Privacy Policy

1. Who We Are

ExamsPractice is a Software-as-a-Service (SaaS) platform that provides schools with their own branded exam practice environment. Schools subscribe to our service and use it to manage students, create quizzes, and organise past examination questions for student practice. Our platform is hosted at exams-practice.net and school subdomains operate under the format schoolname.exams-practice.net.

2. Information We Collect

We collect the following categories of information:

• School (Tenant) Data: School name, administrator email address, subdomain, contact details, subscription plan, and payment records.
• Teacher & Student Data: Names, email addresses, student ID numbers, class levels, and login credentials (passwords stored as secure hashes).
• Usage Data: Quiz attempts, exam scores, answer submissions, time taken, pass/fail status, and performance history.
• Payment Data: Transaction references and payment channel information processed via Paystack. We do not store full card numbers — card data is handled entirely by Paystack.
• Technical Data: IP addresses, browser type, device information, and session data collected automatically when users access our platform.

3. How We Use Your Information

• To provision and manage school accounts and tenant environments.
• To enable students to take quizzes and past exam practice sessions.
• To allow teachers to grade and review student submissions.
• To process subscription payments and send payment confirmations.
• To send welcome emails and account credentials to new users.
• To generate AI-assisted questions and scoring using third-party AI providers (DeepSeek, OpenAI, or Google Gemini). Content submitted for AI processing is used only for generating educational responses and is not stored by us beyond the session.
• To monitor platform performance and fix technical issues.

4. Data Storage & Security

Each school's data is stored in an isolated database on our servers hosted on Hetzner Cloud infrastructure in Europe. We implement industry-standard security measures including SSL/TLS encryption, hashed password storage, and access controls. However, no system is completely secure and we cannot guarantee absolute security of data transmitted over the internet.

5. Data Sharing

We do not sell your data. We share data only with the following service providers who assist us in operating the platform:

• Paystack — for payment processing.
• Zoho Mail — for sending transactional emails.
• AI Providers (DeepSeek/OpenAI/Gemini) — for AI question generation and scoring. Only question content and student answers are shared, never personal identifying information.

We may disclose data if required by Ghanaian law or a valid court order.

6. Student Data

Student accounts are created and managed by schools (our clients). Schools are responsible for obtaining any necessary parental consent for students under 13 years of age. We process student data on behalf of schools as a data processor.

7. Data Retention

School and student data is retained for the duration of the school's active subscription and for up to 12 months after expiry, after which it may be permanently deleted. Schools may request early deletion by contacting us.

8. Your Rights

School administrators may request access to, correction of, or deletion of their school's data by contacting us at [email protected]. We will respond within 30 days.

9. Cookies

We use essential session cookies to keep users logged in. We do not use advertising or tracking cookies. We do not serve advertisements on our platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify school administrators of significant changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related enquiries, please contact us at:
[email protected]
ExamsPractice — exams-practice.net