Privacy Policy

How we collect, use, store, and protect your personal information

Last updated: May 2026
Home Back
We don't sell your data
Your personal information is never sold or traded to third parties
Encrypted in transit
All data is transmitted over HTTPS with end-to-end encryption
You're in control
Access, correct, or delete your data at any time from Settings
Minimal data collection
We only collect what's necessary to run the platform
Contents
1 Data We Collect 2 How We Use It 3 Data Sharing 4 Security 5 Data Retention 6 Cookies & Tracking 7 Your Rights 8 Contact Us
1

Data We Collect

We only collect information that is necessary to operate the platform and provide you with a reliable exam experience. Here is what we collect and why:

Category What we collect Why
Account Full name, email address, username, password (hashed) Authentication and account management
Exam activity Responses, time per question, score, submission timestamp Grading, analytics, and result generation
Session security Tab-switch count, focus-loss events, fullscreen exits Exam integrity monitoring
Device & browser Browser type, OS, screen resolution, IP address Technical support and abuse prevention
Communications Support messages, chat history with AI assistant Support resolution and service improvement
We do not collect payment information. SmartAIExam does not currently charge individual users for access.
2

How We Use Your Information

Your data is used strictly to operate and improve the platform. We do not use it for advertising or profiling outside of SmartAIExam.

  • Authenticate your account and maintain session security
  • Process exam submissions and generate detailed performance reports
  • Provide topic-level analytics and progress tracking over time
  • Deliver AI-generated study assistance through the built-in chat assistant
  • Notify you about exam schedules, results, and important account activity
  • Investigate and resolve technical issues or support requests
  • Detect and prevent exam fraud, account misuse, or security incidents
  • Improve question generation models and platform features
We do not use your data to train external AI models, serve advertisements, or share insights with marketing partners.
3

Data Sharing

We do not sell, trade, or transfer your personal information to third parties. Sharing only occurs in the following limited and necessary circumstances:

  • Your institution: Exam results and session logs may be shared with the educational institution or administrator who created the exam
  • Service providers: Infrastructure partners (cloud hosting, database, file storage) operate under strict confidentiality agreements and process data only on our behalf
  • AI services: Exam content and study queries are processed by third-party AI APIs (Google Gemini, Groq) for question generation and study assistance — no personally identifiable information is included in these requests
  • Legal requirements: We may disclose data when required by law, court order, or to protect the rights and safety of users
Exam questions and responses shared with AI services are stripped of user identifiers before processing. We do not send your name, email, or account details to any AI provider.
4

Security

We apply industry-standard security practices to protect your data at rest and in transit:

  • All passwords are hashed using bcrypt — we never store plaintext passwords
  • HTTPS enforced across the entire platform — no unencrypted data transmission
  • Database access is restricted to application-level service accounts with least-privilege roles
  • Redis session store is isolated and not publicly accessible
  • Rate limiting on login endpoints to prevent brute-force attacks
  • Single-device session enforcement — logging in on a new device invalidates previous sessions

While we take every reasonable precaution, no system is entirely immune to risk. If you suspect your account has been compromised, change your password immediately and contact us at examportaldesk@gmail.com.

5

Data Retention

We retain your data only for as long as necessary:

Data type Retention period
Account and profile data Until account deletion is requested
Exam results and responses As specified by your institution, or until account deletion
Session security logs 90 days from exam date
AI chat history Until account deletion
Support communications 12 months from last interaction

You can request deletion of your account and all associated data at any time from the Settings page. Deletion is permanent and cannot be undone.

6

Cookies & Tracking

We use a minimal set of cookies required to run the platform. We do not use advertising cookies or third-party tracking.

Cookie Purpose Type
session Keeps you logged in and manages exam state Essential
landingTheme Remembers your selected UI theme (dark, paper, midnight etc.) Preference
sbCollapsed Remembers whether the sidebar is collapsed or expanded Preference
We do not use Google Analytics, Facebook Pixel, or any third-party advertising or tracking scripts.
7

Your Rights

You have full control over your personal data. Here is what you can do:

Access
View all your exam results, responses, and account data from your dashboard
Correct
Request corrections to inaccurate account information by contacting support
Delete
Permanently delete your account and all data from Settings → Danger Zone
Export
Request a copy of your exam history and personal data by emailing us
Opt-out
Unsubscribe from non-essential emails at any time via the link in each email
Object
Object to specific types of data processing by contacting our privacy team
8

Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data, reach out to our privacy team:

SmartAIExam — Privacy Team
examportaldesk@gmail.com
+91-755-123-4567
Tech Park, Noida, UP

We aim to respond to all privacy-related requests within 7 business days.