Privacy Policy

This Privacy Policy explains how LessonPilot, operated by Mads Vebø Byom, ("we", "us", "our") collects, uses, stores, and shares personal data when you use the LessonPilot browser extension, website, APIs, and related services.

1. Data We Collect

• Account data from Google Sign-In (name, email, Google account identifiers).
• Content data from text you select or submit for generation.
• Usage data such as generation counts, plan status, and quota usage.
• Product usage events for signed-in teachers — e.g. signing up, adding text, creating a lesson, and sharing it (with details like which button, the grade, and how long it took, but never the lesson text) — used to see where the product is hard to use and improve it.
• Advertising measurement on our website's teacher-facing pages via the Meta Pixel (page views and sign-up conversions). It is never loaded on student pages.
• Billing metadata from Stripe (we do not store full card numbers).
• Google Workspace and Classroom data, requested only when you choose to use a Google integration, and each only for the specific action you take:
  • Google Drive, file-scoped (scope: drive.file) — limited to files you open or create through LessonPilot; we cannot see or access any other file in your Drive. This one scope covers three features: creating the Google Doc containing the questions, worksheet, or reading text you generate; creating a Google Slides study-guide deck from content you generate; and importing a document you pick via Google Drive's picker.
  • Google Forms (scope: forms.body) — to create a quiz Form from the multiple-choice questions you generate, when you choose the Form option instead of a Doc.
  • Google Classroom courses, read-only (scope: classroom.courses.readonly) — to list the names of the active classes you teach, so you can pick which class to publish to. We only read course names and IDs; we do not read course content, rosters, or grades.
  • Google Classroom coursework (scope: classroom.coursework.students) — used only when you click "Publish" to create a new assignment (courseWork item) in the class you chose, attaching the Doc/Form/Slides you generated. We do not read, modify, or delete any existing coursework, and we never access student submissions, grades, or roster data.
• Basic technical logs used for reliability, security, and abuse prevention.

2. How We Use Data

• Authenticate users and manage sessions.
• Generate educational content.
• Enforce quotas and subscription entitlements.
• Process subscription and billing actions.
• Enable Google Docs and Google Classroom integrations.
• Maintain platform security and service quality.

3. Legal Bases for Processing

Depending on your location, we process personal data on one or more of these bases: to perform our contract with you, with your consent, to comply with legal obligations, and for legitimate interests such as service security, abuse prevention, troubleshooting, and product operations.

4. Google API Data

LessonPilot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Each Google scope listed in Section 1 is requested only at the moment you take the matching action (for example, the Classroom coursework scope is requested only when you click "Publish"), not on sign-in. Access tokens are issued directly to your browser by Google Identity Services; the browser calls the Google Drive, Docs, Forms, Slides, and Classroom APIs directly with that token. LessonPilot's servers never receive, log, or store your Google access token, and the token is kept only in memory in your browser tab for the duration of your session — it is discarded when you close or reload the page and is never written to a database.

We do not sell Google user data, use it for advertising or marketing purposes, or use Google Workspace API data to develop, improve, or train generalized AI or machine learning models. We do not share Google user data with any third party except Google itself (to fulfill the request you made) and, where legally required, law enforcement.

You can review or revoke LessonPilot's access to your Google account at any time at myaccount.google.com/permissions. Revoking access does not delete documents, Forms, or Slides already created in your Google Drive, or assignments already published to Google Classroom — those remain yours, in your Google account, since LessonPilot never retains a copy.

5. Third-Party Processors

We use OpenAI (generation), Google APIs (Sign-In/Docs/Classroom), Stripe (billing), Vercel (hosting), Supabase (database and file storage), Resend (email), Redis (quota counters), and Meta (advertising measurement on teacher-facing pages only). Data is processed only as needed to provide the service.

6. Data Retention

We retain data for as long as needed to operate LessonPilot, enforce limits, satisfy legal obligations, resolve disputes, and prevent abuse. Retention periods may vary by data type and operational need.

7. Data Sharing

We do not sell personal data. We share data only with essential service providers, integration providers you choose to connect, or when required by law, legal process, or to protect rights, safety, and service integrity.

8. International Data Transfers

LessonPilot and its service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for cross-border transfers.

9. Security

We use reasonable technical and organizational safeguards. No system is 100% secure.

10. Your Rights

Depending on your jurisdiction, you may request access, correction, export, or deletion of personal data, or object to or restrict certain processing. You may also withdraw consent where consent is the basis for processing.

11. Children and School Use

LessonPilot is intended for educators. We do not collect personal data from students who use shared lesson links (see Students above). Teachers should not put students' personal information into the text they submit for generation; if you use LessonPilot in an educational setting, you are responsible for ensuring you have the necessary authority to submit any student-related content to the service.

12. Changes to This Policy

We may update this policy. Changes are posted on this page with a revised date.

13. Contact

For privacy requests, deletion requests, or questions about this Privacy Policy: madsbyom@norevostudio.com