Privacy Policy - Superdegree

1. Introduction

Welcome to Superdegree ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how Lucid Program (ABN: 95 926 075 671), trading as Superdegree, collects, uses, discloses, and safeguards your information when you use our AI-powered visual content generation platform at super.degree.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

Account Information: Email address and password for authentication
Payment Information: Processed securely through Stripe (we do not store credit card details)
User Content: Text topics, YouTube URLs, uploaded files (documents, images), and custom prompts you provide for slide generation
Generated Content: Presentation slides, pages, images, videos, audio narrations, and text overlays you create
Customization Data: Logo uploads, style reference images, formatting preferences, and project organization
Communications: Messages sent to our support team and feedback

2.2 Automatically Collected Information

Device Information: Browser type, operating system, device identifiers
Usage Data: Features used, slides generated, credits consumed, session duration, and interactions with the platform
Log Data: IP address, access times, pages viewed, API requests, and error logs
Analytics Data: Product analytics via PostHog including page views, custom events, and user behavior patterns
Cookies and Tracking: Session cookies, authentication tokens, and similar tracking technologies
Transaction Data: Credit purchases, usage history, transaction timestamps, and payment status

2.3 Content Processing Data

Task Metadata: Job status, progress indicators, and processing parameters for async operations
Media Files: Generated images, animated videos, audio recordings, and exported presentations stored in our systems
Timing Information: Audio timestamps, video durations, and animation parameters

3. How We Use Your Information

We use your information to:

Service Delivery: Provide and maintain our visual content generation platform, including slide creation, video animation, audio generation, and image editing
AI Processing: Process your content through AI services to generate slides, images, videos, audio narrations, and text-to-speech outputs
Account Management: Create and manage user accounts, authenticate users, and maintain session security
Payment Processing: Process credit purchases, track transactions, manage credits, and handle refunds through Stripe
Content Storage: Store your generated slides, projects, images, videos, audio files, and customization preferences
Background Processing: Queue and execute async jobs for slide generation, audio synthesis, and video animation with progress tracking
Communication: Send service-related notifications, task completion updates, and respond to support inquiries
Analytics and Improvement: Analyze usage patterns, optimize performance, and improve features using product analytics
Public Sharing: Enable discoverable content features when you choose to make slides public
Security: Detect, prevent, and address technical issues, fraud, or abuse of the Service
Legal Compliance: Comply with legal obligations and enforce our Terms of Service
Administrative Functions: Maintain audit logs, perform admin operations, and ensure platform integrity

4. AI Processing and Third-Party Services

Our platform uses multiple artificial intelligence and third-party services to generate and process content. Your data may be shared with:

4.1 AI and Content Generation Services

Image Generation Service: Image generation, text extraction, style guidance processing, and text-to-speech capabilities
Video Animation Service: Video animation and motion synthesis for per-slide animations
Audio Narration Service: Text-to-speech audio narration with voice synthesis and word-level timestamps
Language Model Inference: Fast language model inference for text processing
General AI Processing: General AI capabilities and text processing
Computer Vision Service: Image processing and computer vision tasks

4.2 Infrastructure and Database Services

Database and Authentication Provider: Database hosting, authentication, file storage, and real-time features
Background Job Processing Service: Background job processing and async task orchestration

4.3 Payment and Analytics Services

Payment Processing Provider: Payment processing for credit purchases
Analytics Service: Product analytics, event tracking, and user behavior analysis

4.4 Data Handling by Third Parties

We work with reputable service providers and ensure appropriate safeguards are in place through contractual agreements. However, once data is processed by these services, their respective privacy policies and data handling practices apply. We recommend reviewing the privacy policies of all third-party services we use.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

Service Providers: We share data with third-party vendors who help us operate our platform, including:
- Database and authentication provider (authentication, database, file storage)
- Payment processing provider (payment processing)
- AI service providers (as listed in Section 4)
- Background job processing service (async task orchestration)
- Analytics service (product analytics)
Discoverable Content: When you mark slides as "discoverable," that content becomes publicly visible to all users on our platform, including the slide content, images, and metadata
Legal Requirements: When required by law, regulation, legal process, governmental request, or to protect our rights and safety
Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, where your information may be transferred to the acquiring entity
With Your Consent: When you explicitly authorize us to share your information for a specific purpose
Aggregated/De-identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you

We do not sell your personal information to third parties for their marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption: HTTPS/TLS encryption for data in transit and secure storage for data at rest
Authentication: HTTP-only secure cookies, JWT tokens, and secure session management
Access Controls: Row-level security (RLS) policies in our database to ensure users can only access their own data
Payment Security: PCI-compliant payment processing (we never store credit card details)
Security Headers: Strict-Transport-Security, X-Frame-Options, Content-Security-Policy, and other protective headers
Audit Logging: Administrative actions are logged for security and compliance purposes

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

We retain your personal information and content as follows:

Active Account Data: Retained for as long as your account is active and necessary to provide services
Generated Content: Slides, projects, images, videos, and audio files are retained until you delete them or close your account
Soft Deletes: Deleted slides and projects are marked as archived and may be retained for a recovery period before permanent deletion
Transaction History: Credit purchases and usage records are retained for accounting, audit, and legal compliance purposes
Analytics Data: Aggregated and de-identified usage data may be retained indefinitely for product improvement
Legal Retention: Certain information may be retained longer where required by law, regulation, or to resolve disputes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we need to retain it for legal, regulatory, or security purposes. Backup copies may persist for a reasonable period before being permanently deleted.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access: Request access to your personal information and a copy of the data we hold about you
Correction: Request correction of inaccurate, incomplete, or outdated data
Deletion: Request deletion of your personal information and account (subject to legal retention requirements)
Portability: Request a copy of your data in a structured, machine-readable format (JSON/CSV)
Restriction: Request restriction of processing in certain circumstances
Objection: Object to processing of your personal information for certain purposes
Opt-out: Unsubscribe from marketing communications (note: service-related emails cannot be opted out)
Withdraw Consent: Withdraw consent where processing is based on consent (does not affect prior processing)
Discoverable Content Control: Toggle whether your slides are publicly visible on the platform

To exercise these rights, please contact us at support@learnpte.com. We will respond to verified requests within 30 days. You may also manage certain settings directly through your account dashboard.

Australian Privacy Act Rights: If you are in Australia, you have rights under the Privacy Act 1988 (Cth) to access and correct your personal information, and to make complaints about privacy breaches.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our platform and store certain information:

Essential Cookies: Required for authentication, session management, and core functionality (cannot be disabled)
Analytics Cookies: Analytics tools to understand user behavior, track events, and improve the product
Preference Cookies: Store your settings and preferences for a personalized experience

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept essential cookies, you will not be able to use our Service. Analytics cookies can be managed through your browser settings or analytics provider opt-out mechanisms.

Analytics Service: We use analytics tools (hosted in the US) to collect product analytics data including page views, feature usage, and user flows. This helps us understand how users interact with our platform and make informed product decisions. Analytics tools may set cookies to track sessions and identify returning users.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries outside of your jurisdiction, including:

United States: Analytics service (hosted in US), various AI service providers
Global Cloud Infrastructure: Database provider and other services with global data centers
Third-Party Service Locations: AI providers and other services may process data in their respective jurisdictions

These countries may have data protection laws that differ from those in your jurisdiction. We take appropriate steps to ensure that your personal information receives an adequate level of protection, including:

Using service providers with strong privacy commitments and certifications
Implementing contractual protections such as Standard Contractual Clauses
Ensuring encryption and security measures during data transfers

If you are located in the European Economic Area (EEA), United Kingdom, or Australia, we comply with applicable cross-border data transfer requirements.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect, use, disclose, and sell
Right to delete personal information (subject to exceptions)
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us at support@learnpte.com with "CCPA Request" in the subject line.

14. Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us at:

Lucid Program
ABN: 95 926 075 671
Email: support@learnpte.com
Website: https://super.degree

For Australian users, if you have a complaint about how we handle your personal information, please contact us first. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.