Privacy Policy

1. Introduction

ExamNexus AI ("AIEQUITAS", "we", "us", or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI-powered standardized test preparation platform.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

Account Registration:

• Email address (required for account creation and communication)
• Password (encrypted and securely stored)
• Name or username (for personalization)
• Age or date of birth (for COPPA and GDPR compliance)

Profile Information:

• Educational background and goals
• Test preparation preferences
• Study schedule and availability
• Target test dates and score goals

2.2 Automatically Collected Information

Usage Data:

• Pages visited and features used
• Time spent on different sections
• Click patterns and navigation behavior
• Device and browser information
• IP address and general location data

Performance Data:

• Test scores and question responses
• Time taken to complete questions and tests
• Areas of strength and weakness
• Progress tracking and milestone achievements
• Study patterns and learning analytics

2.3 AI-Generated Data

Personalized Content:

• AI-generated practice questions based on your performance
• Customized study roadmaps and recommendations
• Adaptive test configurations
• Performance predictions and analytics

3. How We Use Your Information

3.1 Service Provision

• Account Management: Creating and maintaining your user account
• Personalization: Customizing your learning experience and content
• AI Services: Generating personalized questions, tests, and study plans
• Performance Tracking: Monitoring progress and providing analytics
• Communication: Sending important updates, notifications, and support responses

3.2 Service Improvement

• Platform Enhancement: Improving our AI algorithms and user experience
• Quality Assurance: Ensuring accuracy and effectiveness of generated content
• Research and Development: Developing new features and capabilities
• Analytics: Understanding user behavior and platform performance

4. Information Sharing and Disclosure

4.2 Limited Sharing Scenarios

We may share your information only in the following circumstances:

Service Providers:

• Third-party services that help us operate our platform (hosting, analytics, email)
• AI service providers (Google Generative AI, DeepSeek) for content generation
• Payment processors for subscription management
• All service providers are bound by confidentiality agreements

Legal Requirements:

• When required by law, court order, or government request
• To protect our rights, property, or safety
• To prevent fraud or illegal activities
• In connection with legal proceedings

5. Data Storage and Security

5.1 Security Measures

We implement appropriate technical and organizational measures to protect your information:

Technical Safeguards:

• Encryption of data in transit and at rest
• Secure database storage with access controls
• Regular security audits and vulnerability assessments
• Multi-factor authentication for administrative access

Organizational Safeguards:

• Employee training on data protection and privacy
• Limited access to personal information on a need-to-know basis
• Regular review and update of security policies
• Incident response procedures for data breaches

7. Children's Privacy (COPPA Compliance)

7.1 Age Restrictions

• Our Service is not intended for children under 13
• We do not knowingly collect personal information from children under 13
• If we discover we have collected information from a child under 13, we will delete it promptly

7.2 Parental Consent

For Users Under 13:

• Explicit parental consent is required before account creation
• Parents can review, modify, or delete their child's information
• Parents receive notifications about their child's account activity

For Users 13-17:

• Parental permission is recommended but not required
• Parents can request information about their minor child's account
• Enhanced privacy protections apply to users under 18

8. International Users and GDPR Compliance

8.1 European Union Users

For users in the European Union, we comply with the General Data Protection Regulation (GDPR):

Legal Basis for Processing:

• Consent: For marketing communications and optional features
• Contract: For providing our services and account management
• Legitimate Interest: For platform improvement and security
• Legal Obligation: For compliance with applicable laws

Enhanced Rights:

• Right to withdraw consent at any time
• Right to data portability
• Right to lodge a complaint with supervisory authorities
• Right to object to automated decision-making

8.2 Age of Consent

• Users under 16 in the EU require parental consent
• Some EU countries may have different age requirements
• We verify age and obtain appropriate consent where required

10. Third-Party Services

10.1 AI Service Providers

• Used for generating question generation, explanations and analysis
• Subject to Providers' privacy policies and data handling practices
• Limited data sharing for specific AI processing purposes

10.2 Other Third-Party Services

Email Services:

• For sending notifications and communications
• Subject to email provider's privacy policies
• Limited to necessary communication data

Analytics Services:

• For understanding platform usage and performance
• Data is anonymized and aggregated where possible
• Used to improve user experience and platform functionality

11. Data Transfers

11.1 International Transfers

• Your information may be transferred to and processed in countries other than your own
• We ensure appropriate safeguards are in place for international transfers
• Transfers comply with applicable privacy laws and regulations

11.2 Safeguards

• Standard contractual clauses for data transfers
• Adequacy decisions where applicable
• Additional security measures for sensitive data

12. Privacy Policy Updates

12.1 Notification of Changes

• We will notify you of significant changes to this Privacy Policy
• Notifications will be sent via email or platform announcements
• Continued use after changes constitutes acceptance of the updated policy

12.2 Review and Updates

• We regularly review and update this Privacy Policy
• Changes reflect evolving privacy laws and platform features
• Previous versions are archived and available upon request

Effective Date: This Privacy Policy is effective as of 26/8/2025 and applies to all information collected by ExamNexus AI from that date forward.

Your Consent: By using our Service, you consent to the collection and use of your information as described in this Privacy Policy.