About this Policy

This Privacy Policy explains how Virtual Data IT ("the Company", "we") handles personal data on the TrueTest platform ("the Service"). It applies to administrators, instructors, proctors, examinees, and visitors to our public website.

When the Service is used by a university, school, training center, or exam center ("the Institution"), the Institution is the data controller for student records and exam content, and Virtual Data IT acts as the data processor on its behalf under the relevant subscription agreement.

1. Data We Collect

• Account data: full name, email, phone number, role, and the institution to which the account belongs.
• Exam data: questions, answers, attempts, scores, time stamps, and grading feedback.
• Proctoring data: webcam snapshots and recordings, microphone audio, screen activity, and device fingerprints, only when the Institution enables proctoring for an exam.
• Technical data: IP address, browser, operating system, language, and usage logs needed to operate and secure the Service.
• Communication data: messages sent through support channels, demo requests, and contact forms.

2. How We Use Data

• Deliver the Service: authentication, exam delivery, grading, reporting, and integrity controls.
• Detect and investigate cheating attempts and security incidents.
• Provide technical support and respond to inquiries.
• Improve the Service through aggregated and anonymized analytics.
• Comply with legal obligations and enforce our Terms & Conditions.

3. Data Sharing

• With the Institution that owns the tenant — administrators and instructors see the data they are authorized to view.
• With trusted infrastructure and AI providers acting under data-processing agreements with us, strictly to operate the Service.
• With public authorities only when required by law, court order, or to protect the rights and safety of our users.
• We do not sell personal data, and we do not share it with third parties for advertising.

4. Retention

Personal data is retained for as long as the Institution maintains an active subscription, or for the period required by applicable academic and legal record-keeping rules. Proctoring recordings are retained for the window configured by the Institution and then deleted or anonymized.

5. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. Examinees should first contact their Institution, which controls their academic records. For other requests, contact us via the email address on your subscription or through our Contact page.

6. Security

We apply industry-standard organizational and technical safeguards including encryption in transit, role-based access controls, audit logging, and regular security reviews. No system is perfectly secure, and we work with our customers to respond quickly if an incident occurs.