Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, password (hashed), and profile photo when you register.
• Quiz Content: Questions, answers, study materials, documents, and media files uploaded by quiz owners.
• Quiz Responses: Answers submitted by test takers, scores, completion times, and grading data.
• Proctoring Data: Camera recordings, screen activity, browser tab-switch events, and flagged incidents during proctored exams.
• Device & Usage Data: IP address, browser type, operating system, pages visited, and session duration.
• Payment Information: Billing details processed securely through our third-party payment providers. We do not store full credit card numbers on our servers.

2. How We Use Your Information

• To provide, maintain, and improve the Quizly platform and its features.
• To auto-grade quiz responses and generate performance analytics.
• To monitor exam integrity through proctoring features, including camera-based identity verification and tab-switch detection.
• To issue verifiable digital certificates upon quiz completion.
• To process subscription payments and manage billing.
• To send transactional emails such as quiz invitations, results, and receipts.
• To detect and prevent fraud, abuse, or unauthorized access.
• To respond to support requests and communicate product updates.

3. Google API Data Usage

Quizly's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we access: When you choose to import a quiz from Google Forms, Quizly requests read-only access to the Google Forms API (forms.body.readonly) and Google Drive API (drive.readonly) to read the form structure including questions, answer options, and correct answers.

How we use it: The form data is used solely to create a corresponding quiz within Quizly. We extract question text, answer options, and correct answers to populate your quiz. This data is stored as part of your Quizly quiz.

What we do NOT do:

• We do not modify, delete, or write to your Google Forms
• We do not access any Google Drive files other than the specific form you select
• We do not share Google user data with third parties
• We do not use Google data for advertising purposes
• We do not store your Google access tokens beyond the immediate import session

When we access it:Google data is only accessed when you explicitly click “Import from Google Forms” and authorize via the Google OAuth popup. We never access your Google data in the background.

4. Data Storage & Security

Your data is stored on secure cloud infrastructure with encryption at rest and in transit (TLS 1.2+). We implement industry-standard security measures including:

• AES-256 encryption for stored proctoring recordings and sensitive data.
• Hashed and salted passwords using bcrypt.
• Role-based access controls to limit internal data access.
• Regular security audits and vulnerability assessments.
• Automatic data backups with encrypted offsite storage.

While we take reasonable precautions, no system is 100% secure. We encourage you to use strong, unique passwords and enable two-factor authentication when available.

5. Proctoring Data

When a quiz owner enables proctoring, test takers are required to grant camera and screen access before starting the exam. We want to be transparent about how this data is handled:

• Camera recordings are encrypted and stored for a maximum of 90 days after exam completion, unless the quiz owner configures a shorter retention period.
• Proctoring footage is accessible only to the quiz owner who created the exam and authorized Quizly support staff for dispute resolution.
• Tab-switch counts and browser focus events are logged to detect potential cheating and are included in the exam report.
• Test takers are clearly notified before any proctored session begins and must provide explicit consent.
• You may request deletion of your proctoring data at any time by contacting our support team, subject to any ongoing dispute or investigation.

6. Cookies & Tracking

Quizly uses cookies and similar technologies to:

• Essential Cookies: Maintain your session, authentication state, and security tokens.
• Preference Cookies: Remember your theme (dark/light mode), language, and display settings.
• Analytics Cookies: Understand how users interact with the platform to improve performance and usability. We use privacy-respecting analytics tools.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

7. Third-Party Services

We use trusted third-party services to operate the platform. These providers have their own privacy policies and are contractually obligated to protect your data:

• Cloud Hosting: For secure, scalable infrastructure and data storage.
• Payment Processing: For handling subscription billing and transactions securely.
• Email Delivery: For sending quiz invitations, results, and account notifications.
• Analytics: For understanding usage patterns and improving the platform.

We do not sell your personal information to third parties.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information in your account.
• Deletion: Request deletion of your account and associated data, including proctoring recordings.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain data processing activities, such as analytics tracking.

To exercise any of these rights, please contact us using the information below. We will respond within 30 days of receiving your request.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out: