Jeva Technologies OPC ("Company", "we", "us", or "our") operates the Lesson Plan HQ platform at lessonplanhq.com ("Service"). This Privacy Policy explains what personal data we collect, how we use it, and the rights you have regarding your data.

We are committed to protecting your privacy in accordance with applicable data protection laws across our operating jurisdictions, including:

FERPA and COPPA — United States
Personal Data Protection Act (PDPA) — Singapore
Data Privacy Act of 2012 / Republic Act No. 10173 — Philippines
Undang-Undang Perlindungan Data Pribadi (UU PDP) — Indonesia
UK GDPR and Data Protection Act 2018 — United Kingdom (future market)

Where local law provides you with rights that are stronger than those described in this policy, those local rights apply.

1. Data We Collect

Information you provide directly

Account data: name, email address, school or institution name, country, and password when you register.
Profile data: grade level, subject area, and curriculum preferences you configure.
Billing data: payment details processed securely through Paddle, our third-party payment processor and Merchant of Record. We do not store full card numbers.
Support communications: messages, attachments, and other information you send us when requesting help.

Information generated through your use of the Service

AI prompts and inputs: the text, topics, and parameters you submit to generate lesson plans, quizzes, and visual aids.
Generated outputs: lesson plans, quizzes, and other content produced for your account.
Usage data: features used, actions taken, pages visited, generation history, credit usage, and session duration.
Quiz session data: when you host a live quiz, we collect self-chosen display names (pseudonymous), quiz responses, and session timestamps. No real names or accounts are required from participants.

Information collected automatically

Device and browser data: IP address, browser type and version, operating system, device identifiers, and time zone.
Log data: server logs including access times, referring URLs, and error reports.
Cookies and similar technologies: see Section 9 for details.

2. How We Use Your Data

We use your personal data to:

Create and manage your account and authenticate your identity.
Provide, operate, and improve the Service and its AI features.
Process payments and send billing-related communications.
Send transactional emails (e.g., account confirmation, password reset).
Send product updates, tips, and marketing communications — you can opt out at any time.
Respond to support requests and investigate issues.
Detect and prevent fraud, abuse, and security threats.
Comply with legal obligations across applicable jurisdictions.
Analyze usage patterns to improve user experience and develop new features.

3. AI Processing and Third-Party AI Providers

To generate lesson plans, visual aids, and quizzes, your input prompts are sent to third-party AI model providers (which may include providers such as Anthropic, Google, or OpenAI). These providers process your prompts on our behalf under data processing agreements. We take the following precautions:

We do not use your prompts or generated outputs to train any AI models — by us or by our providers, under our agreements with them.
Do not include personally identifiable information about students or third parties in your AI prompts.
Prompts and generated outputs may be temporarily cached or logged solely for quality assurance, error debugging, and abuse detection, subject to our data retention limits in Section 7.
AI providers may be located outside your country. We ensure appropriate data transfer safeguards are in place (see Section 11).

4. Legal Bases for Processing

We process your personal data on the following legal bases, which apply across our target jurisdictions:

Consent: for marketing communications, optional cookies, and any processing beyond what is strictly necessary to provide the Service.
Contract performance: to provide the Service you have subscribed to, including processing payments through Paddle.
Legitimate interest: for security, fraud prevention, product analytics, and service improvement — where not overridden by your rights.
Legal obligation: to comply with applicable laws and regulatory requirements in the Philippines, Singapore, the United States, Indonesia, and other jurisdictions where we operate.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share it with:

Service providers: third parties who help us operate the Service (hosting infrastructure, Paddle for payment processing, AI model providers, email delivery, analytics) under data processing agreements that restrict their use of your data.
Business transfers: if Jeva Technologies OPC is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
Legal requirements: when required by law, court order, or government authority in any jurisdiction where we operate, or to protect the rights, property, or safety of the Company, our users, or the public.

6. Student Data

Lesson Plan HQ is designed for educators, not students. We do not knowingly collect personal data from students under the age of 13 (or the applicable minimum age in your jurisdiction, including 13 under COPPA in the US).

If you are a teacher using the Service in connection with students:

Do not enter student names, ID numbers, or other personally identifiable student information into AI generation prompts.
Our live quiz feature collects only a self-chosen display name and quiz responses for session identification purposes. Display names are pseudonymous — participants choose any name freely and are not required to provide their real name. Students do not create accounts.
You are responsible for obtaining any required parental or institutional consent under applicable law (including FERPA, COPPA, PDPA, or equivalent) before having students participate in any Service activity.
Quiz response data (aggregate scores and answers) is only accessible to the teacher who hosted the quiz and is not used for advertising or shared with third parties.

If you believe we have inadvertently collected personal data from a minor, please contact us immediately at privacy@lessonplanhq.com.

7. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service. Specifically:

Account data: retained while your account is active and for up to 90 days after deletion to allow for account recovery, then permanently deleted.
Generated content: retained in your account until you delete it or close your account.
Billing records: retained for 7 years to comply with applicable tax and accounting requirements across our operating jurisdictions.
AI prompt logs: retained for up to 30 days for security and quality assurance, then deleted or fully anonymized.
Quiz session data: retained for 90 days after the session ends, then deleted.
Usage analytics: retained in aggregated, anonymized form indefinitely.

8. Data Security

We implement technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

HTTPS encryption for all data in transit.
Encrypted storage of passwords using industry-standard hashing.
Access controls and least-privilege principles for internal systems.
Regular security reviews and vulnerability assessments.

No method of transmission or storage is 100% secure. In the event of a data breach that affects your rights, we will notify affected users and relevant data protection authorities in accordance with applicable law in each jurisdiction (including the Philippine National Privacy Commission, and any applicable requirements under US state law, Singapore PDPA, or Indonesian UU PDP).

9. Cookies and Tracking Technologies

We use the following types of cookies:

Essential cookies: required for the Service to function (e.g., session authentication). These cannot be disabled.
Analytics cookies: help us understand how the Service is used so we can improve it. You may opt out via your browser settings or our cookie banner.
Preference cookies: remember your settings and customizations (e.g., curriculum format, region).

You can control cookies through your browser settings or our cookie consent tool. Disabling non-essential cookies will not prevent you from using the core features of the Service.

10. Your Rights

Depending on your jurisdiction, you have some or all of the following rights regarding your personal data:

Access: request a copy of the personal data we hold about you.
Correction: request that we correct inaccurate or incomplete data.
Erasure / deletion: request deletion of your personal data, subject to legal retention requirements.
Portability: receive your data in a structured, machine-readable format.
Object / withdraw consent: opt out of marketing communications or object to processing based on legitimate interest.
Restriction: request that we limit how we process your data in certain circumstances.

To exercise your rights, contact us at privacy@lessonplanhq.com. We will respond within 30 days (or sooner where required by local law).

Jurisdiction-specific complaint rights

Philippines: file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph .
Singapore: file a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg
Indonesia: file a complaint with the Kementerian Komunikasi dan Digital (Komdigi).
United States: contact your state Attorney General or the FTC for consumer privacy concerns. California residents may have additional rights under CCPA.

11. International Data Transfers

Our Service is hosted and operated with infrastructure that may be located outside your country of residence, including servers in the United States and the Asia-Pacific region. When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as:

Data processing agreements with service providers incorporating standard contractual clauses or equivalent protections.
Using providers that maintain recognized certifications or compliance frameworks appropriate to your jurisdiction.

By using the Service, you acknowledge that your data may be transferred to and processed in countries that may have different data protection standards than your own. We take steps to ensure your data remains protected regardless of where it is processed.

12. California Residents (CCPA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA):

The right to know what personal information we collect, use, disclose, and sell.
The right to delete personal information we have collected from you.
The right to opt out of the sale of your personal information. We do not sell personal information.
The right to non-discrimination for exercising your CCPA rights.

To exercise these rights, contact us at privacy@lessonplanhq.com. We will respond within 45 days as required by CCPA.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on the Service at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact and Data Protection

For any privacy-related questions, requests, or concerns, please contact us:

Company: Jeva Technologies OPC
Privacy email: privacy@lessonplanhq.com
Support email: support@lessonplanhq.com
Website: lessonplanhq.com

We aim to respond to all privacy inquiries within 30 days. For urgent data breach notifications, please include "URGENT" in your subject line.