Privacy Policy

QUIZ AI Builder for Google Forms™

Last Updated: December 2025

1. INTRODUCTION AND SCOPE

QUIZ AI Builder ("we," "us," "our," or "Service Provider") is committed to transparency regarding the collection, processing, and protection of information obtained through your use of our Platform.

This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices available to you regarding your information. This Policy applies exclusively to data collected through the QUIZ AI Builder add-on for Google Forms™ (the "Platform" or "Service").

Acceptance of This Policy: By accessing, authorizing, or using the Platform in any manner, you explicitly acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and consent to our data practices as described herein. If you do not agree with this Policy, you must immediately discontinue use of the Platform.

Integration with Terms of Service: This Privacy Policy is incorporated by reference into our Terms of Service. Capitalized terms not defined in this Policy have the meanings assigned to them in the Terms of Service.

Contact: contact@quizaibuilder.ovh

2. PRIVACY BY DESIGN: ANONYMIZATION AND DATA MINIMIZATION

2.1 Our Core Privacy Principle

QUIZ AI Builder is designed with privacy at its foundation. By design, your data remains on your Google account at all times, never permanently saved in our database.

2.2 No Real Names Required

Critical Notice: The Platform does NOT collect or require your real legal name or surname.

If display names are needed for any purpose, the Platform uses anonymous identifiers:

These fields are explicitly intended for pseudonyms, usernames, or aliases of YOUR choosing — NOT your real legal name or any directly identifiable personal information.

2.3 User Responsibility for Pseudonyms

You are solely responsible for:

Our Position: We strongly discourage and do not request the submission of real names in pseudonym fields. We treat pseudonym data as non-personal identifiers selected by users for account differentiation purposes.

2.4 Pseudonymization Benefits

This approach ensures:

3. INFORMATION WE COLLECT

We collect minimal information necessary to provide, maintain, and improve our Platform services.

3.1 Account and Authentication Information

When you authorize the add-on with your Google account, we access:

We explicitly DO NOT collect:
  • ❌ Your real legal name or surname
  • ❌ Your physical address
  • ❌ Your telephone number
  • ❌ Your date of birth
  • ❌ Government identification numbers
  • ❌ Profile photos or images

3.2 Usage and Subscription Data

To provide the service, we store:

Storage Location: This data is stored in Google's PropertiesService associated with your Google account, NOT on external servers.

3.3 User-Provided API Key

If you choose to use automatic AI generation:

Storage: Your API key is stored ONLY in your Google account's PropertiesService (UserProperties). We do NOT have access to, transmit, or store your API key on our servers.

Your Responsibility: You are responsible for:

3.4 Quiz Configuration Data (Temporary Processing Only)

When you generate quizzes, we temporarily process:

CRITICAL DATA HANDLING:
  • ✅ This content is transmitted to Google Gemini API for content generation
  • ✅ We DO NOT permanently store your input content or generated quizzes on our servers
  • ✅ Content is processed in real-time and immediately delivered to your Google Forms
  • ✅ After delivery, no copy of your content remains in our systems
  • ✅ We DO NOT use your content to train AI models or for any other purpose

3.5 Google Forms Integration Data

When you authorize our Platform to integrate with Google Forms™:

What We Access:

What We DO NOT Access:
  • ✅ We DO NOT read existing questions in your Google Forms
  • ✅ We DO NOT access your Google Drive files
  • ✅ We DO NOT access your Gmail, Google Calendar, or other Google services
  • ✅ We DO NOT access responses or results submitted to your Forms
  • ✅ We ONLY write new quiz content to Forms you explicitly authorize

Google API Compliance: Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.6 Automatically Collected Technical Information

When you access the Platform through Google Forms, Google may automatically collect:

Note: Most technical data is collected and processed by Google as part of the Google Workspace infrastructure, not by us directly.

3.7 Support Communications

If you contact us for support:

3.8 Information We Explicitly DO NOT Collect

To maximize your privacy, we DO NOT collect:

4. HOW WE USE YOUR INFORMATION

We process collected information for the following legitimate purposes:

4.1 Service Provision

4.2 Platform Improvement

Limitation: We DO NOT use individual user content (quiz inputs or outputs) to train AI models or develop other products.

4.3 Communication

Opt-Out: You may unsubscribe from promotional emails at any time. Transactional emails necessary for account management cannot be disabled.

4.4 Security and Compliance

5. INFORMATION SHARING AND DISCLOSURE

We are committed to protecting your information and limiting disclosure to necessary parties.

5.1 Third-Party Service Providers

We share limited information with the following trusted service providers:

Google Gemini API:

Google Workspace (Forms, OAuth):

Stripe (Payment Processing):

5.2 Google API Limited Use Disclosure

Our use of information received from Google APIs strictly adheres to Google API Services User Data Policy, including Limited Use requirements.

We explicitly DO NOT:

  • ❌ Transfer Google user data to third parties for advertising purposes
  • ❌ Use Google data for interest-based advertising or targeted ads
  • ❌ Sell Google user data to data brokers or information resellers
  • ❌ Use Google data for creditworthiness or lending decisions
  • ❌ Share Google data with HR systems or employment decisions
  • ❌ Use Google data to train generalized AI/ML models

We ONLY use Google API data to:

  • ✅ Authenticate user access to their Google account
  • ✅ Insert quiz content into authorized Google Forms
  • ✅ Execute user-initiated actions on their Google Forms

5.3 Legal and Regulatory Disclosures

We may disclose your information when we believe in good faith that disclosure is necessary to:

User Notification: When legally permitted, we will attempt to notify affected users of legal disclosure requests.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets:

5.5 What We DO NOT Do With Your Data

We explicitly DO NOT:

6. DATA STORAGE AND LOCATION

6.1 Where Your Data Is Stored

Data Type Storage Location
Email address Google's servers (via OAuth)
Usage counter Your Google account (PropertiesService)
Subscription status Your Google account (PropertiesService)
API key Your Google account (UserProperties)
Quiz content NOT stored (real-time processing only)
Payment data Stripe's servers

Key Point: We do NOT operate external databases containing your personal information. Your data remains within Google's infrastructure or with Stripe for payment processing.

6.2 International Data Transfers

Your information may be processed in:

By using the Platform, you consent to the transfer and processing of your data in these locations.

For EU Users: We rely on Google's and Stripe's compliance mechanisms (Standard Contractual Clauses, adequacy decisions) for international transfers.

7. DATA RETENTION AND DELETION

7.1 Retention Periods

Data Type Retention Period
Email (for authentication) Duration of account + legal retention
Usage counter Duration of account
Subscription status Duration of account + 7 years (tax compliance)
API key Until you delete it or revoke access
Quiz content NOT retained (processed in real-time only)
Support emails 3 years
Payment records 7-10 years (legal requirement)

7.2 Account Deletion

Your Right to Delete: You may request deletion of your account and data at any time by:

Deletion Process:

Retention Exceptions: We may retain certain information after deletion:

8. DATA SECURITY

8.1 Security Measures

We implement reasonable security measures:

Technical Security:

Google's Security: Your data stored in PropertiesService benefits from Google's security infrastructure, including encryption, access controls, and security monitoring.

Stripe's Security: Payment processing is handled by Stripe, which is PCI-DSS compliant and implements industry-leading security measures.

8.2 Security Limitations

YOU ACKNOWLEDGE AND ACCEPT THAT:
  • No data transmission over the Internet is 100% secure
  • We cannot guarantee absolute protection against all threats
  • Third-party services (Google, Stripe, Gemini) maintain their own security practices
  • You are responsible for keeping your Google account and API key secure

8.3 Breach Notification

In the event of a data breach affecting your information:

9. AUTOMATED DECISION-MAKING AND PROFILING

9.1 No Automated Decision-Making

The Platform does NOT engage in:

9.2 AI-Generated Content Clarification

While the Platform uses artificial intelligence (Google Gemini) to generate quiz content:

9.3 Your Rights Regarding Automated Processing

Under GDPR Article 22 and similar laws, you have the right to:

Since we do not engage in such automated decision-making, these rights are preserved by design.

10. YOUR PRIVACY RIGHTS

Your rights vary depending on your location and applicable laws.

10.1 Universal Rights (All Users)

All users have the right to:

To exercise these rights: contact@quizaibuilder.ovh

10.2 European Union / United Kingdom (GDPR)

If you are in the EEA, UK, or Switzerland, you have additional rights:

Legal Bases for Processing (Article 6):

Supervisory Authorities:

Response Time: Within one (1) month, extendable by two additional months for complex requests.

10.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

Right to Know (CCPA § 1798.100):

Right to Delete (CCPA § 1798.105): Request deletion of personal information we have collected, subject to legal exceptions.

Right to Correct (CPRA § 1798.106): Request correction of inaccurate personal information.

Right to Opt-Out of Sale/Sharing (CCPA § 1798.120):

Right to Limit Use of Sensitive Personal Information (CPRA § 1798.121): We do not collect or process sensitive personal information as defined by CPRA.

Right to Non-Discrimination (CCPA § 1798.125): We will not discriminate against you for exercising your CCPA rights.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf. We may require written authorization and identity verification.

Verification: We verify your identity before processing requests by matching information you provide with our records.

Response Time: Within forty-five (45) days, extendable by an additional forty-five (45) days if necessary.

10.4 Virginia Residents (VCDPA)

If you are a Virginia resident, the Virginia Consumer Data Protection Act provides you with the following rights:

Opt-Out Rights Clarification:

Appeals Process: If we decline your request, you may appeal by contacting us at contact@quizaibuilder.ovh with "VCDPA Appeal" in the subject line. We will respond within sixty (60) days. If your appeal is denied, you may contact the Virginia Attorney General at https://www.oag.state.va.us/

Response Time: Within forty-five (45) days, extendable by an additional forty-five (45) days.

10.5 Colorado Residents (CPA)

If you are a Colorado resident, the Colorado Privacy Act provides you with similar rights:

Opt-Out Rights Clarification: We DO NOT sell data, engage in targeted advertising, or profile users.

Appeals Process: If we decline your request, you may appeal by emailing contact@quizaibuilder.ovh with "CPA Appeal" in the subject line. We will respond within forty-five (45) days. If denied, you may contact the Colorado Attorney General at https://coag.gov/

Response Time: Within forty-five (45) days, extendable by an additional forty-five (45) days.

10.6 Connecticut Residents (CTDPA)

If you are a Connecticut resident, the Connecticut Data Privacy Act provides you with:

Opt-Out Rights Clarification: We DO NOT sell data, engage in targeted advertising, or profile users.

Appeals Process: If we decline your request, you may appeal by emailing contact@quizaibuilder.ovh with "CTDPA Appeal" in the subject line. We will respond within sixty (60) days. If denied, you may contact the Connecticut Attorney General at https://portal.ct.gov/AG

Response Time: Within forty-five (45) days, extendable by an additional forty-five (45) days.

10.7 Utah Residents (UCPA)

If you are a Utah resident, the Utah Consumer Privacy Act provides you with:

Opt-Out Rights Clarification: We DO NOT sell data or engage in targeted advertising.

Response Time: Within forty-five (45) days, extendable by an additional forty-five (45) days.

10.8 Other U.S. State Privacy Laws

As additional U.S. states enact comprehensive privacy legislation (including but not limited to Texas, Oregon, Montana, Delaware, Iowa, Tennessee), we will update this Policy to reflect your rights under applicable state laws.

10.9 Canadian Residents (PIPEDA)

If you are a Canadian resident, the Personal Information Protection and Electronic Documents Act (PIPEDA) provides you with:

Contact: Office of the Privacy Commissioner of Canada
Website: https://www.priv.gc.ca/en/
Toll-free: 1-800-282-1376

10.10 Australian Residents

If you are an Australian resident, the Privacy Act 1988 provides you with:

Contact: Office of the Australian Information Commissioner (OAIC)
Website: https://www.oaic.gov.au/
Phone: 1300 363 992

10.11 New Zealand Residents

If you are a New Zealand resident, the Privacy Act 2020 provides you with:

Contact: Office of the Privacy Commissioner
Website: https://www.privacy.org.nz/
Phone: 0800 803 909

10.12 Brazilian Residents (LGPD)

If you are a Brazilian resident, the Lei Geral de Proteção de Dados (LGPD) provides you with:

Contact: Autoridade Nacional de Proteção de Dados (ANPD)
Website: https://www.gov.br/anpd/

10.13 How to Submit Privacy Rights Requests

Email: contact@quizaibuilder.ovh
Subject Line: "Privacy Request - [Your Request Type] - [Your Location]"

Required Information:

Verification: We may verify your identity before processing requests to protect your privacy. This may include:

Our Response:

No Fee: There is no fee for submitting requests unless they are manifestly unfounded, excessive, or repetitive.

10.14 Appeals Process

If we decline or partially deny your privacy rights request:

Step 1: You may appeal by sending an email to contact@quizaibuilder.ovh with:

Step 2: We will review your appeal and respond within:

Step 3: If your appeal is denied, our response will include:

Regulatory Contacts by Jurisdiction:

11. COOKIES AND TRACKING TECHNOLOGIES

11.1 Minimal Cookie Usage

As a Google Forms add-on, QUIZ AI Builder operates within Google's infrastructure and uses minimal cookies:

Essential Cookies (Required):

We DO NOT use:

11.2 Third-Party Cookies

Google and Stripe may set their own cookies as part of their services:

Google Cookies:

Stripe Cookies:

11.3 Cookie Management

Browser Controls: You can manage cookies through your browser settings:

Note: Disabling essential cookies may prevent the Platform from functioning properly.

11.4 Do Not Track (DNT) Signals

Do Not Track is a browser setting that requests websites not to track your browsing activity.

Our Response to DNT Signals: We currently do not respond to DNT signals because:

If a standardized DNT protocol is adopted in the future, we will update this Policy accordingly.

Regardless of DNT settings:

12. CHILDREN'S PRIVACY

12.1 Age Restrictions

The Platform is NOT directed to or intended for individuals under 18 years of age.

We do NOT knowingly collect personal information from children under 18.

12.2 Parental Notice

If you are a parent or guardian and believe your child has provided information to us:

12.3 Educational Use

If educators use the Platform to create quizzes for students:

WE DO NOT PROCESS:

13. THIRD-PARTY LINKS AND SERVICES

13.1 Integrated Third-Party Services

The Platform integrates with:

Google Services:

Privacy Policy: https://policies.google.com/privacy

Stripe:

Privacy Policy: https://stripe.com/privacy

13.2 External Links

The Platform may contain links to external websites or resources. We are not responsible for:

Recommendation: Review the privacy policies of any third-party websites you visit.

14. POLICY UPDATES

14.1 Right to Modify

We reserve the right to update this Privacy Policy at any time for reasons including:

14.2 Notification of Changes

For material changes affecting your rights or data processing, we will provide notice via:

Effective Date: Changes become effective fifteen (15) days after notice, except for legally required changes which may be immediate.

14.3 Continued Use

Your continued use of the Platform after the effective date of changes constitutes acceptance of the updated Policy. If you disagree, discontinue use and request account deletion.

14.4 Version History

We maintain prior versions of this Privacy Policy. You may request previous versions by contacting contact@quizaibuilder.ovh.

15. CONTACT INFORMATION

For questions, concerns, or requests regarding this Privacy Policy:

QUIZ AI Builder
Email: contact@quizaibuilder.ovh

For Data Subject Requests (access, deletion, correction, portability):
Email: contact@quizaibuilder.ovh
Subject Line: "Privacy Request - [Request Type] - [Your Location]"

For Appeals of Denied Requests:
Email: contact@quizaibuilder.ovh
Subject Line: "Privacy Appeal - [Original Request Type]"

For Security Concerns:
Email: contact@quizaibuilder.ovh
Subject Line: "URGENT: Security Concern"

Response Times:

16. LEGAL DISCLAIMERS

16.1 No Absolute Privacy Guarantee

YOU ACKNOWLEDGE AND AGREE THAT:
  • No method of data transmission or storage is 100% secure
  • We cannot guarantee absolute protection against all security threats
  • You use the Platform and share information at your own risk
  • Third-party services maintain their own security practices

16.2 User Responsibility

You are responsible for:

16.3 Third-Party Practices

We are not responsible for:

16.4 Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR:

ACKNOWLEDGMENT AND CONSENT

BY USING THE PLATFORM, YOU ACKNOWLEDGE THAT:

  • You have read and understood this Privacy Policy
  • You consent to the collection and processing of information as described
  • You understand that pseudonym fields (Pseudo 1, Pseudo 2) should NOT contain your real name
  • You accept the security limitations and liability disclaimers
  • You consent to international data transfers
  • You acknowledge this Policy may be updated and continued use constitutes acceptance
  • You understand your data primarily remains within Google's infrastructure
  • You are responsible for not submitting student data or sensitive personal information
  • You understand your privacy rights and how to exercise them
  • You understand the appeals process if your privacy requests are denied

IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, DO NOT USE THE PLATFORM.

Google Forms™ and Google Workspace™ are trademarks of Google LLC. QUIZ AI Builder is not affiliated with, endorsed by, or sponsored by Google LLC.