Privacy Policy

1. Purpose of This Platform

MBA Study Hub is a private, student-initiated educational web platform developed for enrolled students and faculty participating in the MBA Semester 2 academic curriculum. The platform facilitates study-material organization, weekly live-lecture slide access, academic question retrieval (RAG-based AI Tutor), guided concept lessons, and self-assessment practice quizzes.

This Privacy Policy explains how information is collected, processed, and stored when you access and use the platform. Access to the platform is private and approval-gated by course administrators.

2. Information Collected

The platform collects only the minimum technical and operational data required to deliver educational services:

• Google Account Profile: When signing in through Google OAuth, we receive your email address, full name, profile picture URL (avatar), and Google user identifier.
• Authentication & Role Records: Unique authentication identifier, assigned role (student, professor, or admin), account status (pending, approved, suspended, or rejected), account creation timestamp, and last login timestamp stored in our database.
• Academic & Course Materials: Teaching learning materials (TLM), lecture presentations (.pptx, .ppt), lecture notes, syllabus outlines, and case studies uploaded by approved faculty or administrators, including file titles, MIME types, file sizes, cryptographic hashes (SHA-256), and extracted slide text.
• Practice & Assessment Records: When you complete self-study practice quizzes, the database records your student account identifier, attempt number, selected answer options, whether answers were correct, total score percentage, and submission timestamps.
• Guided Lesson Progress: Step-by-step progress through weekly guided lessons is stored locally in your browser’s LocalStorage, scoped strictly to your user account, subject, and week. This progress is not uploaded to centralized server databases.
• Administrative Audit Logs: Security actions—including file deletions, user status approvals/suspensions, subject assignments, and AI safety kill-switch toggles—record the performing administrator’s user ID, target entity, timestamp, and a structured details payload for governance traceability.
• Transient AI Telemetry: In-memory ephemeral counters track daily AI model invocation counts to enforce safety rate limits (max 20 requests/minute, 100/day). These transient counters are kept in server memory and pruned within 24 hours. Full query logs and conversational transcripts are not permanently archived in database tables.

3. Third-Party Infrastructure & Data Processors

MBA Study Hub does not sell, rent, or monetize student information. We utilize trusted third-party cloud infrastructure providers strictly to execute application functions:

4. AI Tutoring & Content Retrieval (RAG)

The platform provides AI-assisted learning tools: the free-form AI Tutor and Guided AI Lessons. These tools operate under strict academic integrity boundaries:

• Local Grounding (Zero Hallucination): Student questions are matched against indexed course slide excerpts using local database full-text search (FTS5). The AI model is invoked only if relevant course material is found. If no matching material exists, a deterministic refusal is returned immediately without contacting the AI model.
• AI Model Execution: AI inferences are processed through Cloudflare Workers AI using open-weight language models (e.g. @cf/zai-org/glm-4.7-flash). Excerpts of course slides and the student’s prompt are transmitted to the model solely to generate the tutoring explanation.
• No External Training on Student Data: Course queries and student prompts are processed ephemerally for real-time response generation. They are not sold, shared with advertising brokers, or used to train third-party public models.
• Source Provenance: Every generated explanation is accompanied by genuine file and slide citations so students can verify all claims directly against official faculty presentations.

5. Cookies & Local Storage

The platform uses essential cookies and browser storage strictly required for security and core functionality:

We do not use advertising, marketing, profiling, or cross-site tracking cookies.

6. Data Retention, Account Access & Student Rights

Retention: Your user profile, role, and practice quiz scores are retained in Cloudflare D1 for the duration of the academic semester to maintain continuity of student access and progress history.

Account Suspension: Course administrators reserve the right to suspend or reject user accounts that violate academic policies or misrepresent student enrollment.

Data Inquiries & Deletion Requests: Because this is an academic study hub without an automated self-serve deletion button in the user dashboard, students wishing to inquire about their stored records or request account removal should contact the course administrator at the contact address below.

7. Contact Information

For privacy inquiries, account access questions, or data corrections regarding the MBA Study Hub, please reach out to the project administrator: