Privacy Policy

Last updated: September 10, 2026

Cordero (“Cordero”, “we”, “us”) is an AI-assisted study tool available at cordero.study, operated by Martin Merener, a sole proprietor located in Ontario, Canada.

This policy explains what personal information we collect, why, who we share it with, and the rights and choices you have. Questions or requests: support@cordero.study.

Who this applies to / age

Cordero is intended for users 13 years of age or older. If you are under the age of majority where you live (18 in Ontario), you may use Cordero only with the consent and involvement of a parent or guardian. Cordero is not directed to children under 13, and we do not knowingly collect their personal information.

What we collect

Account information

• Email address — used to create and secure your account and to send account emails (confirmation, password reset). Your email and password are handled by our authentication provider, Supabase. We do not store your email or password in Cordero’s own database. We keep only a one-way cryptographic hash of your email (see “How long we keep it, and deletion”).
• If you sign in with Google (optional) — you may create your account or sign in using Google instead of a password. Google then confirms your identity to our authentication provider, Supabase, and shares your email address and basic profile information (such as your name and profile picture). We do not receive your Google password, and we request no other access to your Google account. If you already have a Cordero account with the same verified email address, signing in with Google uses that existing account rather than creating a second one. Google’s handling of your information is governed by Google’s own privacy policy.

Study information (the content you choose to submit)

• Material you provide to study — text you paste, a URL you supply, or a PDF you upload. For PDFs, we extract the text and store the text only; we do not keep the original file.
• Content you create, and content the service produces from your material: study items it extracts, questions and “ideal” answers it generates, your typed answers, and your scores.

Technical and operational information

• A session token issued by Supabase when you log in, stored in your browser’s local storage so you stay signed in.
• Usage and billing records — counts of AI tokens used and the estimated cost of each operation, used to enforce your plan’s budget. These contain numbers, not your study content.
• A security log used to detect attempts to manipulate the AI (“prompt injection”). This may contain a short excerpt of text you submitted, plus which patterns matched.

We do not use third-party analytics or advertising trackers.

How we use your information

• To provide the service: analyze your material, extract study items from it, generate questions and “ideal” answers, and evaluate and score your answers. Doing this requires sending your study material and answers to our AI provider (OpenAI) — see below.
• To create, secure, and manage your account.
• To measure AI usage and enforce your plan’s budget and rate limits.
• To detect and prevent abuse, fraud, and misuse.
• To respond to your support and privacy requests.

Who we share it with (service providers)

We use a small number of service providers to run Cordero. We do not sell your personal information.

• OpenAI — we send your study material, generated content, and your answers to OpenAI’s API to generate questions and score answers. Per OpenAI’s API terms, data sent through the API is not used to train their models by default.
• Supabase — authentication (your email and password, or your Google sign-in) and our database (your study data).
• Render — hosting and compute for the application.
• Resend — delivers our account emails (confirmation, password reset).
• Porkbun — forwards email sent to support@cordero.study to our inbox.
• Google — only if you choose to sign in with Google. Google verifies your identity and provides your email address and basic profile information. We share nothing with Google beyond what the sign-in itself requires.
• Payments: Lemon Squeezy, acting as Merchant of Record. Your payment card details are handled by Lemon Squeezy and never touch Cordero; we receive only limited billing identifiers (such as a customer/subscription ID and status). As Merchant of Record, Lemon Squeezy is the seller of record and handles sales tax on your purchase.

Where your information is stored (outside Canada)

Cordero’s hosting and database (Render and Supabase) are located in the United States (Oregon), and our AI provider (OpenAI) processes data in the United States. This means your personal information is processed and stored outside Canada, in the United States, where it may be accessible to U.S. authorities under U.S. law. By using Cordero, you consent to this transfer.

How long we keep it, and deletion

• We keep your account and study information for as long as your account exists.
• You can export your data and delete your account at any time from within the app. Deleting your account removes your study content, answers, scores, usage/billing records, and security logs from our database, and deletes your login from Supabase.
• If you have a paid subscription, deleting your account also cancels that subscription at Lemon Squeezy, so no further payments are taken. Lemon Squeezy keeps its own record of past transactions, because as Merchant of Record it must do so for tax and accounting law. That record is held under Lemon Squeezy’s privacy policy, not ours.
• If you signed in with Google: deleting your Cordero account does not disconnect Cordero from your Google account — that permission lives in your Google account, not ours, so we cannot remove it. You can remove it yourself at myaccount.google.com/permissions.
• One exception (abuse prevention): we retain a one-way SHA-256 hash of your email address after deletion. This lets us prevent repeated delete-and-recreate cycles used to abuse free usage. It is non-reversible — it cannot be turned back into your email address — and it is not used to contact you or for any other purpose.

Your rights

Under Canadian privacy law (PIPEDA), you may:

• access the personal information we hold about you (much of it is available through in-app export),
• ask us to correct it,
• delete your account and data,
• withdraw consent (note that this may mean you can no longer use the service), and
• make a complaint. Please contact us first at support@cordero.study; you may also contact the Office of the Privacy Commissioner of Canada.

Security

We use reasonable measures to protect your information, including encrypted connections (HTTPS) and reputable service providers. Note that your session token is stored in your browser’s local storage; keep your device secure and log out on shared computers. No method of transmission or storage is perfectly secure.

Changes

We may update this policy. We will change the “Last updated” date above and, for material changes, take reasonable steps to notify you.

Contact

Questions, or to exercise your rights: support@cordero.study.