Privacy Policy

This Privacy Policy explains how Gater ("we", "us") processes personal data when an institution uses our platform to deliver entrance exams, and when students sit those exams.

1. Who is the controller?

For exam delivery, the institution that issues the exam (your university or school) is the data controller. Gater acts as the data processor on their behalf, governed by a Data Processing Agreement.

2. What data we process

• Account data: name, email, role, institution.
• Exam data: answers, scores, certificates, attempt timestamps.
• Proctoring data: webcam snapshots, microphone activity indicators, screen focus events, dual-camera frames.
• Technical data: IP address, browser, device fingerprint, network quality.

3. Lawful basis

We process personal data on the lawful basis chosen by the institution — typically the performance of an admission contract, the institution's legitimate interest in fair admissions, or your explicit consent for proctoring.

4. Where data is stored

All personal data is hosted in the European Union and encrypted at rest with AES-256 and in transit with TLS 1.2+.

5. Retention

Proctoring artefacts (snapshots, flagged events) are retained for the period required by the institution for review and appeal — typically 60 to 365 days. Account and result data is retained while the institution requires it.

6. Your rights

You can request access, correction, deletion, restriction, portability, or objection by contacting your institution's registrar. We will assist your institution in responding.

7. Subprocessors

We use a limited set of vetted subprocessors (cloud hosting, email delivery, payment processing). The current list is available on request.

8. Contact

For privacy questions, email privacy@examguard.app.