Privacy Policy

1. Introduction

Welcome to Aveluate ("we," "our," or "us"). Aveluate is a skill verification and learning platform that helps users practice quizzes, take proctored exams to earn verified credentials, and share badges with employers. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. By using our services at my.aveluate.com and our mobile applications (collectively, the "Platform"), you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register, we collect your name, email address, and password.
• Profile Information: You may provide additional details such as your professional background, skills, and profile photo.
• Assessment Data: Your quiz answers, exam responses, scores, and performance metrics.
• Verification Data: When you purchase skill verification, we process payment information through our third-party payment processor (Stripe). We do not store your full credit card details.
• Resume and Career Data: If you use our career features, you may upload your resume and job preferences.
• Content Requests: Any content or feature requests you submit through the Platform.

2.2 Information Collected During Proctoring

When you take proctored exams, our proctoring system may collect:

• Video and Audio Recordings: Camera feeds from your device(s) during the exam session to ensure exam integrity.
• Browser Activity: Tab switching events, copy-paste actions, and screen sharing attempts during exams.
• Device Information: Camera type, device orientation, and connection status during proctoring sessions.

Proctoring data is used solely for verifying the integrity of your exam and is handled in accordance with the data retention policies described below.

2.3 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on activities, and learning progress.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Log Data: IP address, access times, and referring URLs.

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide and Improve Services: To operate the Platform, deliver quizzes and exams, process verifications, and improve the user experience.
• Skill Verification: To assess and verify your skills, generate credentials, and create shareable badges.
• Proctoring and Integrity: To ensure the integrity of proctored exams through monitoring and violation detection.
• Analytics and Benchmarks: To provide you with performance analytics, progress tracking, and skill benchmarks.
• Learning Recommendations: To personalize learning paths, sprints, and content recommendations based on your performance.
• Career Services: To match your verified skills with relevant job opportunities if you opt into career features.
• Communication: To send important updates about your account, exam reminders, and sprint notifications.
• Safety and Security: To detect and prevent fraud, abuse, and security incidents.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Employers (With Your Consent): When you share your verified badges or credentials with employers through the Platform.
• Bootcamp Organizers: If you enroll in a bootcamp, relevant performance data may be shared with the organizer.
• Service Providers: We use third-party services for payment processing (Stripe), cloud storage (DigitalOcean), error tracking (Sentry), and AI-powered features (for content generation and analysis). These providers have access only to the data necessary to perform their functions.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Storage and Security

We take the security of your data seriously. Your information is stored on secure servers and we implement appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction.

• All data in transit is encrypted using TLS/SSL.
• Passwords are hashed and never stored in plain text.
• Access to user data is restricted to authorized personnel only.
• We use JWT-based authentication with token rotation and blacklisting for session security.
• Proctoring recordings are stored in secure cloud storage with restricted access.

6. Data Retention

We retain your information for as long as necessary to fulfill the purposes described in this policy:

• Account Data: Retained while your account is active and for a reasonable period afterward.
• Assessment Data: Quiz and exam results are retained to maintain your credentials and learning history.
• Proctoring Recordings: Video recordings from proctored sessions are retained for a limited period necessary for verification and integrity review, then securely deleted.
• Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely for platform improvement.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal obligations.
• Portability: Request a portable copy of your data in a structured format.
• Objection: Object to the processing of your data in certain circumstances.
• Withdrawal of Consent: Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at privacy@aveluate.com.

8. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We may also use analytics tools to understand how the Platform is used. You can control cookie preferences through your browser settings.

9. Children's Privacy

Our Platform is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Platform with a revised "Last updated" date. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@aveluate.com
• Website: my.aveluate.com