Privacy Policy.

Selectory ("we", "us", "our") is a web-based quiz automation tool operated by an independent sole developer in the Republic of the Philippines. We can be reached at tropeo123@gmail.com.

This Privacy Policy explains how we collect, use, store, and share your personal information when you use the Service at https://selectory.uk/.

By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

2.1 Information You Provide Directly

• Account information: Your email address and password when you register.
• Run configuration: Subject name, Moodle URL, score threshold, and attempt allocation settings you enter when starting a run.
• LMS credentials: Your Moodle username and password entered at run start. See Section 4 for how these are handled.

2.2 Information Generated by Your Use of the Service

• Run history: Records of automation runs you start, including subject name, quiz names, attempt counts, scores, and run status.
• Quiz results: Per-question data including question text, AI-generated answers, correct answers (where available), and whether answers were correct.
• Credit transactions: Records of credit purchases and deductions tied to your account.
• Payment records: Purchase amounts, plan type, and PayMongo payment reference IDs. We do not store card numbers, GCash credentials, or other sensitive payment data.

2.3 Information Collected Automatically

• Server logs: Basic access logs collected by our hosting provider, Google Cloud Platform. These may include IP addresses, request timestamps, and HTTP status codes.
• Session data: Authentication session tokens managed by Supabase Auth stored in browser cookies.

We use the information we collect for the following purposes:

• To create and manage your account.
• To authenticate you and maintain your session.
• To execute automation runs on your behalf on the LMS platform.
• To display your run history, quiz results, and credit balance in your dashboard.
• To process payments and maintain your credit ledger.
• To send transactional emails such as payment confirmations, run notifications, and intervention alerts.
• To investigate and respond to support requests or appeals submitted to our email.
• To detect, prevent, and respond to fraud, abuse, or security incidents.
• To comply with applicable laws and regulations of the Republic of the Philippines.

We do not use your personal information for advertising, profiling, or sale to third parties.

We now support linking one LMS account to multiple Selectory users when those users voluntarily configure that shared account. When you initiate or reconnect an LMS account, your credentials are transmitted over HTTPS and used to authenticate with the LMS platform on your behalf.

To reduce repeated login overhead and support multi-user collaboration, we may store encrypted LMS authentication artifacts (for example, session artifacts) and LMS-derived cache data (such as courses, quizzes, and metadata snapshots) for a limited period.

• We do not intentionally store plaintext LMS passwords in persistent storage.
• Stored LMS artifacts are encrypted at rest and access-controlled.
• Cache artifacts are time-limited and are refreshed or invalidated according to our retention policy.
• If authentication fails (e.g., password changed), we require re-verification before live LMS actions can continue.

If you share an LMS account with other users in Selectory, you represent that all affected persons are authorized to use that LMS account and consent to this linked configuration.

Important: When you use the Service, the text content of your quiz questions is sent to third-party AI providers to generate suggested answers. By using the Service, you acknowledge and consent to this.

Quiz question text transmitted to these providers may include academic content from your institution’s LMS. We do not send your name, email address, student number, or account information to AI providers - only the anonymous text content of quiz questions.

Each AI provider has their own data retention and usage policies. We encourage you to review their respective privacy policies linked above. We are not responsible for how these third-party providers handle data once it is transmitted to them.

We rely on the following third-party services to operate the platform. Each acts as a data processor or sub-processor under their respective terms:

We use cookies solely for authentication purposes. Specifically:

• Supabase Auth session cookies: Set when you log in to maintain your authenticated session. These are essential for the Service to function and cannot be disabled while using the platform.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. We do not use Google Analytics or any client-side analytics scripts on the platform.

We retain your personal data for as long as your account remains active. Specifically:

• Account information: Retained indefinitely while your account is active.
• Run history and quiz results: Retained indefinitely. We do not currently have an automatic purge policy for historical run data.
• Credit and payment records: Retained indefinitely for financial record-keeping purposes.
• Cached LMS artifacts (courses, quizzes, metadata snapshots): Retained for operational caching windows (typically 24-72 hours) and refreshed or removed based on system policy.
• Encrypted LMS authentication artifacts: Retained only as long as needed to support authenticated LMS access and deleted or rotated after expiration, re-verification, or account unlinking.
• Server logs: Retained according to Google Cloud Platform's infrastructure logging policies, which are outside our direct control.

If you request account deletion, all personal data associated with your account will be permanently deleted from our systems within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data:

• Right to be informed: You have the right to know how your personal data is being collected, processed, and used - which this Privacy Policy fulfills.
• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data and account. You can do this by emailing us or through the account settings page on the platform.
• Right to object: You may object to the processing of your personal data in certain circumstances.

To exercise any of the above rights, contact us at tropeo123@gmail.com. We will respond within a reasonable period and no later than thirty (30) days from receipt of your request.

The Service is intended for users who are at least sixteen (16) years of age. We do not knowingly collect personal information from users under the age of sixteen (16).

If we become aware that a user under the age of sixteen (16) has created an account or provided us with personal information, we will terminate the account and delete the associated data promptly.

If you are a parent or guardian and believe your child under the age of sixteen (16) has used the Service, please contact us at tropeo123@gmail.com.

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• HTTPS encryption for all data in transit.
• Row-Level Security (RLS) policies on our database ensuring users can only access their own data.
• Supabase Auth for secure credential management.
• No storage of plaintext LMS credentials or sensitive payment data on our servers; encrypted LMS artifacts are stored only as required for account linking and cache refresh workflows.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data. In the event of a data breach affecting your rights and freedoms, we will notify affected users as required by applicable law.

We may update this Privacy Policy from time to time. Changes will be posted to this page with an updated effective date. For material changes, we will attempt to notify registered users via email.

Your continued use of the Service after any changes are posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Selectory - Privacy Policy - Effective June 21, 2026