Introduction
Exam Builder (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our exam creation and management platform for universities and colleges (the “Service”).
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.
Information We Collect
Personal Information
When you create an account or use our Service, we may collect:
- Account Information: Name, email address, phone number, institution name
- Profile Data: Job title, department, course affiliations, and account settings
- Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
- Communication Data: Messages, support tickets, and correspondence with our team
Educational Content Data
Our Service collects and processes data related to exam creation and management:
- Exam Content: Questions, answers, instructions, rubrics, exam templates
- Course Information: Course names, codes, sections, enrollment data
- Student Data: Student names, email addresses, student IDs, exam submissions
- Assessment Data: Grades, scores, feedback, completion status, time tracking
- Usage Analytics: Feature usage, exam creation patterns, system interactions
Technical Information
We automatically collect certain technical data:
- Log Data: IP addresses, browser type, operating system, access times, pages viewed
- Cookies and Tracking: Session data, preferences, analytics information
- API Usage: Request patterns, response times, error rates
Third-Party Integrations
When you connect third-party services:
- Data shared between integrated learning management systems (Canvas, Blackboard, Moodle)
- Authentication tokens and API credentials
- Synchronized course and student information
How We Use Your Information
We use the collected information to:
Service Provision
- Exam Creation: Enable instructors to build, edit, and manage exams
- Assessment Management: Facilitate exam delivery and grading
- Analytics and Reporting: Provide insights on student performance and exam statistics
- Automated Grading: Process objective questions and calculate scores
Account Management
- User Authentication: Verify identity and secure account access
- Customer Support: Respond to inquiries and resolve technical issues
- Billing and Payments: Process transactions and manage subscriptions
- Account Security: Detect and prevent unauthorized access
Service Improvement
- Product Development: Enhance features and develop new capabilities
- Performance Optimization: Improve system reliability and speed
- Analytics: Understand usage patterns and user behavior
- Research: Conduct studies to advance educational technology
Legal and Security
- Compliance: Meet regulatory requirements including FERPA and other educational privacy laws
- Fraud Prevention: Detect and prevent academic dishonesty and malicious activities
- Security Monitoring: Protect against cyber threats and data breaches
Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
Service Providers
We work with trusted third-party vendors who assist in providing our Service:
- Cloud Infrastructure: AWS, Google Cloud, or similar providers
- Payment Processing: Stripe, PayPal, or other payment processors
- Analytics Services: Usage analytics and monitoring tools
- Communication Services: Email delivery and customer support platforms
Educational Institutions
- Institution Administrators: Share data with authorized personnel at your institution
- LMS Integration: Synchronize data with your institution’s learning management system
- Compliance Reporting: Provide reports required by educational regulations
Business Operations
- Corporate Transactions: In case of merger, acquisition, or asset sale
- Legal Requirements: When required by law, court order, or government request
- Safety and Security: To protect rights, property, or safety of users and others
With Your Consent
We may share information with your explicit consent for specific purposes.
Data Security
We implement industry-standard security measures to protect your information:
Technical Safeguards
- Encryption: Data encrypted in transit and at rest using AES-256 standards
- Access Controls: Role-based access with multi-factor authentication
- Network Security: Firewalls, intrusion detection, and secure protocols
- Regular Audits: Security assessments and vulnerability testing
Organizational Measures
- Employee Training: Regular security awareness and privacy training
- Data Minimization: Collect only necessary information
- Incident Response: Procedures for handling security breaches
- Vendor Management: Due diligence on third-party security practices
Educational Privacy Compliance
FERPA Compliance
We comply with the Family Educational Rights and Privacy Act (FERPA):
- We act as a school official with legitimate educational interests
- Student educational records are protected and accessed only as necessary
- We do not disclose student information without proper authorization
- Parents and eligible students have rights to access and amend records
Student Data Protection
- Student information is used solely for educational purposes
- No targeted advertising based on student data
- No creation of student profiles for non-educational purposes
- Compliance with state student privacy laws
Data Retention
We retain your information for as long as necessary to provide our Service and fulfill legal obligations:
- Account Data: Retained while your account is active and for up to 7 years after closure
- Exam Content: Stored for the duration of course management and as required by institutional policies
- Student Records: Retained according to FERPA guidelines and institutional requirements (typically 3-7 years)
- Transaction Records: Kept for 7 years for accounting and legal purposes
- Support Communications: Retained for 3 years for quality assurance
You may request earlier deletion of your data, subject to legal and operational requirements.
Your Privacy Rights
Depending on your location, you may have the following rights:
Access and Portability
- Data Access: Request copies of your personal information
- Data Portability: Export your data in machine-readable format
- Account Dashboard: View and manage your information through our platform
Control and Correction
- Data Correction: Update inaccurate or incomplete information
- Privacy Settings: Control data collection and sharing preferences
- Communication Preferences: Opt-out of marketing communications
Deletion and Restriction
- Right to Deletion: Request removal of your personal information
- Processing Restriction: Limit how we use your information
- Objection Rights: Object to certain types of data processing
To exercise these rights, contact us at privacy@exambuilder.com or use the privacy controls in your account settings.
Cookies and Tracking
We use cookies and similar technologies to enhance your experience:
Essential Cookies
- Authentication: Maintain secure login sessions
- Security: Protect against fraud and unauthorized access
- Functionality: Remember your preferences and settings
Analytics Cookies
- Usage Analytics: Understand how you interact with our Service
- Performance Monitoring: Track system performance and errors
- Feature Testing: Test new features and improvements
Third-Party Cookies
- Integrated Services: Enable third-party integrations and widgets
- Support Tools: Customer support chat and help systems
You can control cookie preferences through your browser settings or our privacy dashboard.
International Data Transfers
Our Service operates globally, and your information may be transferred to and processed in countries other than your residence. We ensure adequate protection through:
- Adequacy Decisions: Transfers to countries with adequate protection levels
- Standard Contractual Clauses: EU-approved data transfer mechanisms
- Binding Corporate Rules: Internal policies for international transfers
- Certification Programs: Participation in recognized privacy frameworks
Children’s Privacy
Our Service is intended for use by university and college students (typically 18+) and educational staff. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information promptly.
California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA):
Right to Know
- Categories of personal information collected
- Sources of personal information
- Business purposes for collection
- Third parties with whom information is shared
Right to Delete
Request deletion of personal information, subject to certain exceptions.
Right to Opt-Out
Opt-out of the sale of personal information (we do not sell personal information).
Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
European Privacy Rights
For users in the European Economic Area, we comply with the General Data Protection Regulation (GDPR):
Legal Basis
We process your information based on:
- Contract Performance: To provide our Service
- Legitimate Interests: For business operations and improvements
- Consent: For specific processing activities
- Legal Compliance: To meet regulatory requirements including educational privacy laws
Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:
- Notify Users: Email notification of material changes
- Website Notice: Post updates on our website with effective dates
- Continued Use: Your continued use constitutes acceptance of changes
- Opt-Out Option: Provide options to discontinue service if you disagree
Contact Information
For questions about this Privacy Policy or our privacy practices:
Email: collabroexams@gmail.com
Definitions
- Personal Information: Information that identifies, relates to, or could reasonably be linked with you
- Processing: Any operation performed on personal information
- Service Provider: Third parties that process information on our behalf
- Educational Records: Information directly related to a student maintained by an educational institution
- Student Data: Personal information collected from or about students
This Privacy Policy is designed to be transparent about our data practices while protecting your privacy rights and complying with educational privacy laws. We encourage you to review this policy regularly and contact us with any questions or concerns.