Privacy Policy

SpeakEval ("we", "us") decides why and how personal data is used on speakeval.online. This policy covers everyone who uses the Service: students, teachers, organization administrators and visitors.

If a teacher, school or company gave you access, they can see your exam answers, recordings and results; that is what the service is for. How they use that information is governed by their own rules. They are responsible for having the right to add you.

• Account: first and last name, email address, your role, and your password, which we store only as a one-way hash (we cannot read it). If you use Google sign-in, we receive your name, email address and Google account identifier from Google.
• Sign-in security: one-time codes we email you to confirm your address, and sign-in sessions with the device description and IP address they came from.
• Exam activity: your answers (chosen and typed), audio recordings of your spoken answers, times, scores, whether an exam was cancelled because the exam window was left, and the feedback your teacher gave.
• Teaching: which teacher and student are linked, invitations (the email address invited), assignments, and the exams a teacher or organization created.
• Plans and payments: your plan, its period, and promo codes used. Your card details go to the payment provider, never to us.
• Messages to us: the name, email address and message you write in the Contact form.
• Technical: when something goes wrong on our server we keep an error record (which page, what request, which user, what failed) with passwords and tokens removed; and we count page visits in aggregate.

• To provide the Service: sign you in, run exams, save and show results, and let teachers mark.
• To keep exams fair and the Service secure: detect leaving the exam window, prevent abuse, find and fix errors.
• To contact you about your account: confirmation codes, invitations, and important notices.
• To handle plans and payments, and to answer your messages.
• To meet legal obligations and protect our rights.

We do not use your answers or recordings to train AI models, and we do not use personal data for advertising.

Teachers can ask an AI service to draft exam content. Only what the teacher typed (a topic and a few settings) is sent. Student names, emails, answers and recordings are never sent to the AI service.

We do not sell personal data. We use these providers to run the Service, and they handle data only for that purpose:

• a hosting company, where our application and database run;
• Vercel, which hosts the website and measures visits;
• Cloudflare, which stores audio recordings and images and runs the bot check on the sign-up form;
• Brevo, which delivers our emails;
• Google, if you choose Google sign-in;
• an AI service provider, for the exam drafting described above;
• a payment provider, when you pay for a plan.

Your teacher, school or company, as described above, and public authorities when the law requires it, may also receive data.

Some of these providers are outside Azerbaijan, so your data may be processed in other countries.

We use only what the Service needs to work:

• a sign-in cookie and sign-in tokens kept in your browser, so you stay signed in;
• a cookie that remembers your language choice;
• your theme choice (light or dark) and which tutorials you have seen, kept in your browser.

We do not use advertising or cross-site tracking cookies.

• Account, exam and result data: as long as your account is active.
• If you ask us to delete your account, we deactivate it at once and delete or anonymize your personal data within 30 days, except what the law makes us keep, such as payment records.
• Error records: 30 days, then deleted automatically.
• One-time codes and sign-in sessions: until they expire or are revoked.

Connections to the Service are encrypted, passwords are stored as hashes, and access to data is limited to what each role needs. No system is perfectly secure; if you find a problem, please tell us through the Contact page.

You can ask us to:

• show you the personal data we hold about you and give you a copy;
• correct data that is wrong;
• delete your data or close your account;
• limit how we use your data, or stop using it for something you object to.

Write to us through the Contact page from the email address of your account. We answer within 30 days. If you are not satisfied, you can complain to the authority responsible for personal data protection.

SpeakEval is not meant for children under 13, and we do not knowingly collect their data. If you think a child has given us personal data, tell us and we will delete it.

We may update this policy. The new version is posted here with its date, and for important changes we also tell you by email or in the Service.

Questions about your data? Use the Contact page. The Terms of Service explain the rest of how the Service works.