About this Policy

This Privacy Policy explains how Virtual Data IT ("the Company", "we") handles personal data on the TrueTest platform ("the Service"). It applies to administrators, instructors, proctors, examinees, and visitors to our public website.

When the Service is used by a university, school, training center, or exam center ("the Institution"), the Institution is the data controller for student records and exam content, and Virtual Data IT acts as the data processor on its behalf under the relevant subscription agreement.

1. Data We Collect

• Account data: full name, email, phone number, role, and the institution to which the account belongs.
• Exam data: questions, answers, attempts, scores, time stamps, and grading feedback.
• When proctoring is enabled, data may include camera images, face-matching data, audio feeds, screen sharing, and device-related events. Retained snapshots and recordings depend on application capabilities, enabled services, and deployment scope.
• Technical data: IP address, browser, operating system, language, and usage logs needed to operate and secure the Service.
• Communication data: messages sent through support channels, demo requests, and contact forms.

2. How We Use Data

• Deliver the Service: authentication, exam delivery, grading, reporting, and integrity controls.
• Detect and investigate cheating attempts and security incidents.
• Provide technical support and respond to inquiries.
• Improve the Service through aggregated and anonymized analytics.
• Comply with legal obligations and enforce our Terms & Conditions.

3. Data Sharing

• With the Institution that owns the tenant — administrators and instructors see the data they are authorized to view.
• With trusted infrastructure and AI providers acting under data-processing agreements with us, strictly to operate the Service.
• With public authorities only when required by law, court order, or to protect the rights and safety of our users.
• We do not sell personal data, and we do not share it with third parties for advertising.

4. Retention

Retention periods for account data, exam records, and proctoring evidence, and the method of deletion or anonymization, are defined by the retention policy, deployment agreement, and institutional requirements. Periods may vary by data category and record-keeping requirements.

5. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. Examinees should first contact their Institution, which controls their academic records. For other requests, contact us via the email address on your subscription or through our Contact page.

6. Security

Access controls, activity records, and connection safeguards support data protection and review. Protection, backup, retention, and recovery requirements depend on the hosting environment and agreement. Incidents are reviewed with the institution and operations team.