Privacy Policy

At SagePath, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered ancient Chinese classics learning platform. By using SagePath, you agree to the practices described in this policy.

We collect the following types of information to provide and improve our services:

• Account Information: If you sign in with an email link or Google Sign-In, Supabase processes your authentication information, including your email address and the identity information returned by the selected sign-in provider.
• Learning Records: Before sign-in, your selected texts, learning profile, conversation history, quiz results, and streaks may be held in your browser. When you sign in, SagePath can sync existing and future learning records to your account in Supabase so they can be restored in later sessions.
• AI Interaction Data: Questions, messages, and learning context sent to the AI tutor are processed to provide responses. SagePath may also create learning-memory summaries from conversations for a signed-in account.
• Device Data: We use browser localStorage for preferences, selected texts, learning state, and temporary application or authentication state.
• Usage Analytics: Vercel Analytics may process browser usage information to help us understand use of the service.

Your information is used for the following purposes:

• Personalized Learning: To tailor the learning experience based on your progress, preferences, and interaction history.
• Progress Tracking and Sync: To maintain your learning records and, after sign-in, make them available through your account.
• Service Improvement: To analyze usage patterns and enhance our AI tutoring capabilities and platform features.
• Account Management: To authenticate your identity, secure your account, and send important service updates.
• Customer Support: To respond to your inquiries and provide technical assistance when needed.

Data is held in the places described below. This summary describes the current product behavior and is not a guarantee of any provider's security practices.

• Supabase Cloud Storage: Supabase provides authentication and database services for signed-in accounts and the learning records synced to them.
• Browser Storage: Data saved in browser localStorage starts on your device. Signing in can cause SagePath learning records to be sent to Supabase for account sync.
• Network Requests: Your browser sends requests to the service and to the providers listed below when you use the corresponding feature.

We use the following providers for the corresponding product functions:

• DeepSeek: Processes AI-tutor messages and relevant learning context to generate responses and learning-memory summaries.
• Supabase: Provides authentication, database, and storage services for accounts and synced learning records.
• Google Sign-In: Is an optional sign-in method. If you choose it, Google and Supabase process the sign-in flow.
• Paddle: Processes payment checkout information only when a paid option is offered and you open its checkout.
• Vercel and Vercel Analytics: Host SagePath, serve the application, and provide web-usage analytics.
• Google Fonts: Are loaded by your browser to display the site's typography.

These providers process information under their own terms and privacy notices. Review those notices before using a provider-specific feature.

The data controls in SagePath Setup are device-only: a download exports supported SagePath data stored in the current browser, and clearing device data clears only that browser's local data. These actions do not delete cloud data or your account.

To request cloud-data or account deletion, send the separate email request to contact@sagepath.xyz. We may need to verify that the request comes from the account-associated email address before acting on it. The email request process is separate from the device-only controls.

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

To exercise any of these rights, please contact us at contact@sagepath.xyz. We may need to verify your request before acting on it.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: While we do not sell personal information, you have the right to opt-out of any future sale.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your CCPA rights, please contact us at contact@sagepath.xyz.

SagePath uses browser localStorage to store:

• Your theme preference (light/dark mode)
• Language settings
• Session tokens for authentication
• Temporary UI state

localStorage data is device-only until a feature sends it to a provider; signing in can sync SagePath learning records to Supabase. You can clear browser data through your browser settings or SagePath Setup, but this does not delete cloud data or your account. Third-party providers may use their own browser technologies according to their notices.

SagePath is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at contact@sagepath.xyz, and we will take steps to delete such information.

We retain personal information while it is needed to operate the service, respond to a verified request, or meet applicable legal and operational obligations. This policy does not promise an automated fixed deletion timeframe. Some records may need to be retained where required for security, fraud prevention, payment, or legal obligations.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.