Privacy Policy

1. Information We Collect

• Account information: name, email address, and password hash when you register.
• Payment information: processed securely by Stripe. We do not store credit card numbers. Stripe may share your email, transaction amount, and payment status with us.
• Usage data: pages visited, practice questions answered, quiz scores, study progress, flashcard interactions, and feature usage timestamps.
• Device and access data: IP address, browser type, operating system, and referring URLs collected automatically on each visit.
• Cookies: session cookies for authentication and preference cookies for language selection. We do not use third-party advertising cookies.
• Communications: emails you send to our support addresses and any feedback you submit through the platform.

2. How We Use Your Information

• To provide and maintain the exam preparation service, including quiz delivery, progress tracking, and spaced-repetition scheduling.
• To process payments and grant access to premium content.
• To send transactional emails: account confirmation, payment receipts, and access-related notifications.
• To send educational emails: study tips, feature announcements, and abandoned-cart recovery reminders. You can unsubscribe from marketing emails at any time.
• To improve the platform through aggregated, anonymized analytics (e.g., question difficulty calibration, pass-rate benchmarks).
• To detect and prevent fraud, unauthorized access, and abuse of the service.

3. Analytics and Tracking

We use Google Analytics 4 (GA4) via Cloudflare Zaraz to understand how visitors interact with the site. GA4 collects anonymized page-view and event data. IP addresses are anonymized before storage. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

4. Payment Processing

All payment transactions are handled by Stripe, Inc. Stripe's privacy policy governs how they process your payment data. We receive only a confirmation of payment, your email, and transaction metadata. We never see or store your full card number, CVV, or billing address.

5. Email Communications

Transactional and marketing emails are sent via Amazon Simple Email Service (SES). We store records of emails sent (type, timestamp, recipient) for support and compliance purposes. Each marketing email includes an unsubscribe link. We honor unsubscribe requests within 24 hours.

6. Data Retention

• Account data is retained for as long as your account is active.
• Quiz progress and study data are retained for the duration of your account.
• Payment records are retained for 7 years for tax and legal compliance.
• Server access logs (IP, user-agent) are retained for 90 days for security purposes.
• You may request deletion of your account and associated data at any time by emailing support@fraserexam.com.

7. Data Sharing

• We do not sell, rent, or trade your personal information to third parties.
• We share data only with service providers necessary to operate the platform: Stripe (payments), Amazon SES (email delivery), Cloudflare (hosting and CDN), and Google (analytics).
• We may disclose information if required by law, court order, or governmental authority.

8. Data Security

We implement industry-standard security measures including HTTPS encryption for all data in transit, hashed and salted passwords, environment-variable-based secret management, and role-based access controls. While no system is 100% secure, we take reasonable precautions to protect your data.

9. Your Rights

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate personal data.
• Deletion: request deletion of your account and personal data.
• Portability: request an export of your data in a machine-readable format.
• Objection: object to processing of your data for marketing purposes.
• To exercise any of these rights, email support@fraserexam.com with the subject line "Privacy Request".

10. Children's Privacy

FraserExam is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. International Data Transfers

Your data may be processed in data centers located in the United States and other countries where our service providers operate. By using FraserExam, you consent to the transfer of your data to these locations. We ensure that all service providers maintain adequate data protection standards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform. Your continued use of the service after changes take effect constitutes acceptance of the revised policy.

13. Contact

If you have questions about this Privacy Policy or our data practices, please contact us at support@fraserexam.com.