1. Data ControllerExams Viewer platform is operated and managed by the development team.
2. Data We CollectWe collect the following personal data:
Authentication Data (via Email OTP) Email address Name (optional) Authentication session data Usage Data Exam sessions and scores Question states (favorites, notes, difficulty ratings) Study statistics and progress Time spent on platform Organization Data Organization membership information Role within organization 3. Purpose of Data Processing We process your data for the following purposes:
Authentication and account management: To provide secure access to your accountService provision: To deliver the Exams Viewer platform featuresProgress tracking: To save your exam progress and statisticsUser experience improvement: To provide personalized features and recommendationsCommunication: To send important service updates (if applicable)4. Legal Basis for Processing We process your data based on:
Consent: You actively consent when signing up via Email OTPContract execution: Processing is necessary to provide the service you requestedLegitimate interest: To improve our service and provide user support5. Data Retention We retain your data for the following periods:
Active accounts: Data is kept as long as you use the serviceInactive accounts: Accounts inactive for 24 months may be deletedDeleted accounts: Data is permanently deleted within 30 days of account deletionSession data: Expired sessions are automatically cleaned up after 30 days6. Data Sharing We do not sell your personal data. We only share data with the following service providers:
Supabase (Database hosting)
Location: EU/US regions available | Purpose: Data storage and authentication
Vercel (Application hosting)
Location: Global CDN | Purpose: Application delivery
All service providers are GDPR-compliant and use appropriate security measures.
7. Your Rights (GDPR)Under GDPR, you have the following rights:
Right to Access Request a copy of your data
Right to Rectification Correct inaccurate data
Right to Erasure Delete your account and data
Right to Portability Export your data in JSON format
Right to Object Object to data processing
Right to Restriction Limit how we use your data
Exercise Your Rights
You can exercise these rights through the "My Data" page when logged in:
Go to My Data 8. Security Measures We implement industry-standard security measures:
Encryption: HTTPS for all communications, encrypted data storageRow Level Security (RLS): Database-level access controlsAuthentication: Secure Email OTP authenticationRegular security updates: Keep systems up to dateAccess controls: Limited access to personal data9. Cookies and Tracking We use the following cookies:
Essential Cookies
Required for authentication and basic functionality. Cannot be disabled.
Analytics Cookies (Optional)
Help us understand usage patterns and improve the platform. Can be disabled in browser settings.
10. Changes to This Policy We may update this Privacy Policy from time to time. Significant changes will be communicated via email or through a prominent notice on the platform. Continued use of the service after changes constitutes acceptance of the updated policy.
11. Contact Information For any privacy-related questions, concerns, or requests, please contact us:
12. Data Protection Authority If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.