Privacy Policy

We collect information that you provide directly to us, including:

• Account Information: Name, email address, company name, job title, and password when you create an account
• Profile Information: Optional profile details, profile picture, and professional background
• Test Content: Questions, answers, code submissions, and assessment results you create or submit
• Billing Information: Payment method details processed securely through our payment processor (Stripe)
• Communications: Messages you send us through support tickets, emails, or feedback forms
• Usage Data: Information about how you use our platform, including access times, pages viewed, IP address, and browser type
• Proctoring Data: For test integrity, we may collect tab switches, fullscreen status, and geolocation (with candidate consent)

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions
• Personalize and improve the platform experience
• Facilitate test administration and candidate assessment

We do not sell your personal information. We may share in these circumstances:

• Within Your Organization: Test results and candidate information are shared with authorized users within your company account
• Service Providers: With third-party vendors who perform services on our behalf (payment processing, email delivery, hosting)
• Legal Requirements: When required by law or to protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize us to share your information

We maintain strict data isolation between tenant companies — your data is never shared with other Test Utopia customers.

We implement industry-standard measures to protect your information:

• Encryption of data in transit using TLS/SSL
• Backups encrypted with AES-256 before they leave our servers
• Multi-tenant architecture with complete data isolation
• Secure code execution in isolated Docker containers
• Two-factor authentication (2FA) with device fingerprinting
• Role-based access control (RBAC) and audit logging
• Regular backups and disaster recovery procedures

While we strive to protect your data, no method of transmission over the internet is 100% secure.

• Account Data: Retained while your account is active and for a reasonable period after closure
• Test Results: Retained according to your company's retention settings or legal requirements
• Billing Records: Retained for tax and legal compliance (typically 7 years)
• Audit Logs: Retained for security and compliance (typically 12-24 months)

You can request deletion of your data at any time at [email protected]

• Necessary Cookies: Required for authentication, security, and core platform functionality
• Functional Cookies: Enable enhanced functionality such as error monitoring and stability improvements
• Analytics Cookies: Help us understand how visitors interact with our platform (anonymised)
• Marketing Cookies: Measure campaign performance and may be used to deliver relevant advertising

For the full list of cookies — including names, providers, purpose, and duration — see our Cookie Policy. You can change your preferences at any time via "Cookie Settings" in the footer.

Your information may be transferred to servers located outside of your jurisdiction where data protection laws may differ. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws, including GDPR for European users.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you by:

• Updating the "Last updated" date at the top
• Sending an email notification for material changes
• Displaying a notice on our platform