Legal

Privacy Policy

Last updated: July 2026 · certexpert.org

    Your privacy matters to us. This policy explains what data ExamVault collects, how we use it, and what rights you have. We do not sell your data to third parties.
  

1. Data We Collect

Category	Data Points	Purpose
Account	Name, email, profile photo (Google sign-in)	Authentication & account management
Exam	Scores, answers, time taken, violation records	Grading, certificates, integrity enforcement
Proctoring	Webcam snapshots, violation video clips	Cheating detection & admin review
Technical	IP address, browser type, device info	Security, rate limiting, debugging
Communications	Support tickets, contact form messages	Customer support

2. How We Use Your Data

To authenticate you and manage your account
To administer exams and generate results and certificates
To detect and prevent cheating via AI proctoring
To send transactional emails (exam tokens, results, certificates)
To display leaderboard rankings (name and score only)
To respond to your support requests
To improve platform security and performance

3. Camera & Microphone

Camera and microphone are accessed only during active exam sessions. Your browser handles face detection locally — video is not streamed to our servers. Video recordings are saved only when a proctoring violation is detected. These recordings are accessible only to platform administrators and are automatically deleted after 90 days.

4. Cookies & Local Storage

ExamVault uses:

Firebase Authentication tokens — stored in local storage to keep you signed in
Cookie consent preference — stored in local storage to remember your choice
Navbar cache — stored in local storage to prevent UI flicker on page load

We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

5. Data Storage & Security

Account and exam data is stored in Google Firebase Realtime Database
Violation recordings are stored on our secure server
All data transmission is encrypted via HTTPS/TLS
Server access is restricted to authorized administrators only
Regular backups are maintained for disaster recovery

6. Data Sharing

We do not sell your personal data. Data is shared only with:

Google Firebase — authentication and database infrastructure
Google OAuth — if you sign in with Google
Certification partners — exam results for exams administered through partner organizations (only if you took their exam)

7. Data Retention

Data Type	Retention Period
Account data	Until you request deletion
Exam results & certificates	Indefinitely (for verification)
Violation recordings	90 days, then auto-deleted
Support tickets	1 year after resolution
Server logs	30 days

8. Your Rights

📋

Access Your Data

Request a copy of all personal data we hold about you.

✏️

Correct Your Data

Update or correct inaccurate information in your profile.

🗑️

Delete Your Data

Request permanent deletion of your account and associated data.

📤

Export Your Data

Receive your data in a portable, machine-readable format.

To exercise any of these rights, email: admin@certexpert.org

9. Children's Privacy

ExamVault is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email or a prominent notice on the platform. Continued use after changes constitutes acceptance.

11. Contact Us

For privacy questions or data requests:

Email: admin@certexpert.org
Contact form: certexpert.org/contact