based in Norway. Some of our service providers and Paddle may process personal data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the EU Commission Standard Contractual Clauses or adequacy decisions to protect your data.
6. How long we keep your data
We keep your personal data for as long as your account is active and for a reasonable period afterwards to resolve disputes, enforce our agreements, comply with legal obligations and support product improvement. When data is no longer needed, we delete or anonymise it.
7. Your rights under GDPR
Because we operate from Norway, you have the following rights under the EU/EEA General Data Protection Regulation:
- Right to access the personal data we hold about you.
- Right to rectify inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) in certain circumstances.
- Right to restrict processing in certain circumstances.
- Right to data portability.
- Right to object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent at any time, where processing is based on consent.
- Right to complain to a supervisory authority, such as the Norwegian Data Protection Authority (Datatilsynet).
We aim to respond to requests within one month. To exercise your rights, email Hello@syllabusslayer.com.
8. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, secure authentication and regular monitoring. No online service is completely secure, so we encourage you to use a strong password and keep your credentials safe.
9. Cookies and similar technologies
We use essential cookies to keep you signed in and maintain your session. We may also use analytics cookies to understand how the service is used. You can manage non-essential cookie preferences through your browser settings. Essential cookies cannot be disabled without affecting core functionality.
10. Children
SyllabusSlayer is intended for university students and is not directed at children under 16. We do not knowingly collect personal data from children under 16.
11. Changes to this notice
We may update this Privacy Notice from time to time. The latest version will always be available at this URL with the updated “Last updated” date.