Privacy Policy

Basic Info (Everyone):

• Name, email address, phone number, postal address
• Organization details (more on "organization" in a moment)

Teachers Only (Extra Steps for Extra Trust):

• Identity documents (NID, birth certificate, passport, TIN)—we ask for these to confirm you're really an educator.
• Why? Because Exambazz is a multi-tenant platform (each teacher belongs to or creates a legitimate institution—like an ed-tech company, coaching center, or school), and we want to make sure no one's impersonating someone else. We only take and store what's absolutely necessary.

Students Under 13 (Special Care!):

Yes, we welcome learners under 13, but only under teacher supervision. We collectbare minimum info—just enough to schedule exams and deliver results. (Think: name, class/grade, and a teacher-approved identifier.) If you're under 13, you're in safe hands, and we'll never ask for more than what's needed to help you learn and grow. 🌱

Device & Usage Data (Behind the Scenes):

• Every time you log in or browse, your device type, browser version, IP address, and a "device fingerprint" (a unique ID generated from browser signals) help us keep things super secure.
• We use this for authentication (so it's really you) and fraud prevention (so nobody else pretends to be you).

Account Creation & Verification

We need your name, email, and contact info to set up your Exambazz account. If you're a teacher, we verify your identity documents to ensure you're part of an actual institution (ed-tech startup, hybrid/offline coaching center, or school). That keeps our community safe and trustworthy.

Delivering the Service YOU Expect

From creating exams to providing instant score reports, we rely on your provided data. Your email & phone number help us send important notifications (exam schedules, results, password resets). Your organization details tell us which courses and resources to assign.

Security & Fraud Prevention

By generating a unique device fingerprint and tracking login patterns, we stay one step ahead of unauthorized access attempts. We also protect all of this with state-of-the-art encryption so that even our team can't peek at your data without your OK—and that's exactly how it should be.

Analytics & Continuous Improvement

We're always curious: Which features do you love? Where do you stumble? We use anonymous cookies (they don't store your name!) and aggregate usage data to make Exambazz faster, smoother, and more intuitive. If we ever need to use cookies that could identify you personally, we'll ask for your explicit consent first.

Legal Obligations

Sometimes, the law (whether in the EU, California, or Bangladesh) compels us to share data. Rest assured, if a court order arrives, we'll share only the bare minimum needed to comply, and we'll let you know—unless a strict court gag order prohibits it.

In Transit (On the Move)

Whenever you send data to Exambazz (logging in, submitting an exam), it travels over a "secret tunnel" (TLS encryption) so no snooper can read it.

At Rest (When It's Stored)

Your personal information (e.g., NID scans, results, emails) sits in encrypted databases. Even if someone got into our servers (highly unlikely!), they'd see gibberish, not your real details.

Access Control (Who Sees What)

Our team members can't view your private data just because they're curious. To look at your info—say, to help you troubleshoot a problem—we first ask you to verify your identity via a one-time OTP sent to your registered email/phone. Only after you share that OTP do we access your data, and even then, we see only what's necessary to help.

Regular Security Audits & Updates

We run frequent checks, patch vulnerabilities, and update our systems so that Exambazz stays ahead of evolving threats. It's like taking your car in for regular maintenance—only this is a virtual fortress.

Anonymous Cookies (Always Ask First)

We drop tiny "anonymous" cookies to understand how our platform is used (e.g., which pages you visit most). These cookies do not know your name—they only track patterns. If we ever want to use a cookie that might identify you (for example, remembering your login or personal preferences), we'll display a clear banner and ask for your consent.

Manage Your Preferences

You can adjust or disable cookies anytime in your browser settings. Just keep in mind that turning off certain cookies might mean some features (like "Remember Me" or instant form-filling) won't work as smoothly.

TL;DR: We don't sell, rent, or barter your data. Ever. 🤝

Service Providers We Trust

To run Exambazz, we partner with a few essential service providers—cloud hosting, email delivery, payment gateways, etc. These partners get only the data they need to do their job, and our contracts force them to keep it locked down to the same standards we follow.

Legal Requirements

• Court Orders or Subpoenas: If a legitimate authority (EU court, California judge, or a Bangladeshi warrant) asks for specific data, we comply—providing only what's absolutely required. We'll notify you unless legally forbidden.
• Safety & Fraud Prevention: If we suspect someone's misusing Exambazz (hacking, cheating, impersonation), we may share limited details with law enforcement to protect everyone.

Organizing Institutions

Since every teacher account belongs to an ed-tech company, hybrid/offline coaching center, or school, we might verify that organization by requesting additional documentation (e.g., a valid institution license or registration). This keeps our user community honest—nobody can pretend to be a school they're not.

IMPORTANT: We never share your data with third-party advertisers, marketers, or commercial entities, because your privacy is more important than extra ad revenue. 🚫📈

We keep things only as long as needed. Here's our friendly timeline:

1. Active Users: As long as you actively log in and use Exambazz, your data stays safe with us.
2. 6 Months of Inactivity: If you haven't touched your account for 6 months, we'll get ready to say goodbye. Before we permanently delete your data, we'll send you reminders:
   • 30 days before deletion: "Hey, we miss you! Log in to keep your account."
   • 15 days before deletion: "Reminder: If you'd like us to keep your data, log in soon."
   • 3 days before deletion: "Final notice: In 3 days we'll erase your data—but you can stop this by simply logging in."
3. Special Legal Holds: If we're legally required to keep some data (for tax audits, investigations, or court orders), we'll hold onto it until we're no longer obligated—then we'll delete it.

No matter where you live—Europe, California, Bangladesh, or beyond—you have rights over your personal data. We make it super easy to exercise them:

• Right of Access & Portability: Want to know what we have on file? Just ask! We'll provide a copy of your data in a standard, portable format (e.g., a CSV or JSON file).
• Right to Correct (Rectification): Spot an error—like a mistyped phone number? Let us know, and we'll fix it promptly.
• Right to Delete (Erasure): Feel free to request permanent deletion of your data (subject to legal exceptions). We'll honor it. EU residents get this under GDPR's "right to be forgotten"; Californians under CCPA's deletion rights; Bangladeshi users under our own fair-use commitments.
• Right to Restrict or Object: Don't want us to process your data for certain purposes (like analytics)? You can restrict or object to that processing. (Reminder: if you opt out of analytics cookies, Exambazz might load a tad slower.)
• Right to Withdraw Consent: If you previously gave us permission for something—like receiving newsletters—you can withdraw that consent at any time. Your choice doesn't impact our ability to perform contract-based or legally required processing.
• Right to Lodge a Complaint:
  • If you're in the EU, you can contact your local Data Protection Authority (DPA) if you think we're misusing your data.
  • If you're in California, you can file a complaint with the California Attorney General's office.
  • If you're in Bangladesh or in any country of the world, you can reach out to the Bangladesh Data Protection Authority or the law enforcement agency or lodge a grievance with our team directly.

How to Submit a Request

• Email: [email protected]
• Support Ticket: Visit our Help Center and open a "Privacy Request" ticket.
• Verification: To ensure it's really you making the request (and not someone else), we'll do some legal check, once we're confirmed we'll handle your request promptly:
  • EU: within 1 month (possible 2-month extension)
  • California: within 45 days

Exambazz is an EdTech platform where teachers guide students, and we're thrilled to welcome learners under 13! But we take extra care:

1. Parental/Teacher Supervision:
   • If you're under 13, you must use Exambazz under an educator's supervision. We'll only collect the bare minimum info (e.g., name, grade, teacher-assigned identifier) to process your exams and deliver results.
   • We do NOT ask for sensitive personal details (like a birth certificate) from children under 13. Any request for student documents is routed through the teacher's account—never directly from the child.
2. Deleting Children's Data:
   • Parents or guardians can ask us to delete a minor's data by contacting [email protected]. We'll handle such requests with urgency (within 30 days) and transparency.
3. COPPA & Similar Rules:
   • If you live in the U.S., COPPA regulations apply. We comply fully with COPPA (Children's Online Privacy Protection Act), ensuring no data is collected from kids under 13 without verifiable parental consent.
   • In Bangladesh, we adhere to local child protection laws. So you can be confident that kids' information is handled with extra layers of security.

Your data might hop across borders (e.g., from Bangladesh to our EU-based servers), but rest assured:

• GDPR-Compliant Safeguards: If we move data out of the EU/EEA, we rely on approved mechanisms—such as Standard Contractual Clauses (SCCs)—to keep your data at GDPR-level protection.
• Bangladesh to Abroad: Bangladeshi law doesn't broadly restrict transfers, but we only move data internationally if we have a lawful basis (your consent or contractual necessity).
• Universal Security Measures: Wherever your data travels, it's encrypted in transit and at rest. Our security standards never slip—no matter which data center it touches.

We might add new features or adapt to legal changes, so this Privacy Policy will evolve. Whenever we make significant changes, we'll:

1. Post the new policy on our website with an updated "Effective Date."
2. If something major changes—especially in how we collect or share data—we'll send you a clear email or in-app notification.

Your continued use of Exambazz after that Effective Date means you accept the latest version.