1. Introduction
TestPilot ("we", "our", or "us") operates an enterprise assessment and proctoring platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service. By accessing or using TestPilot, you agree to the practices described in this policy.
2. Information We Collect
2.1 Account Information
When you register, we collect your full name, email address, organisation name, and role. Administrators may also provide billing contact details.
2.2 Assessment Data
We collect responses, scores, timestamps, and attempt metadata generated during assessments and practice sessions.
2.3 Proctoring Data
When AI proctoring is enabled by your organisation, we may collect webcam images, gaze-tracking signals, audio activity indicators, and browser-behaviour logs solely for integrity verification purposes.
2.4 Usage & Technical Data
We automatically collect IP addresses, browser type, device identifiers, pages visited, and session durations to operate and improve the Service.
3. How We Use Your Information
- Provide, maintain, and improve the Service
- Authenticate users and enforce access controls
- Generate assessment reports and analytics for administrators
- Detect and prevent fraud, cheating, and security breaches
- Send transactional communications (e.g., exam confirmations, results)
- Comply with legal obligations
We do not sell your personal data to third parties, and we do not use assessment or proctoring data for advertising purposes.
4. Data Sharing
We share data only in the following circumstances:
- With your organisation: Administrators of your organisation can access assessment results and proctoring reports for candidates they manage.
- Service providers: We engage trusted sub-processors (e.g., cloud hosting, email delivery) under strict data processing agreements.
- Legal requirements: We may disclose data when required by law, court order, or to protect the rights and safety of users.
5. Data Retention
We retain account and assessment data for as long as your organisation's account is active, plus a 90-day grace period after account closure. Proctoring recordings are retained for 30 days unless your organisation requests extended retention under a separate agreement. You may request deletion of your personal data at any time by contacting us.
6. Security
We implement industry-standard safeguards including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. For more detail, see our Security page.
7. Cookies
We use strictly necessary cookies to maintain authenticated sessions and remember user preferences. We do not use third-party advertising or tracking cookies. You can control cookie behaviour through your browser settings; disabling session cookies will prevent you from logging in.
8. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at support.testpilot@gmail.com. We will respond within 30 days.
9. Children's Privacy
The Service is not directed to individuals under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.
11. Contact Us
For privacy-related questions or requests, contact us at:
TestPilot
Email: support.testpilot@gmail.com