Preptrova - Privacy Policy & Google API Services User Data Policy Compliance

Official Domain: https://preptrova.com | Effective Date: September 18, 2026 | Compliance Lead: edutrack91@gmail.com

Google API Services User Data Policy Compliance (Limited Use Disclosure)

Affirmative Declaration: Preptrova’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Preptrova accesses and uses Google user data solely to provide user-facing features essential to educational planning and document generation. We do NOT transfer this data to third parties, we do NOT use Google data for advertising, we do NOT sell Google user data, and human beings are prohibited from reading your private data unless you have given affirmative consent or it is required for legal safety audits.

1. Information We Collect & Google OAuth Scopes

OpenID & Profile (openid, profile / https://www.googleapis.com/auth/userinfo.profile): Display name, preferred language, and avatar to personalize your educator dashboard.
Email Address (email / https://www.googleapis.com/auth/userinfo.email): Verified Google email used to securely identify your account and authenticate access.
Google Drive File Scope (https://www.googleapis.com/auth/drive.file): Used strictly and exclusively to create and upload the specific lesson plan or presentation you exported into your personal Google Drive account. Preptrova DOES NOT access, read, scan, index, modify, or delete any other files in your Google Drive.
Educational Content: Saved lesson objectives, differentiation tiers, and curriculum references stored in your private workspace.

2. Third-Party Service Providers & Prohibitions

Google Cloud Platform & Firebase: Infrastructure, authentication, and Firestore database hosting with AES-256 encryption at rest.
Google Gemini API: Educational lesson content generation. Prompts and outputs are never used to train generalized foundation models.
PayPal Inc.: Secure payment gateway for subscriptions under PCI-DSS Level 1 compliance.
Strict Prohibitions: NO data sales, NO advertising or retargeting, NO generalized AI model training, and NO human access without explicit user consent.

3. Data Retention, User Rights & Deletion (GDPR & CCPA)

In-App Asset Deletion: You can delete any lesson plan or uploaded note at any time via the Resource Bank trash icon.
Account Deletion Request: Send an email to edutrack91@gmail.com. Requests are permanently executed within 24 to 48 business hours.
Revoking Google Access: Revoke permissions anytime at https://myaccount.google.com/permissions.

4. Contact Information

Application: Preptrova | Lead Contact: edutrack91@gmail.com | Support: support@preptrova.com | Official Links: Privacy Policy | Terms of Service