Privacy Policy

Automagical Forms (the "Add-on") is an intelligent document processing tool designed to save educators and professionals time by converting existing files into Google Forms™. This Privacy Policy details our "Privacy-First" architecture for protecting your data.

1. Information We Collect

We adhere to a strict principle of data minimization. We do not retain the content of the files you process.

A. Ephemeral Document Processing (Question Extraction)

When you use Automagical Forms to process a PDF, Google Doc™, or Image:

• Your file content is read securely from your Google Drive™ and transmitted to our AI processing engine.
• This processing is stateless and ephemeral. The text and questions extracted from your file exist in our system's memory only for the duration of the conversion request.
• No Storage: We do not save, store, or archive your original files or the generated questions on our servers. The resulting Google Form™ is created directly in your Google Drive™ account.

B. Account Information (Hashed & Salted)

To manage usage quotas (e.g., free vs. premium limits), we must identify unique users. We do this without storing your raw email address.

• Cryptographic Hashing: We hash and salt your email address before it reaches our database. This creates a unique identifier (e.g., z8k3...) that allows us to count usage without knowing who you are.
• Zero PII Retention: If our database were accessed, it would contain no readable email addresses or personal information.

2. Student Safety & Education Compliance

• No Student Profiles: We do not create profiles of students or track the content of quizzes/assessments.
• No Advertising: There are no advertisements in the application, and we do not use data for marketing.
• No Data Sale: We strictly prohibit the sale of any user data.

3. GDPR & International Rights

For users in the EEA, UK, and Switzerland, we process data in compliance with the General Data Protection Regulation (GDPR).

A. Legal Basis

Contractual Necessity: We process your file inputs solely to provide the form generation service you have initiated.

B. Your Rights

You maintain the right to access, correct, or delete your data. Since we only store hashed identifiers, "deletion" involves removing these usage records. Please contact our DPO (Section 8) to exercise these rights.

4. California Privacy Rights (CCPA/CPRA)

Residents of California are protected under the CCPA/CPRA.

• No Sale: We do not sell personal information.
• Right to Know: You may request a report of the categories of data we collect (strictly usage metadata).
• Non-Discrimination: We do not discriminate against users who exercise their privacy rights.

5. Machine Learning & Data Training Policy

Automagical Forms uses advanced Natural Language Processing to identify and extract questions from your documents.

• Zero Training Policy: The documents and questions processed by our tool are NOT used to train the AI models. We use enterprise-grade endpoints with strict data privacy agreements that prevent our providers from using your data for model improvement.

6. Data Storage and Security

Our infrastructure runs on the Google Cloud Platform (GCP) and Firebase.

• Encryption: Data is encrypted in transit via SSL/HTTPS (TLS 1.2+) and at rest using AES-256 standards.
• Google Drive Integration: Our app interacts with your Drive files via the Google Drive API. We request only the permissions necessary to read the specific file you select and create the new Form.

7. Subprocessors

We leverage industry-leading cloud and AI partners to provide secure and accurate question extraction. To protect our proprietary technology stack, we categorize our trusted subprocessors below.

A specific list of vendor names is available to educational institutions and enterprise customers in our Data Processing Agreement (DPA) upon request.

8. Contact Us & DPO

If you have questions about this policy, or if you are a school administrator requiring a signed Data Processing Agreement (DPA), please contact us.