Privacy Policy

1. Introduction

EasyAssess ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our optical mark recognition (OMR) platform and services.

By accessing or using EasyAssess, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an account (name, email address, password)
• Use our services (assessment data, answer sheets, student rosters, test results)
• Make payments (billing information processed through PayMongo)
• Contact our support team (correspondence and support requests)
• Sign in with OAuth providers (name, email, profile picture from Google)

2.2 Automatically Collected Information

When you access our services, we automatically collect:

• Device information (device type, operating system, browser type)
• Usage data (pages visited, features used, time spent on platform)
• IP address and general location information
• Cookies and similar tracking technologies

3. How We Use Your Information

We use collected information for the following purposes:

• To provide, operate, and maintain our OMR services
• To process your transactions and manage your subscription
• To improve, personalize, and expand our services
• To communicate with you about service updates, security alerts, and support
• To detect, prevent, and address technical issues and security threats
• To analyze usage patterns and optimize platform performance
• To comply with legal obligations and enforce our terms of service

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We engage third-party service providers to perform functions on our behalf, including payment processing (PayMongo), hosting services, and analytics. These providers have access to your information only to perform specific tasks and are obligated to protect your data.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• All data transmission is encrypted using HTTPS with TLS
• Passwords are hashed using industry-standard bcrypt algorithm
• Database backups are encrypted and stored securely
• Two-factor authentication is available for enhanced account security
• Regular security audits and vulnerability assessments

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

You may request a copy of your personal data. Assessment results and roster data can be exported directly from the platform in CSV format.

Correction

You may update or correct your account information at any time through your account settings.

Deletion

You may delete your account and all associated data at any time from your account settings. Upon deletion, your data will be permanently removed within 30 days, with backup copies deleted within 90 days.

Marketing Communications

You may opt out of marketing emails by clicking the unsubscribe link in any marketing email. Note that you cannot opt out of service-related communications.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. When you delete your account, we permanently delete your personal data and assessment records within 30 days. Backup copies are deleted within 90 days. We may retain certain information as required by law or for legitimate business purposes.

8. Children's Privacy

EasyAssess is intended for use by educators and administrators. We do not knowingly collect personal information from children under 13 years of age. Student data entered by educators is processed as part of the service but is not used for any other purpose. If you believe we have collected information from a child under 13, please contact us immediately.

9. International Data Transfers

Your data is stored on servers located in AWS Singapore (ap-southeast-1 region). If you access our services from outside Singapore, your information may be transferred to and processed in Singapore. We use industry-standard encryption and security measures to protect your data during transfer and storage.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze platform usage. You can control cookies through your browser settings, though disabling cookies may affect platform functionality.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform. Your continued use of EasyAssess after changes become effective constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

By using EasyAssess, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.