Who controls your information
PassInMinutes is operated by Milich LLC. Questions and privacy-rights requests may be sent to contact@passinminutes.com.
Information we collect
When you create an account or use the service, we may process your verified email address, account identifiers, subscription status, payment references, uploaded files, generated study guides, and service-use records. Stripe processes payment-card details; PassInMinutes does not store complete card numbers.
With your analytics consent, we collect page and feature activity, referral domain, UTM campaign parameters, device category, browser family, operating-system family, coarse country, a random first-party visitor identifier, and pseudonymous identifiers derived from your session and network address. We do not retain raw IP addresses in the analytics database, use browser fingerprinting, record keystrokes, or place advertising cookies.
Why we use information
We process account, upload, guide, security, and billing information to provide the service, perform our contract, protect users, prevent abuse, and meet legal obligations. Optional analytics is processed only after consent to understand referral sources, improve the product, measure conversion funnels, and evaluate clearly identified A/B tests. We do not sell personal information or use it for cross-context behavioral advertising.
Cookies and local storage
A necessary preference cookie remembers whether you accepted or rejected analytics. If you accept, a first-party analytics identifier may be stored for consistent visitor counts and experiment assignment. Session storage may hold a random session identifier and temporary checkout or guide state. Rejecting analytics does not prevent account, security, checkout, or other essential features from working.
Analytics choices and privacy signals
You may accept or reject optional analytics with equal prominence and change your choice through Cookie Settings in the footer. Rejecting after previously accepting requests deletion of analytics associated with that browser identifier. We honor supported Global Privacy Control and Do Not Track signals by disabling optional analytics.
Retention
Consent-based analytics records are automatically deleted after 90 days. Account information, uploaded files, generated guides, and transaction records are kept while needed to provide the service, comply with law, resolve disputes, and enforce agreements. You may request deletion, subject to legal retention requirements.
Service providers
- Replit: application hosting, database infrastructure, deployment, and operational logs.
- Clerk: authentication, verified account identifiers, and session management.
- OpenAI: processing submitted material to generate study guides and quizzes.
- Stripe: subscription checkout, payment processing, and billing management.
- Cloudflare: DNS, traffic routing, security, and coarse request metadata.
Providers process data under their own terms and may process it in countries other than yours. We use reasonable contractual, technical, and organizational safeguards for international transfers where required.
Replit and Cloudflare may temporarily process network addresses in operational or security logs under their own retention practices. Those logs are separate from the optional PassInMinutes analytics table described above.
Your privacy rights
Depending on where you live, you may request access, correction, deletion, restriction, portability, or objection; withdraw analytics consent; or appeal a privacy decision. You may also complain to your local data-protection authority. We will verify requests as reasonably necessary. Email contact@passinminutes.com to exercise these rights. We do not discriminate against users for exercising privacy rights.
Children and students
PassInMinutes is a general-audience study tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Where local law requires parental or guardian consent for a minor, the service should be used only with that consent. Contact us if you believe a child submitted information without required authorization.
Security and changes
We use access controls, encrypted network transport, pseudonymization, data minimization, and limited retention, but no system is completely secure. We may update this policy when the service or law changes and will post the revised effective date here. Material changes may require renewed consent.
