Privacy Policy

Welcome to ExamPrep's Privacy Policy. This policy describes how we collect, use, process, and protect your personal information when you use our website, mobile applications, and services (collectively, the "Services").

By accessing or using our Services, you consent to the practices described in this Privacy Policy. If you do not agree with these practices, please do not use our Services.

We may update this policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Personal Information You Provide

When you create an account, purchase our services, or contact us, we may collect:

• Contact information (name, email address, phone number)
• Account credentials (username and password)
• Payment information (credit card details, billing address)
• Demographic information (age, education level, academic interests)
• Communication preferences
• Content you submit (questions, essays, practice test responses)

Information Collected Automatically

When you use our Services, we may automatically collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent on platform)
• Performance data (test scores, progress metrics, learning patterns)
• Location data (general geographic location based on IP address)

Information from Third Parties

We may receive information about you from:

• Social media platforms when you connect your account
• Payment processors when you make a purchase
• Educational institutions if you access our Services through them
• Analytics providers and advertising partners

We use your personal information for the following purposes:

Purpose	Description
Service Delivery	To provide, maintain, and improve our Services, including personalized learning experiences
Account Management	To create and manage your account, process payments, and provide customer support
Communication	To send important notices, updates, security alerts, and administrative messages
Personalization	To tailor content, recommendations, and study plans based on your needs and progress
Analytics & Improvement	To analyze usage patterns, improve our Services, and develop new features
Marketing	To send promotional communications (with your consent where required by law)
Legal Compliance	To comply with legal obligations, enforce our terms, and protect our rights

We process your personal information based on the following legal grounds:

• Performance of a contract: When we need to fulfill our obligations under our Terms of Service
• Consent: When you have given us clear consent to process your data
• Legitimate interests: When processing is necessary for our legitimate business interests
• Legal obligation: When we need to comply with a legal or regulatory requirement

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Employee training on data protection and privacy
• Secure data storage with reputable cloud providers
• Incident response procedures in case of a data breach

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but we strive to use commercially acceptable means to protect your personal information.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. Typically, we retain user data for 3 years after account inactivity, unless a longer retention period is required or permitted by law.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place for these transfers, such as standard contractual clauses or Privacy Shield certification (for transfers to the US).

We use cookies and similar tracking technologies to track activity on our Services and store certain information. These technologies help us:

• Remember your preferences and settings
• Provide personalized content and recommendations
• Analyze site traffic and usage patterns
• Measure the effectiveness of our marketing campaigns
• Improve our Services and user experience

Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic site functionality and security	Session or persistent
Performance Cookies	Help us understand how visitors interact with our website	Persistent (1-2 years)
Functionality Cookies	Enable enhanced functionality and personalization	Persistent (1 year)
Targeting Cookies	Used to deliver relevant advertisements and track campaign performance	Persistent (1 year)

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Services.

Depending on your location, you may have the following rights regarding your personal information:

• Access: The right to request copies of your personal information
• Rectification: The right to request correction of inaccurate or incomplete information
• Erasure: The right to request deletion of your personal information
• Restriction: The right to request limiting the processing of your information
• Data Portability: The right to receive your data in a structured, machine-readable format
• Objection: The right to object to processing of your personal information
• Withdraw Consent: The right to withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We will respond to your request within the timeframes required by applicable law.

We may need to verify your identity before processing your request, which may require additional information from you. In some cases, we may decline your request as permitted by law, such as when the request is manifestly unfounded or excessive.

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will take steps to delete such information from our systems.

For users between the ages of 13 and 18, we recommend that they review this Privacy Policy with their parent or guardian to ensure they understand and agree to it. We encourage parents and guardians to monitor their children's online activities and help enforce our Privacy Policy by instructing their children never to provide personal information without their permission.

If we discover that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

We may also provide notification of significant changes through email or through our Services. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Your continued use of our Services after any modification to this Privacy Policy will constitute your acceptance of such modification. If you do not agree with the changes, you should discontinue use of the Services and contact us regarding deletion of your account.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: info@getexamprep.com
• Mail: ExamPrep Inc., 123 Education Street, Suite 456, San Francisco, CA 94107, USA
• Phone: +1 (555) 123-4567

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact our DPO at info@getexamprep.com.

If you are located in the European Economic Area (EEA), you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable data protection laws.