T3ta.com (“T3ta”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy (“Policy”) explains how we collect, use, disclose, and safeguard your information when you visit or use our website, applications, and services (collectively, the “Platform”), including AI-powered educational tools. By accessing or using the Platform, you (“you” or “User”) consent to the practices described herein.

1. Scope & Applicability

This Policy applies worldwide to all Users of T3ta. We comply with the following where applicable:

• EU GDPR (General Data Protection Regulation)
• UK GDPR & Data Protection Act 2018
• CCPA (California Consumer Privacy Act)
• COPPA (Children’s Online Privacy Protection Act)
• Other national and regional data protection laws

2. Definitions

1. Personal Data: Any information relating to an identified or identifiable individual.
2. Processing: Any operation performed on Personal Data (collection, storage, use, disclosure, etc.).
3. Controller: T3ta determines the purposes and means of processing your Personal Data.
4. Processor: Third parties acting on our behalf under contract.

3. Data We Collect

3.1 Information You Provide

• Account Data: Name, email address, username, password.
• Payment Data: Billing name, payment instrument details (processed via Stripe, PayPal, etc.).
• User Content: Documents, images, text, test inputs, chat messages.
• Communications: Support inquiries, feedback, survey responses.

3.2 Information Collected Automatically

• Technical Data: IP address, device identifiers, browser type/version, operating system.
• Usage Data: Pages visited, features used, session duration, click-stream data.
• Location Data: Approximate geolocation derived from IP address.
• Cookies & Tracking: Persistent and session cookies, web beacons, analytics scripts.

3.3 Information from Third Parties

• Analytics Providers: Google Analytics, Mixpanel.
• AI Providers: OpenAI, Google Cloud Vision (processing only).
• Social Media: If you link or share via your social accounts.
• Marketing Platforms: Mailchimp, SendGrid (for communications).

4. How We Use Your Data

Purpose	Legal Basis
Provide, maintain & improve our Services	Performance of contract
Authenticate and manage your account	Legitimate interests
Process payments and prevent fraud	Performance of contract / Legal obligation
Personalize content and recommendations	Legitimate interests / Consent
Communicate updates, offers, and surveys	Consent / Legitimate interests
Analyze usage and optimize UX	Legitimate interests
Comply with legal obligations	Legal obligation

5. Data Sharing & Disclosure

We do not sell or rent your Personal Data. We may share your information with:

• Service Providers & Processors (hosting, payments, analytics, AI APIs) under strict confidentiality and purpose-limitation agreements.
• Affiliates & Subsidiaries for internal business operations.
• Legal Authorities if required to comply with a subpoena, court order, or legal process.
• Business Transfers: In connection with any merger, acquisition, or sale of assets—subject to privacy protections.

6. International Transfers

Your data may be transferred to countries outside your jurisdiction (e.g., U.S., India). We ensure appropriate safeguards, such as:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions or other lawful mechanisms

7. Data Retention

Data Category	Retention Period
Account & Profile Data	As long as your account is active + 12 months
User-Generated Content	Retained until you delete it; backups for up to 30 days thereafter
Transaction Records	7 years (for financial compliance)
Analytics & Logs	Anonymized or aggregated indefinitely; raw logs up to 1 year

We securely delete or anonymize data when no longer needed.

8. Your Rights & Choices

Depending on your jurisdiction, you may have:

• Access, rectification, erasure (“right to be forgotten”).
• Restriction or portability of your data.
• Object to processing, including for direct marketing.
• Opt-out of non-essential cookies and tracking.
• Withdraw consent at any time (where processing is based on consent).

To exercise any right, contact us at privacy@t3ta.com. We may request verification of identity before fulfilling requests and will respond within applicable legal timeframes.

9. Cookies & Tracking Technologies

We use cookies and similar tools to enhance your experience:

• Essential Cookies: Necessary for platform functionality (session management, security).
• Performance & Analytics: To understand usage and improve features.
• Functional Cookies: To remember your settings and preferences.
• Marketing Cookies: To deliver relevant advertising (with your consent).

You can manage cookie preferences via our Cookie Settings link or your browser controls. For more, see our Cookie Policy.

10. Children’s Privacy

The Platform is not intended for children under 13 (or under 16 in some jurisdictions). We do not knowingly collect Personal Data from children without verifiable parental consent. If we learn we have inadvertently collected such data, we will promptly delete it.

11. Data Security

We implement reasonable administrative, technical, and physical safeguards:

• Encryption: TLS/SSL in transit; encryption at rest where feasible.
• Access Controls: Role-based access and least-privilege principle.
• Monitoring & Audits: Regular security assessments and penetration tests.
• Incident Response: Procedures for breach detection, containment, and notification.

However, no system is impenetrable. You use the Platform at your own risk.

12. Third-Party Links & Embedded Content

Our Platform may contain links to external sites or embed third-party content. We are not responsible for their privacy practices or content. Review their policies before sharing Personal Data.

13. Changes to this Privacy Policy

We may update this Policy to reflect changes in our practices or legal requirements. For material changes, we will:

• Post a prominent notice on the Platform.
• Email users (if contact information is available).
• Update the “Effective Date” above.

Your continued use after the update constitutes acceptance of the revised Policy.