Privacy policy

Who we are

Exams360 is built and operated from the European Union by its founding team, self-employed in the Czech Republic and Poland. Full legal identification is provided in every customer agreement and is available on request.

For anything in this policy, write to privacy@exams360.net.

Two roles: controller and processor

Exams360 is provided to organisations that certify people. That gives us two distinct roles under data protection law.

• We are the controller for this website and for organisation staff accounts: the data described in the next section.
• We are the processor for candidate data. The certification organisation that enrols a candidate is the controller; we process candidate data only on that organisation’s instructions, under a data processing agreement.

Data we handle as a controller

• Early-access form: the work email you type, used only to reply to your request. Submissions are delivered by our form provider (Web3Forms).
• Organisation staff accounts: name, email address, preferred language, and sign-in and security events. We process these to provide the service and to keep accounts secure.
• This website: we measure visits with a cookieless, aggregate analytics service (Vercel Analytics). It sets no cookies and builds no individual profiles. The website itself sets no cookies at all.

Data we handle as a processor

When an organisation runs exams on Exams360, we process on its behalf:

• candidate identity details (name, email address),
• exam attempts and answers,
• webcam, microphone and screen recordings made during exams,
• invigilation flags and the decisions your organisation’s reviewers make,
• results and issued certificates.

Candidates: your certification organisation decides why and how long this data is processed. Questions and requests about your data go to them first; we support them in answering.

Retention and erasure

We keep controller data only as long as we need it for the purposes above, then delete it.

Retention of candidate data, including recordings, is set by the certification organisation’s agreement with us.

When a candidate’s personal data is erased, we remove the personal data, including recordings, and keep an anonymised record showing that the certificate was validly issued. The organisation keeps its evidence; the person’s data is gone.

Recipients

We share personal data only with the service providers that run Exams360, and where the law requires it. The current list of providers is included in every data processing agreement and is available on request. We do not sell personal data and we do not use candidate data for advertising or profiling.

Where data lives

Exams360 is built in the EU and customer data is hosted in the EU. Where a provider processes data outside the EU (for example the optional AI assistant), the transfer is covered by recognised safeguards such as standard contractual clauses.

Public certificate verification

Organisations can issue certificates with a public verification page. Anyone with the link can confirm the certificate is valid, and the page shows the certificate holder’s name and the certificate details. This disclosure is a feature the issuing organisation enables and is responsible for telling its candidates about.

Your rights

Depending on where you live, you can ask for access to your personal data, correction, erasure, restriction, portability, and you can object to processing. You can also complain to your data protection authority.

If you are an organisation staff member or a website visitor, write to privacy@exams360.net. If you are a candidate, contact the organisation that certified or examined you; it is the controller of your data and we support it in responding.

Children

Exams360 is built for professional certification and is not directed to children. You must be at least 16 years old to use the service, and organisations must not enrol candidates under 16.

Changes and contact

We update this policy as the service evolves and show the date of the latest change at the top. Questions go to privacy@exams360.net.