Privacy Policy

BoilerNotes ("we," "our," or "us"), based in West Lafayette, Indiana, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use our platform, including our website, applications, and associated academic tools (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by the terms described in this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

We collect information in several ways to deliver and improve your academic experience: A. INFORMATION YOU PROVIDE DIRECTLY • Account Information: Name, university or college email address (.edu or personal), username, password, academic major, university affiliation, and graduation year. • User-Generated Content: Study notes, lecture summaries, exam materials, flashcards, quiz attempts, study questions, bookmarks, and comments you create or post. • Communications: Messages, feedback, support inquiries, or reports sent directly to us. B. INFORMATION COLLECTED AUTOMATICALLY • Usage Details: Pages or views accessed, study session duration, search queries, notes downloaded or viewed, AI study tools utilized, and referring URLs. • Device & Technical Information: IP address, browser type and version, operating system, device identifiers, and network connection characteristics. • Cookies & Local Storage: We use browser local storage and essential cookies to authenticate sessions, remember university preferences, and maintain active study states. C. FERPA & ACADEMIC PRIVACY NOTICE BoilerNotes is an independent collaborative student platform and is not an official branch of Purdue University or any other academic institution. We do not store official university student education records governed under the Family Educational Rights and Privacy Act (FERPA). However, we respect student privacy and encourage users not to post non-directory student records, confidential grades, or private institutional documents.

We process and utilize collected information for legitimate educational and operational purposes, including: • Providing, maintaining, and enhancing the BoilerNotes platform and study workspace. • Powering AI-assisted learning tools (such as quiz generation, study summaries, and topic breakdowns). • Personalizing your course directory and recommending relevant notes, past exams, and study groups. • Facilitating community note sharing and student collaboration. • Detecting, investigating, and preventing academic dishonesty, platform abuse, fraud, spam, and security incidents. • Responding to support inquiries and communicating important platform updates or security notices. • Complying with applicable legal and regulatory obligations in the United States and the State of Indiana.

We do not sell, rent, or trade your personal information to third-party data brokers or advertisers. We share information only under the following limited circumstances: • Public & Community Content: Notes, study resources, and comments you publish to community or course hubs are visible to other registered students and visitors in accordance with your sharing preferences. • Trusted Service Providers: We partner with trusted third-party providers (such as cloud hosting, authentication providers like Firebase, and analytics infrastructure) who assist us in operating our platform under strict confidentiality and security terms. • Legal Compliance & Law Enforcement: We may disclose information if required by law, subpoena, court order, or governmental regulation under the laws of Indiana or the United States, or in response to valid law enforcement requests. • Safety & Integrity: We may disclose data when we believe in good faith that disclosure is necessary to investigate potential violations of our Terms of Service, protect personal safety, or prevent academic fraud. • Business Transfers: If BoilerNotes undergoes a merger, acquisition, or asset transfer, user information may be transferred as a business asset, subject to this Privacy Policy.

Under the Indiana Consumer Data Protection Act (ICDPA, Ind. Code § 24-15) and applicable United States privacy regulations, Indiana residents and platform users possess specific privacy rights regarding their personal data: • Right to Access: You have the right to confirm whether we process your personal data and to access such personal data. • Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and purposes of processing. • Right to Delete: You have the right to request deletion of personal data provided by or obtained about you. • Right to Data Portability: You have the right to obtain a copy of your personal data in a portable, readily usable format. • Right to Opt-Out: You have the right to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling. BoilerNotes does not sell personal data or engage in profiling with legal consequences. EXERCISING YOUR RIGHTS: To exercise any of these statutory rights, please submit a verified request by emailing us at support@boilernotes.com with the subject line "Indiana Privacy Rights Request". We will respond within forty-five (45) days of receiving your request as required by Indiana law. If we deny your request, you may appeal our decision by contacting us with the subject "Privacy Request Appeal."

BoilerNotes is designed and intended for post-secondary and college students aged 13 and older. We do not knowingly collect or solicit personal information from children under the age of 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we discover that we have inadvertently collected personal data from a child under 13 without verifiable parental consent, we will promptly delete that information from our servers. If you believe a child under 13 has provided personal data to us, please contact us immediately at support@boilernotes.com.

We implement robust administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, or disclosure. Key security measures include: • Industry-standard SSL/TLS encryption for all data transmitted between your browser and our servers. • Secure Firebase Cloud infrastructure and access-controlled databases. • Regular security reviews and automated screening of uploaded study files. However, please be aware that no electronic transmission over the Internet or digital storage method is 100% impenetrable. While we strive to protect your personal information, we cannot guarantee absolute security.

We retain your personal data for as long as your BoilerNotes account remains active or as needed to provide you with access to our academic tools. You may request deletion of your account and associated personal data at any time through your profile settings or by contacting support@boilernotes.com. Upon receipt of a verified deletion request: • Your account profile and identifying information will be permanently removed. • Study notes and community contributions you chose to publish publicly may be anonymized or retained to preserve academic integrity and community access, unless their removal is specifically requested.

We may update this Privacy Policy from time to time to reflect changes in our legal obligations, platform features, or data practices. When updates are made, we will revise the "Effective Date" at the top of this page. For material changes that impact how we handle your personal data, we will provide prominent notice on our website or via email before the changes take effect. We encourage you to review this Privacy Policy periodically to stay informed about our privacy practices.

If you have questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Privacy Team at: BoilerNotes Legal & Privacy Department West Lafayette, Indiana 47906 United States of America Email: support@boilernotes.com General Legal Inquiries: support@boilernotes.com