Last updated: August 31, 2026 · Effective: August 31, 2026
Short version: Professor sends the text you select to our AI providers to generate an explanation. If you are not signed in, we don't store your text and we don't know who you are. If you sign in, the things you deliberately save — lookups, flashcards, notes, snips — are stored in your account so you can review and export them, and you can delete them (or your whole account) at any time.
When you use Professor to explain text, we process:
chrome.storage.local, used to enforce the free-tier rate limits (currently 20 lookups per day and 300 per month for signed-in free accounts, 1 preview lookup before sign-in). When you sign in, the device ID is linked to your account so your limits and history follow you. You can clear it at any time via Settings → Clear local data.Signed out: your selected text is not stored after the response is returned.
Signed in: your lookups (the term, its context, the explanation, and the page URL and title they came from) are saved to your lookup history, and anything you deliberately save — flashcards, notes, snip images, visuals, subjects — is stored in your account with its source page recorded, so provenance, review, and export work. That storage is the product: Professor's purpose is remembering what you looked up.
Professor relies on the following third parties to operate:
We are established in India, and the providers in §3 operate in the United States, the European Union, and on globally distributed infrastructure. Using Professor therefore involves transferring personal data across borders, including out of the European Economic Area, the United Kingdom, and India.
Where we transfer personal data of individuals in the EEA or UK to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum, where applicable), together with the transfer terms in our providers' data processing agreements. Cloudflare, Anthropic, Google, Clerk, Lemon Squeezy, and Sentry each publish a data processing addendum incorporating those clauses.
We apply the safeguards described in §12 to data in transit and at rest. You may request further information about the safeguards for a specific transfer by emailing support@readwithprofessor.com.
Where the EU or UK GDPR applies, we rely on the following legal bases:
We do not carry out automated decision-making that produces legal or similarly significant effects concerning you, and we do not use your data for profiling or advertising. We do not intentionally collect special-category data; if you select such text for explanation, it is processed only to answer that request, under Art. 9(2)(a) where applicable.
Professor ships with a pre-populated blocklist of sensitive domains (banking portals, HR systems, password managers). On these sites, Professor does not activate and no data is sent. You can view and edit the blocklist in Settings.
If you sign in (free or Pro), we store your email address and account records in our database (Cloudflare D1): your lookup history and the study artifacts you create — flashcards, review history, notes, snip images, visuals, and subjects. Free accounts have daily limits on lookups and creations; Pro removes them. If you subscribe to Pro, we additionally store your LemonSqueezy customer ID and subscription status.
You can delete everything yourself: Dashboard → Settings → Danger Zone sends a one-time code to your email and, once confirmed, permanently deletes your account data. You can also email support@readwithprofessor.com.
Signed-out lookups: not retained after the response is returned. Rate-limit counters: daily counters expire automatically within 48 hours; monthly counters within about 32 days. Device ID: stored locally in your browser until you clear it. Signed-in data (lookup history and saved artifacts): retained while your account exists so that upgrading, exporting, and reviewing keep working — the free plan displays the most recent 90 days of lookup history, but older entries remain stored and become visible again if you upgrade. Deleting an item removes it permanently; deleting your account (Settings → Danger Zone, or by email) removes all of it, completed within 30 days.
You can delete your data at any time, without contacting us and without giving a reason. This section is our complete deletion policy.
Any flashcard, note, snip, visual, subject, or lookup-history entry can be deleted from the dashboard or the extension. Deletion is immediate and permanent — deleted items are not recoverable and are not retained in a trash or archive.
Go to Dashboard → Settings → Danger Zone → Delete account. We email a one-time confirmation code to the address on your account. Once you enter it, we permanently delete your account and all associated data.
If you cannot access the dashboard, email support@readwithprofessor.com from the address registered to your account and we will carry out the same deletion. We may ask you to verify ownership of the account before acting.
Deletion from our live production database and object storage is immediate. Residual copies in encrypted infrastructure backups are overwritten on our provider's rolling backup cycle and are fully purged within 30 days. Backups are never used to restore deleted accounts.
Deleting your account also removes your authentication record from Clerk. Content previously transmitted to Anthropic or Google to generate a response is handled under those providers' retention policies (§3); neither uses it to train models, and neither retains it as part of a profile of you. Subscription records held by Lemon Squeezy are subject to their retention obligations as Merchant of Record.
If you never sign in, there is nothing to delete on our side: your selected text is not stored after the response is returned. The random device ID lives only in your browser and is removed by Settings → Clear local data or by uninstalling the extension.
Subject to the law that applies to you, you have the right to:
Exercise any right by emailing support@readwithprofessor.com. We respond within 30 days, and will tell you if we need longer because a request is complex. We do not charge for these requests or discriminate against you for making one. We may ask you to verify your identity before we act.
The legal bases in §5 and the transfer safeguards in §4 apply to you. You may lodge a complaint with your national supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk). As we are not established in the EU or UK, Article 27 of the GDPR may require us to appoint a representative there. We have not currently appointed one. Until we do, write to us directly at support@readwithprofessor.com and we will handle your request exactly as we would one made through a representative, on the timescales in §10. This does not affect your right to complain to your supervisory authority.
Under the Digital Personal Data Protection Act, 2023, Leanora Ventures Pvt Ltd is the Data Fiduciary and you are the Data Principal. We process your data for the lawful purpose of providing the Service, on the basis of your consent given when you sign in and use it, or for a legitimate use permitted by the Act. You may withdraw consent, request erasure, nominate another person to exercise your rights in the event of death or incapacity, and raise a grievance with our Grievance Officer (§16) before approaching the Data Protection Board of India.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by the CCPA/CPRA. We have not done so in the preceding 12 months. We do not knowingly sell the personal information of minors. You have the right to know, delete, correct, and limit use of sensitive personal information, and not to be discriminated against for exercising those rights — exercise them as described in §10.
We apply technical and organisational measures appropriate to the risk, including:
No system is perfectly secure, and we cannot guarantee absolute security.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of it, as required by the GDPR, and notify the Data Protection Board of India as required by the DPDP Act. Where the breach is likely to result in a high risk to you, we will notify you directly and without undue delay, describing what happened, the likely consequences, and the steps we are taking.
Professor is not directed at children. You must be at least 18 to hold an account, as explained in §3 of the Terms of Service. Under 18s may use the Service only through an account held and supervised by a parent or legal guardian.
We do not knowingly collect personal data from a child under 13 (or under the applicable age of digital consent — 16 in parts of the EEA, 18 under India's DPDP Act). We do not use children's data for tracking, profiling, or targeted advertising. If you believe a child has provided us personal data, email support@readwithprofessor.com and we will delete it promptly.
We may update this policy as features change. The "Last updated" date above reflects the most recent revision. For material changes that reduce your privacy protections, we will give at least 30 days' notice by email or a prominent in-product notice before they take effect. Continued use after the effective date constitutes acceptance.
Privacy questions, or to exercise any right in §10: support@readwithprofessor.com.
Grievance Officer (Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023):
The director responsible for data protection
Leanora Ventures Pvt Ltd
support@readwithprofessor.com, with the word “grievance” in the subject line
We acknowledge grievances within 24 hours and aim to resolve them within 15 days.
Professor is a Chrome extension, and our handling of your data is additionally governed by the Chrome Web Store User Data Policy.
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Our single purpose. Professor explains text you select on a web page, and turns what you read into study material you can review later. Every category of data we handle exists to serve that purpose:
What we do not do. We do not collect your browsing activity. Professor sends nothing to our servers until you actively invoke it on a selection, and it reads no page you have not asked it to act on. We do not use any of this data for advertising of any kind, we do not sell or share it, and we do not use it to build profiles or to train our own models. We do not transfer it to third parties except the processors named in §3, each of which acts only on our instructions to deliver the feature you asked for.
Human access. No person at Leanora Ventures reads your selections, explanations, notes, or captures, except: where you explicitly ask us to look at something to resolve a support request; where it is necessary to investigate abuse or a security incident; or where the law requires it.
These commitments match the data-handling declarations on our Chrome Web Store listing. If they ever diverge, this policy and the listing will both be corrected.