Back to Home
Data Protection

Privacy Policy

Last updated: August 26, 2026

BigO ("we", "our", or "us") values your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and application.

1. Information We Collect

We collect information to provide better services to our users:

  • Account Information: When you register an account or sign in using OAuth (Google, GitHub), we collect your name, email address, profile avatar URL, and authentication identifiers.
  • Practice & Activity Data: We track your problem completion status, revision logs, custom notes, practice streak counters, and time spent on DSA patterns.
  • Feedback & Support Submissions: When you submit a bug report or feedback, we collect your title, description, category, severity rating, and current page URL.
  • Technical & Device Data: For security and rate limiting purposes (such as limiting feedback submissions to 5 per day), we record IP addresses, browser user agent strings, and request timestamps.

2. How We Use Your Information

  • To provide, operate, maintain, and personalize the BigO platform and dashboard analytics.
  • To measure your learning progress, generate activity heatmaps, and save problem revision lists.
  • To enforce rate limits (max 5 feedback/reports per 24 hours) and prevent system abuse.
  • To notify platform administrators of bug reports and user feedback via automated emails.
  • To send essential transactional notifications (such as OTP verification codes or password reset links).

3. Cookies and Local Storage

We use session cookies and browser Local Storage to maintain your logged-in state, remember your theme preference (Dark/Light mode), and cache client-side query results for fast page loads. We do NOT use invasive third-party tracking cookies or sell your browsing history to advertising networks.

4. Third-Party Infrastructure & Service Providers

We partner with reputable cloud infrastructure providers to run BigO securely:

  • MongoDB Atlas: Encrypted database storage for user profiles and progress logs.
  • Upstash Redis: High-performance rate limiting and transient caching.
  • Resend API: Transactional email delivery service for verification emails and admin notifications.
  • Google & GitHub OAuth: Secure single-sign-on authentication options.

5. Data Security & Retention

We employ industry-standard encryption protocols (TLS/HTTPS in transit, AES encryption at rest) to safeguard your personal data. We retain your account information for as long as your account remains active.

6. Your Rights & Data Export

You have full control over your personal data:

  • Data Export: You can download a complete JSON export of all your profile data and progress logs anytime via the account menu or at /api/export.
  • Account Deletion: You can request complete deletion of your account and associated data by contacting our support team.

7. Privacy Policy Updates & Contact

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated timestamp.

If you have any questions or privacy inquiries, please visit our Contact Page or email us at support@bigoprep.tech.