Privacy Policy

Last updated: July 13, 2026

Tarsia.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at tarsia.ai (the "Service").

1. Information We Collect

Personal Information

When you create an account or use our Service, we may collect:

  • Email address
  • Name (if provided)
  • Profile information from OAuth providers (Google)
  • Payment information (processed securely by Stripe)

Usage Information

We automatically collect certain information when you use our Service:

  • Device information (browser type, operating system)
  • IP address and approximate location
  • Pages visited and features used
  • Puzzles created and interactions with the Service

Content You Create

We store the puzzles, questions, and answers you create or generate using our Service. This content is associated with your account and stored securely.

If you upload an image or PDF to generate AI puzzle content, that file is stored in a private storage bucket, used solely to generate your puzzle, and automatically deleted within 48 hours. Uploaded files are never made public. The contents of the file are sent to OpenAI in order to generate your question and answer pairs, and under OpenAI's API terms this data is not used to train their models.

Because classroom materials can contain student names or student work, we encourage you to crop or exclude identifying information before uploading wherever possible.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process transactions and manage your account
  • Generate AI-powered puzzle content based on your requests
  • Send you service-related communications
  • Respond to your inquiries and provide support
  • Analyze usage patterns to improve our Service
  • Detect, prevent, and address technical issues or fraud
  • Comply with legal obligations

3. Third-Party Services

We use trusted third-party services to operate our platform:

Supabase

Authentication and database services. Supabase stores your account information and puzzle data securely. Supabase Privacy Policy

Stripe

Payment processing. We do not store your payment card details; they are handled securely by Stripe. Stripe Privacy Policy

OpenAI

AI-powered puzzle generation. When you use AI features, your topic prompts, as well as any images or PDFs you upload for generation, are sent to OpenAI's API in order to produce your question and answer pairs. Under OpenAI's API terms, this data is not used to train their models. OpenAI Privacy Policy

Vercel

Website hosting and analytics. Vercel provides our hosting infrastructure and basic analytics. Vercel Privacy Policy

Upstash

Rate limiting infrastructure. Upstash Redis helps us manage API rate limits to ensure fair usage. Upstash Privacy Policy

Resend

Transactional email delivery. When we send you account or service emails, your email address and the message content are processed by Resend. Resend Privacy Policy

Kit

Newsletter delivery. If you subscribe to our newsletter, your email address is processed by Kit (formerly ConvertKit) in order to deliver it. Kit Privacy Policy

4. Cookies and Tracking

We use cookies and similar technologies to:

  • Essential cookies: Required for authentication and basic functionality
  • Analytics cookies: Help us understand how you use our Service

Google Analytics

We use Google Analytics 4 (GA4) to understand how visitors interact with our website. GA4 may collect the following information:

  • Pages visited and time spent on each page
  • Device type, browser, and operating system
  • Geographic location (city-level, derived from IP address)
  • Referring websites and search terms
  • Interactions with site features (e.g., button clicks, form submissions)

Data retention: Analytics data is retained for 14 months, after which it is automatically deleted.

Data sharing: Your data is processed by Google LLC under their Data Processing Terms. We do not share personally identifiable information with Google. GA4 uses IP anonymization by default, meaning your full IP address is not stored.

Opt-out: You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. For more information, see Google's Privacy Policy.

You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal information within 30 days, except as required by law or for legitimate business purposes (such as maintaining backup archives).

Uploaded files for AI generation: Images and PDFs uploaded to generate puzzle content are automatically deleted within 48 hours of upload. They are held in private storage during that window and are not accessible to other users. The file contents are transmitted to OpenAI solely to generate your puzzle content and, under OpenAI's API terms, are not used to train their models.

6. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your personal data
  • Portability: Request your data in a machine-readable format
  • Objection: Object to certain processing of your data

To exercise these rights, please contact us at privacy@tarsia.ai.

7. Children's Privacy

Our Service is intended for educators and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will take steps to delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

9. Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

By using Tarsia.ai, you acknowledge that you have read and understood this Privacy Policy.

View our Terms of Service