Privacy Policy

1. Introduction

SCMExam ("we," "us," or "our") operates the website scmexam.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

Personal Information

When you register for an account or make a purchase, we may collect:

• Name and email address
• Payment information (processed securely by Stripe; we do not store card details)
• Account credentials (passwords are hashed and never stored in plaintext)

Usage Information

We automatically collect certain information when you use our Service:

• IP address and browser type
• Pages visited and time spent on pages
• Quiz answers and performance data
• Device information and operating system

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send you study reminders, progress updates, and promotional communications
• Personalize your learning experience using spaced repetition algorithms
• Monitor and analyze usage patterns to improve our platform
• Detect, prevent, and address technical issues or fraudulent activity

4. Third-Party Services

We use the following third-party services:

• Stripe — for secure payment processing
• Amazon SES — for transactional and marketing emails
• Cloudflare — for hosting, CDN, and security
• Google Analytics — for website analytics (you may opt out using browser extensions)
• Google OAuth — for optional social login

Each third-party service has its own privacy policy governing the use of your information.

5. Cookies

We use cookies to maintain your login session and remember your preferences. We also use analytics cookies (via Google Analytics and Cloudflare Zaraz) to understand how visitors use our site. You can control cookies through your browser settings.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information. Passwords are hashed using PBKDF2 with SHA-256. Payment data is handled entirely by Stripe and never touches our servers. All data in transit is encrypted via TLS.

7. Data Retention

We retain your account information for as long as your account is active or as needed to provide services. Quiz performance data and study analytics are retained to support your ongoing learning. You may request deletion of your account and associated data at any time by contacting us.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Opt out of marketing communications at any time
• Object to processing of your personal data

9. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@scmexam.com.