Privacy Policy

Last updated: August 13, 2026

Cordero (“Cordero”, “we”, “us”) is an AI-assisted study tool available at cordero.study, operated by Martin Merener, a sole proprietor located in Ontario, Canada.

This policy explains what personal information we collect, why, who we share it with, and the rights and choices you have. Questions or requests: support@cordero.study.

Who this applies to / age

Cordero is intended for users 13 years of age or older. If you are under the age of majority where you live (18 in Ontario), you may use Cordero only with the consent and involvement of a parent or guardian. Cordero is not directed to children under 13, and we do not knowingly collect their personal information.

What we collect

Account information

• Email address — used to create and secure your account and to send account emails (confirmation, password reset). Your email and password are handled by our authentication provider, Supabase. We do not store your email or password in Cordero’s own database. We keep only a one-way cryptographic hash of your email (see “How long we keep it, and deletion”).

Study information (the content you choose to submit)

• Material you provide to study — text you paste, a URL you supply, or a PDF you upload. For PDFs, we extract the text and store the text only; we do not keep the original file.
• Content you create, and content the service produces from your material: study items it extracts, questions and “ideal” answers it generates, your typed answers, and your scores.

Technical and operational information

• A session token issued by Supabase when you log in, stored in your browser’s local storage so you stay signed in.
• Usage and billing records — counts of AI tokens used and the estimated cost of each operation, used to enforce your plan’s budget. These contain numbers, not your study content.
• A security log used to detect attempts to manipulate the AI (“prompt injection”). This may contain a short excerpt of text you submitted, plus which patterns matched.

We do not use third-party analytics or advertising trackers.

How we use your information

• To provide the service: analyze your material, extract study items from it, generate questions and “ideal” answers, and evaluate and score your answers. Doing this requires sending your study material and answers to our AI provider (OpenAI) — see below.
• To create, secure, and manage your account.
• To measure AI usage and enforce your plan’s budget and rate limits.
• To detect and prevent abuse, fraud, and misuse.
• To respond to your support and privacy requests.

Who we share it with (service providers)

We use a small number of service providers to run Cordero. We do not sell your personal information.

• OpenAI — we send your study material, generated content, and your answers to OpenAI’s API to generate questions and score answers. Per OpenAI’s API terms, data sent through the API is not used to train their models by default.
• Supabase — authentication (your email and password) and our database (your study data).
• Render — hosting and compute for the application.
• Resend — delivers our account emails (confirmation, password reset).
• Porkbun — forwards email sent to support@cordero.study to our inbox.
• Payments (when paid plans launch): Lemon Squeezy, acting as Merchant of Record. Your payment card details are handled by Lemon Squeezy and never touch Cordero; we would receive only limited billing identifiers (such as a customer/subscription ID and status).

Where your information is stored (outside Canada)

Cordero’s hosting and database (Render and Supabase) are located in the United States (Oregon), and our AI provider (OpenAI) processes data in the United States. This means your personal information is processed and stored outside Canada, in the United States, where it may be accessible to U.S. authorities under U.S. law. By using Cordero, you consent to this transfer.

How long we keep it, and deletion

• We keep your account and study information for as long as your account exists.
• You can export your data and delete your account at any time from within the app. Deleting your account removes your study content, answers, scores, usage/billing records, and security logs from our database, and deletes your login from Supabase.
• If you have a paid subscription, deleting your account also cancels that subscription at Lemon Squeezy, so no further payments are taken. Lemon Squeezy keeps its own record of past transactions, because as Merchant of Record it must do so for tax and accounting law. That record is held under Lemon Squeezy’s privacy policy, not ours.
• One exception (abuse prevention): we retain a one-way SHA-256 hash of your email address after deletion. This lets us prevent repeated delete-and-recreate cycles used to abuse free usage. It is non-reversible — it cannot be turned back into your email address — and it is not used to contact you or for any other purpose.

Your rights

Under Canadian privacy law (PIPEDA), you may:

• access the personal information we hold about you (much of it is available through in-app export),
• ask us to correct it,
• delete your account and data,
• withdraw consent (note that this may mean you can no longer use the service), and
• make a complaint. Please contact us first at support@cordero.study; you may also contact the Office of the Privacy Commissioner of Canada.

Security

We use reasonable measures to protect your information, including encrypted connections (HTTPS) and reputable service providers. Note that your session token is stored in your browser’s local storage; keep your device secure and log out on shared computers. No method of transmission or storage is perfectly secure.

Changes

We may update this policy. We will change the “Last updated” date above and, for material changes, take reasonable steps to notify you.

Contact

Questions, or to exercise your rights: support@cordero.study.