Privacy Policy

Procta provides AI-proctored exam services to educational institutions. This Privacy Policy explains how we collect, use, and protect your personal data.

1. Information We Collect

Account Information: Name, email address, phone number, roll number, institution name.

Exam Data: Exam answers, screen recordings, camera feeds (laptop and phone), audio recordings, keystroke patterns, mouse movements.

Device Information: Browser type, operating system, IP address, display configuration, connected peripherals.

Violation Data: Automated integrity flags (gaze tracking, face presence, multiple faces, screen sharing, VPN/proxy detection).

2. How We Use Your Information

To verify student identity before exams
To detect and prevent academic dishonesty during exams
To generate exam scores and performance analytics
To communicate exam invitations, reminders, and results
To provide teacher dashboards and review tools
To improve our AI models (anonymized and aggregated data only)

3. Data Sharing

We share data only with:

Your educational institution — exam results, violation reports, session recordings
Service providers — Supabase (database), Groq/LLM providers (AI grading), Razorpay (payments)
Law enforcement — when required by applicable law

We never sell your personal data. We never use exam content for training unrelated AI models.

4. Data Retention

Screenshots: 90 days, then permanently deleted
Phone camera frames: 24 hours, then permanently deleted
Exam answers and scores: Retained for the duration of your account
Violation logs and audit trails: 1 year

5. Your Rights

You have the right to:

Access your personal data — use the Privacy Center to export your data
Rectify inaccurate data — update your profile in the dashboard
Delete your account and associated data — use the Privacy Center
Object to processing — contact your institution's exam administrator
Data portability — export your data as JSON from the Privacy Center

Exercise these rights at /privacy or by contacting support@procta.net.

6. Security

We implement encryption at rest (AES-256) and in transit (TLS 1.3), regular security audits, access controls, and employee confidentiality agreements. See our Security Questionnaire for details.

7. Contact

For privacy-related inquiries, contact:
Email: privacy@procta.net
Data Protection Officer: dpo@procta.net