Privacy Policy

This Privacy Policy describes how Holopedia (“we,” “us,” or “our”) collects, uses, and shares information about you when you use the service available at holopedia.app and any related applications (the “Service”). By using the Service you agree to the practices set out here.

1. Information we collect

We collect the following categories of information:

• Account data. When you sign in we receive your email address, display name, and profile image from your identity provider (Google). We do not receive your password.
• Content you create. Topics you submit, the lessons generated from those topics (3D models, narration audio, images, outlines), visibility settings, and the timestamps around them.
• Billing data. If you subscribe, our payments processor collects your name, billing address, and payment method. We receive a customer identifier, subscription status, and the last four digits of your card — never your full card number.
• Usage and device data. Server logs of your requests (IP address, user agent, timestamps, paths), and, only with your consent, privacy-friendly analytics that record aggregate page views and feature usage.
• Communications. Email you send us and any survey responses you submit.

2. How we use information

• To provide, maintain, and improve the Service.
• To process your lesson generation requests and deliver results.
• To process payments, manage your subscription, and prevent fraud.
• To send transactional email (lesson ready notifications, billing receipts) and, separately and only if you opt in, occasional product updates.
• To enforce our Terms of Service and protect the Service against abuse.
• To comply with legal obligations.

3. Legal bases (EEA / UK users)

Where the GDPR applies we rely on the following bases: performance of a contract (to provide the Service you requested), our legitimate interests (to keep the Service secure and improve it), your consent (for analytics and marketing email), and legal obligation (for tax and accounting records).

4. Subprocessors

We use the following third parties to operate the Service. Each is contractually bound to handle your information according to standards equivalent to those described here:

• Application hosting and edge delivery (Vercel Inc.)
• Database and object storage (Supabase Inc.)
• Background job orchestration (Inngest Inc.)
• Authentication (Google LLC, only for users who sign in with Google)
• Payments and subscription billing (Stripe Inc.)
• Transactional email (Resend Inc.)
• AI generation providers used to produce lesson content (OpenAI, Cloudflare Workers AI, Meshy / Tripo3D, ElevenLabs, grsai)
• Web push notification delivery (browser-vendor endpoints)
• Product analytics (Vercel Analytics — privacy-friendly, only after consent)

We may add or replace subprocessors over time. Material changes will be reflected in this list.

5. Sharing

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We disclose information only (a) to the subprocessors listed above, (b) to comply with a valid legal request, (c) to enforce our agreements or protect rights, property, or safety, and (d) with your consent.

6. International transfers

Holopedia is operated from the United States and our subprocessors are located in the United States, the European Union, and the United Kingdom. Where required we rely on Standard Contractual Clauses and equivalent safeguards to protect personal information transferred out of your region.

7. Retention

We retain account data for as long as your account is active and for a limited period afterwards to satisfy legal and accounting obligations. Lessons you create are retained until you delete them or close your account. Server logs are retained for up to 90 days. Billing records are retained as required by applicable tax law.

8. Your rights

Subject to applicable law you have the right to access, correct, delete, export, or restrict the use of your personal information, and to object to certain processing. You can exercise these rights by emailing hello@holopedia.app. We will respond within the timeframes required by law. You may also lodge a complaint with your local supervisory authority.

9. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

10. Security

We use industry-standard safeguards including encryption in transit, encryption at rest for stored assets, access controls, and audit logging. No system is perfectly secure; we cannot guarantee absolute security but we work to minimize risk.

11. Changes

We may update this Policy from time to time. Material changes will be announced by email or an in-product notice. The “Effective” date above is updated whenever we publish a new version.

12. Contact

For questions about this Policy, the data we hold about you, or any of the rights set out above, email hello@holopedia.app.