Privacy Policy

1. Introduction

Welcome to SearchCAIE. This Privacy Policy explains how we handle your data when you use our Custom GPT action and related services. By using SearchCAIE, you agree to this policy.

2. Data Collection

Information We Collect

• Search Queries: When you use our GPT to search for past paper questions, we process your search terms to return relevant results.
• User Authentication Data: If you sign in via OAuth (Logto), we receive basic profile information (user ID, email) from the authentication provider.
• Usage Analytics: We log search queries, timestamps, and result counts to understand how users interact with our service.
• API Request Data: When our GPT action calls our API, we process the request to provide search results.

What We DO NOT Collect

• We do not store your search history beyond logging for analytics purposes.
• We do not retain personal data from OAuth beyond the session.
• We do not share your data with third parties for marketing.

3. How We Use Your Data

We use collected data to:

• Provide search functionality for Cambridge International exam past papers
• Authenticate users via OAuth (Logto)
• Improve our service based on usage patterns
• Comply with legal obligations

4. Data Protection

• Encryption: All data in transit is encrypted via HTTPS/TLS
• Access Controls: API endpoints are protected and accessible only to authenticated users for private actions
• Data Minimization: We only collect data necessary for the service
• No Permanent Storage: Search queries are not permanently stored for non-authenticated users

5. Data Sharing

We do not share your personal information with third parties except:

• With trusted service providers who host our infrastructure (Vercel, database services)
• When required by law
• During business transfers (we would notify you)

6. OAuth Authentication

Our GPT action uses Logto for OAuth authentication. When you sign in:

• You are redirected to Logto's login page
• We receive only basic profile information (user ID, email)
• We do not access your Logto account credentials
• Refer to Logto's Privacy Policy for their data practices

7. Your Rights

Depending on your location, you may have rights to:

• Access your personal data
• Request correction or deletion
• Opt out of certain data processing

To exercise these rights, contact us through the website.

8. Data Retention

• Authentication Tokens: Refresh tokens are stored securely; you can revoke access anytime
• Analytics Logs: Retained for up to 12 months for service improvement
• Question Data: Past paper content is from publicly available Cambridge International past papers

9. Children's Privacy

Our service is designed for students and educators. We do not knowingly collect data from children under 13.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by posting the new policy on this page.

11. Contact Us

If you have questions about this Privacy Policy, please contact us through the SearchCAIE website.