Privacy Policy

1. Introduction

This Privacy Policy explains what information Exam Platform (the "Service") collects, how it is used, and the choices you have.

2. Information We Collect

• Account information: name and email address, and a hashed password if you sign up with email. If you sign up with Google, we receive your name, email address, and profile image from Google.
• Exam activity: the exams you attempt, your answers, scores, and progress, so we can show your history and let you resume in-progress attempts.
• Session and device data: login session identifiers and basic technical data (such as browser and device type) needed to keep you signed in and to diagnose errors.

3. How We Use Your Information

We use the information above to:

• Provide and operate the Service, including exam scoring.
• Let you sign in and manage your account.
• Send transactional emails you request, such as password reset links.
• Diagnose and fix errors in the Service.
• Generate AI-assisted explanations for exam questions, where this feature is available.

We do not sell your personal information, and we do not use your exam content or answers to train third-party AI models.

4. Third-Party Services

We rely on the following third-party services to operate the Service, each of which processes a limited slice of data on our behalf:

• Google, for "Sign in with Google" authentication.
• Resend, to deliver transactional emails such as password reset links.
• Sentry, to record error reports so we can fix bugs. Error reports may include technical details about your browser and the page you were on.
• Cloudflare, for hosting, media storage, and infrastructure.
• OpenAI, to generate AI-assisted explanations for exam questions, once that feature is available. Only the relevant question content is sent, not your account information.
• A payment processor (Stripe), to handle Premium subscription billing, once payments are available. We do not store your card details ourselves.

5. Data Retention

We keep your account and exam data for as long as your account is active, so your history and progress remain available to you. If you delete your account, this data is deleted along with it.

6. Data Security

We use reasonable technical measures to protect your data, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

You can review and update your name, change your password, see which sessions are signed in, and revoke a session at any time from Account Settings. You can also permanently delete your account and all associated data from Account Settings at any time. To request a copy of your data or ask a question about your rights, contact us using the details below.

8. Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes take effect means you accept the updated policy.

10. Contact Us

Questions about this Privacy Policy or your data can be sent to support@yourdomain.com.