Privacy Policy

Nexovea provides an exam preparation platform, including past questions, mock exams, CBT simulations, and performance analytics (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, and the rights you have over it — including the protections available to you under the EU General Data Protection Regulation (GDPR) if you are located in the European Economic Area (EEA) or United Kingdom.

1. Who We Are

Nexovea is the data controller responsible for your personal data processed through the Service. If you have any questions about this policy or how your data is handled, you can reach us at info@nexovea.ai.

2. Information We Collect

• Account information: name, email address, password (stored as a salted hash), and profile details you provide when you sign up.
• Usage & performance data: questions attempted, scores, time spent, subject areas, mock exam and CBT simulation results, and other activity used to generate your performance insights.
• Payment information: if you subscribe to a paid plan, payment is processed by a third-party payment processor. We do not store your full card details on our servers.
• Device & technical data: IP address, browser type, device identifiers, and log data collected automatically when you use the Service.
• Cookies & similar technologies: used to keep you signed in and understand how the Service is used. See our Cookie Settings page for details and controls.

3. How We Use Your Information

• To create and maintain your account and provide the Service.
• To generate performance insights, readiness scores, and study recommendations.
• To process payments and manage subscriptions.
• To communicate with you about your account, updates, or support requests.
• To monitor, secure, and improve the Service, including detecting fraud or abuse.
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR)

If you are located in the EEA or UK, we rely on one or more of the following legal bases to process your personal data:

• Contractual necessity — to provide the Service you signed up for.
• Consent — for non-essential cookies, analytics, and marketing communications, which you can withdraw at any time.
• Legitimate interests — to secure and improve the Service, provided this does not override your fundamental rights.
• Legal obligation — where processing is required to comply with the law.

5. How We Share Your Information

We do not sell your personal data. We may share it with:

• Cloud hosting and infrastructure providers who store and process data on our behalf.
• Payment processors, to complete subscription transactions.
• Email and communication service providers, to send account and product notifications.
• Authorities, where required to comply with a legal obligation or protect our rights.

All third parties who process personal data on our behalf are bound by contractual obligations to keep it confidential and use it only for the purposes we specify.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA or UK, including where our hosting providers operate servers. Where this occurs, we take steps to ensure an adequate level of protection, such as reliance on Standard Contractual Clauses or equivalent safeguards recognized under GDPR.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required to comply with a legal obligation, resolve disputes, or enforce our agreements.

8. Your Rights

If you are located in the EEA or UK, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your personal data ("right to be forgotten").
• Request a copy of your data in a portable format.
• Object to or request restriction of certain processing.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@nexovea.ai.

9. Children's Privacy

The Service is intended for students preparing for academic and professional exams and may be used by minors under the guidance of a parent, guardian, or school. We do not knowingly collect more personal data from children than is necessary to provide the Service.

10. Security

We use industry-standard technical and organizational measures, including encryption in transit and access controls, to protect your personal data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at info@nexovea.ai.