Examaxis

Privacy Policy.

Last updated: May 15, 2026

1. Overview

Examaxis ("we", "us", "our") operates an IT certification exam practice platform. This policy explains what data we collect, why we collect it, and how you can control it. By using Examaxis you agree to the practices described here.

2. Data We Collect

  • Account data: email address, name, and password hash when you register.
  • Usage data: pages visited, questions attempted, features used, and timestamps — collected to improve the product.
  • Practice data: your question attempts, bookmarks, notes, and topic progress within the platform.
  • Payment data: billing name and email passed to our payment processor (Dodo Payments). We do not store card numbers.

3. How We Use Your Data

  • Provide and improve the Examaxis service.
  • Send transactional emails (account confirmation, password reset, payment receipts).
  • Send product updates and announcements — you can unsubscribe at any time.
  • Detect and prevent abuse or fraudulent activity.

4. Third-Party Services

  • Dodo Payments: processes one-time topic purchases. Your card details go directly to them, not us.
  • Cloudflare R2: stores uploaded assets (profile pictures, etc.) in encrypted object storage.
  • Email provider: used to send transactional and marketing emails.

We do not sell your personal data to third parties.

5. Cookies & Tracking

We use strictly necessary cookies for authentication sessions. We may use analytics cookies to understand feature usage. You can disable non-essential cookies in your browser settings at any time.

6. Data Retention

We retain your account data for as long as your account is active. After account deletion, personal data is removed within 30 days. Anonymised usage statistics may be kept indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Object to or restrict certain processing activities.
  • Data portability (receive your data in a machine-readable format).

To exercise any of these rights, email us at the address below.

8. Security

We use industry-standard measures including encrypted connections (TLS), hashed passwords, and access controls. No system is perfectly secure — please use a strong, unique password and enable two-factor authentication where available.

9. Changes to This Policy

We may update this policy as the product evolves. Material changes will be notified by email or in-app banner at least 14 days before taking effect.

10. Contact

Questions about this policy? Email us at [email protected] or use the contact form.