Privacy & data notice
You own your results. We collect only what is needed to score exams fairly and keep certificates credible.
What we collect during exams
| Data | When | Why | Kept for |
|---|---|---|---|
| Your answers and task state | All exams | Scoring and reproducibility | Life of your account |
| Keystroke timing (not content outside the exam) | Typing & task exams | WPM/accuracy and integrity plausibility | 12 months (telemetry) |
| Focus, paste and window events | All non-practice exams | Integrity signals | 12 months |
| Webcam frames, screen capture, ID document | Proctored exams only, with consent | Identity and integrity review | 90 days, then deleted |
| Payment details | Purchases | Billing (handled by the payment provider) | As required by law |
Who can see what
| Viewer | Certificate | Full report | Raw evidence |
|---|---|---|---|
| You | Yes | Yes | Your own data, on request |
| Public (verification link) | Level, track, date, validity | No | No |
| Recruiter with your share link | Yes | Employer view | No |
| Manager (organisation-assigned exam) | Yes | Summary + domain scores | No |
| Organisation admin | Aggregate analytics | Per disclosed policy | No |
| Integrity reviewer | — | — | Flagged sessions only, audited |
Self-paid results are private unless you share them. Share links can expire, be revoked at any time, and show you who viewed them.
Your rights
- Download all your data (JSON export) at any time.
- Change consents (telemetry for practice, recordings, public profile, leaderboards, marketing) in privacy settings.
- Delete your account: personal data is erased; credential records stay verifiable only as “holder removed” so past verifications remain honest.
- Appeal any integrity decision; a different reviewer decides.
Processing
Data is encrypted in transit and at rest. Sub-processors: hosting, email, payments and (for proctored exams) identity verification. We never sell personal data or use exam recordings to train models.