Privacy notice

What we hold, and why

• Your email address and name, to sign you in and to name you on your results.
• Whether you're a candidate or on an organisation's team, to decide what you can see and do.
• Your exams: enrolments, responses, scores and results, so your organisation can run and grade them.
• Your orders: what you bought, what you paid, and the brand and last four digits of your card, for your receipts and any refund.
• A record of sign-ins and changes, to keep the platform safe and show who did what.
• Your IP address, to limit how often sign-in codes and Contact form messages are sent.
• When an exam is proctored, what proctoring records, to check it was sat fairly.
• What you write in the Contact form (your name, work email, organisation and message), emailed to support@iticone.com so we can reply. It's kept only as that email, never in the platform.

Your organisation sees the data of its own candidates and team. We never sell personal data.

Proctoring

Depending on the exam, proctoring records:

• how many people your camera sees, with a photo when it sees no one;
• noise your microphone picks up;
• a screenshot whenever you leave the exam tab;
• photos of you at random times;
• whether another screen is connected;
• for exams that check ID, a selfie and a photo of your ID card, with your Full name sent to AutoProctor to check against it;
• for exams that check for impersonation, a photo of you at the start, compared with later ones.

AutoProctor also records your browser and device details.

For exams with live monitoring, your organisation's reviewers may also watch your camera and screen live, without sound. What they watch isn't recorded; we keep who watched and when, and any message or note they made.

Before you start, the proctoring consent lists what that exam records. Your organisation's reviewers may look at these records to decide whether your result stands. If they propose voiding your attempt, you can reply within 7 days before it's final.

Our copy is deleted 90 days after your attempt's integrity outcome is final, or a year after if it's voided. Your integrity score, what was detected and what reviewers noted stay with your attempt. AutoProctor deletes its copy within 6 months.

Where it's stored

On Amazon Web Services (AWS) in Mumbai, India. AutoProctor also keeps what proctoring records, on servers in the United States. Live monitoring is streamed through AWS and never stored. The emails we send, with their addresses and contents, are kept by Resend in the United States for 30 days. Stripe keeps your payment details in the United States. Certifier keeps the certificates and badges it draws in Ireland until the platform has its copy.

Who processes it for us

• AWS hosts the platform and streams live monitoring.
• Resend (Plus Five Five, Inc.) sends its emails.
• AutoProctor runs proctoring, for the exams that use it.
• Certifier draws certificates and badges in Ireland, and deletes them once the platform has its copy.
• Stripe takes card payments, and bills organisations. Your email address and card details go to Stripe, and we keep only the brand and last four digits of your card.
• Hostinger receives the email you send to support@iticone.com.

Emails we send

Only about signing in, your exams, courses and certificates, and what you buy, never marketing:

• sign-in codes, when you ask for one;
• invitations to join an organisation's team;
• notice that you're enrolled on an exam or a course;
• your result, when it's ready and if it changes;
• your certificates and badges, when they're issued, and if one is revoked;
• a receipt when you pay for a course or exam, and an email if it's refunded;
• to an organisation's admins, when an exam couldn't give a candidate a paper.

Access and deletion

To get a copy of the data we hold about you, or to ask us to delete it, write to support@iticone.com from the address you sign in with. A candidate can also ask their organisation.

Changes

If this notice changes, we'll update it here and change the date above.