Privacy Notice

1. Purposes of processing

Collected data is used to:

• ✓Authentication: Verify user identity via phone number.
• ✓Service delivery: Generate, store, and apply online exams.
• ✓Grading and feedback: Process student responses and calculate grades automatically.
• ✓Administration: Billing, payment, and fulfillment of contractual obligations.
• ✓Service improvement: Aggregated usage analysis (without identifying individuals).

2. Personal data collected

3. Data transfer

Data is not shared with third parties for commercial purposes. It is shared exclusively with:

• ·Google Cloud / Gemini API — AI processing for question generation.
• ·Stripe — payment processing. examInA does not store card data.
• ·Brevo — transactional email sending.
• ·Competent authorities when required by tax, judicial, or administrative law.

All technology providers are contractually obligated to maintain confidentiality and process data only for the purposes described.

4. ARCO Rights

You may exercise your rights of Access, Rectification, Cancellation, and Opposition (ARCO), or revoke your consent, by sending a request to:

5. Security and retention

examInA implements technical and administrative measures to protect your data: in-transit encryption (HTTPS/TLS), session-based authentication, least-privilege access. Teacher data is retained while the account is active. Exam and response data is retained for 12 months after last use. You may request account deletion by emailing the address above.

6. Territorial scope

examInA operates under Mexican law (LFPDPPP) domiciled in Guanajuato, Mexico. The service may be used by teachers anywhere in the world. For users outside Mexico, the service is provided under the same conditions; Mexican law applies. Data is stored on Google Cloud servers in the United States, under data protection adequacy agreements.