Privacy Policy

PaperSolve.org ("the Platform") is operated by PaperSolve ("we", "us", "our"). We provide online video courses for IGCSE exam preparation. This policy explains what personal data we collect, why we collect it, and how we protect it.

We collect the following categories of personal data:

We do not collect sensitive personal data (health, biometric, religious, or political data). We do not store passwords — authentication is handled entirely by Google.

We process your data based on:

• Contract performance: processing required to provide the service you purchased (account, course access, progress tracking)
• Legitimate interest: security monitoring, abuse prevention, product improvement
• Consent: optional features like marketing emails or leaderboard participation, which you can opt out of at any time via your profile settings

We share data only with the processors necessary to operate the Platform:

• Paddle.com Market Ltd — payment processing, invoicing, tax compliance (UK/EU based)
• Vercel Inc. — application hosting and edge network (US based, SOC 2 certified)
• Neon Inc. — database hosting (US based, SOC 2 certified)
• BunnyCDN (BunnyWay d.o.o.) — video content delivery (EU based)
• Google LLC — authentication via Google OAuth (US based)

We do not sell personal data. We do not share data with advertisers or data brokers. We do not use third-party analytics or tracking scripts.

Account data and purchase history are retained for as long as your account is active plus 3 years after closure (for legal and accounting requirements). Watch progress and exam scores are retained for the duration of your course access period. Server logs are retained for 90 days.

You may request deletion of your account and associated data at any time by contacting us at hello@papersolve.org.

Under Saudi Arabia's Personal Data Protection Law (PDPL) and applicable international regulations, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention obligations)
• Object to processing based on legitimate interest
• Withdraw consent for optional processing at any time
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at hello@papersolve.org. We will respond within 30 days.

The Platform uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required because we only use strictly necessary cookies.

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit
• Encrypted database connections (TLS/SSL)
• Role-based access control for administrative functions
• Rate limiting and abuse detection
• Audit logging for all administrative actions
• Content Security Policy headers to prevent XSS

The Platform may be used by students under 18 with parental consent. We do not knowingly collect data from children without parental awareness. If you believe a child has created an account without appropriate consent, contact us and we will delete the account.

We may update this policy from time to time. Material changes will be communicated via email or a notice on the Platform. The "last updated" date at the top of this page reflects the most recent revision.

For privacy-related questions or to exercise your data rights, contact us at hello@papersolve.org.