Privacy Policy

We are committed to protecting your privacy and ensuring the security of your personal information. This policy explains how we collect, use, and safeguard your data.

Last updated: January 15, 2024

Our Privacy Principles

Data Minimization

We collect only the information necessary to provide our services and improve your experience.

Security First

Your data is protected with enterprise-grade security measures and encryption protocols.

Transparency

We clearly explain what data we collect, how we use it, and who we share it with.

User Control

You have full control over your data, including the ability to access, modify, or delete it.

Information We Collect

Account Information
Information you provide when creating and managing your account

Examples:

  • Name and email address
  • Password (encrypted)
  • Profile information
  • Organization details
  • Billing information

Purpose:

Account management, authentication, billing, and customer support

Retention:

Until account deletion or as required by law

Test Data
Information collected during psychological assessments

Examples:

  • Test responses and answers
  • Assessment results and scores
  • Completion timestamps
  • Test session metadata
  • Performance analytics

Purpose:

Providing test results, improving assessments, and research (anonymized)

Retention:

As long as your account is active, or as specified in your settings

Usage Information
Information about how you interact with our platform

Examples:

  • Pages visited and features used
  • Time spent on platform
  • Device and browser information
  • IP address and location data
  • Error logs and performance data

Purpose:

Platform improvement, security monitoring, and technical support

Retention:

Up to 2 years for analytics, 30 days for logs

Communication Data
Information from your communications with us

Examples:

  • Support ticket content
  • Email correspondence
  • Chat transcripts
  • Survey responses
  • Feedback and reviews

Purpose:

Customer support, service improvement, and quality assurance

Retention:

Up to 3 years for support records

How We Use Your Information
We use your personal information for the following purposes:

Primary Uses:

  • Provide and maintain our psychological testing services
  • Process and deliver test results and interpretations
  • Manage your account and provide customer support
  • Process payments and manage billing
  • Communicate with you about our services

Secondary Uses:

  • Improve our assessments and platform through analytics and feedback
  • Conduct anonymized research and statistical analysis
  • Enforce our terms and protect against fraud and abuse
  • Comply with legal obligations and regulatory requirements

Your Data Rights

Access
Request a copy of all personal data we hold about you

How to exercise: Use the data export feature in your account settings or contact support

Rectification
Correct any inaccurate or incomplete personal data

How to exercise: Update your profile information directly or contact support for assistance

Erasure
Request deletion of your personal data (right to be forgotten)

How to exercise: Use the account deletion feature or contact support with your request

Portability
Receive your data in a structured, machine-readable format

How to exercise: Use the data export feature to download your data in JSON or CSV format

Restriction
Limit how we process your personal data in certain circumstances

How to exercise: Contact support to discuss specific restrictions on data processing

Objection
Object to processing of your data for direct marketing or legitimate interests

How to exercise: Adjust your communication preferences or contact support

Our Security Measures

Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256)

Access Controls

Role-based access controls and multi-factor authentication for all staff

Regular Audits

Third-party security audits and penetration testing performed quarterly

Data Centers

SOC 2 Type II certified data centers with 24/7 monitoring

Backup & Recovery

Automated backups with point-in-time recovery capabilities

Incident Response

Comprehensive incident response plan with 24-hour breach notification

If you have any questions about this privacy policy, please contact our support team.