Privacy Policy

Welcome to ExamHall (“ExamHall,” “we,” “our,” or “us”). We provide a unified educational workspace featuring exam authoring, secure proctoring, result management, and self-study tools (including Flashcards, Quizzes, and our AI Tutor).

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit or use our platform at examhall.net and its related subdomains (including ExamHall Examiner and ExamHall Prep).

Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the platform.

1. Information We Collect

We collect information that you voluntarily provide to us, as well as data gathered automatically when you interact with our platform.

Account & Profile Information

When educators, administrators, or students register an account, we collect personal identifier information including names, email addresses, phone numbers, passwords, institutional affiliations (schools, testing centers, or universities), and profile preferences.

Specialized Exam Proctoring Data

If you participate in an exam administered through the ExamHall Examiner proctoring workspace, we may collect highly specific security data as authorized by the testing institution, including biometric validation photos, webcam snapshots, ambient audio streams, screen recordings, browser focus status (focus shifts, tab switching), and IP addresses.

Payment Information

We process subscription billings and credit pack purchases using third-party payment processors (such as Stripe and Paystack). We do not directly store or receive your full credit card number or billing credentials.

2. How We Use Your Information

We process your personal data under legal, contractual, and legitimate business bases, including:

• Core Platform Functionality: Creating and administering accounts, delivering exams, processing study metrics (flashcard progress, quiz grades), and hosting waitlists.
• Proctoring Report Generation: Analyzing browser logs, focus shifts, and audio-video streams during exams to compile objective integrity ratings shared exclusively with your testing administrator.
• Institutional Analytics: Providing school boards, teachers, and examiners with dashboards tracking broadsheets, performance statistics, and result books.
• Platform Improvement & Security: Preventing fraud, detecting system vulnerabilities, improving user interface layouts, and monitoring resource usage.

3. AI Tutor & Question Extraction

ExamHall incorporates advanced artificial intelligence tools, including the AI Prep Tutor, custom summarizers, and automated question extraction services.

Any study document, flashcard text, or conversational query submitted to our AI features is transmitted securely via private, enterprise-grade APIs. Our upstream AI sub-processors (such as Google Cloud Vertex AI and OpenAI Enterprise APIs) are contractually bound never to retain, inspect, or utilize ExamHall user prompts to train public baseline models. You retain absolute ownership of the source documents and educational material you upload.

4. Data Sharing & Third Parties

ExamHall protects your information. We will only share your personal data in restricted scenarios, such as sharing test logs and focus graphs with your educational institution's examiner, or sharing data with sub-processors who manage hosting (AWS, Vercel), billing (Stripe, Paystack), and email delivery.

We absolutely do not, and will never, sell or rent your personal profile, search metrics, or exam history to third-party ad brokers or marketing syndicates.

5. Children's Privacy (COPPA & FERPA)

Because ExamHall is deployed inside K-12 primary and secondary educational institutions, we adhere closely to FERPA and COPPA guidelines.

When schools employ ExamHall secure workspaces for testing students under 13, the educational institution contractually represents that it has authorized the collection of necessary identity verification and proctoring metrics solely for academic evaluation. Parents who wish to inspect or delete their child’s academic logs should contact their student’s educational institution.

6. Your Rights & Retention

Depending on your jurisdiction (such as the UK/EU under GDPR, or California under CCPA), you possess standard statutory data rights, including the right to access, port, correct, or delete your active account data.

We retain account files and study analytics for the duration of your active educational cycle. Proctoring audio-video streams are deleted automatically within 90 days after review, unless custom institutional agreements require extended retention.

7. Contact Information

We may update this Privacy Policy periodically. For any questions regarding this Privacy Policy, your biometric rights, or data usage, please email our legal compliance officer at: