Privacy notice

ExamGen is an Australian education-software service operated by Mark O'Donohue. Privacy questions, access requests, corrections and deletion requests can be sent to mark@examgen.com.au.

• Account information such as your name, work email address, organisation, role and sign-in identifiers.
• If you register your interest before joining, your first name, email address, school or organisation, role, optional mathematics team size, optional comments and any separate product-email consent you choose to give.
• Content you choose to save, including mathematics questions, solutions, tags, resource settings and saved resource structures.
• Invitation, account-recovery and transactional-email records needed to administer access.
• Technical information such as IP address, browser details, timestamps, request logs and error information generated by our hosting and security providers.
• Information you include when requesting support.

ExamGen does not provide student accounts and is not intended to hold student names, results, health information, wellbeing information or other sensitive school records. Teachers must not enter that information during the beta.

• Provide and secure your ExamGen account and school workspace.
• Store, search and assemble the questions and resources you create.
• Send invitations, password links and essential service emails.
• Investigate errors, prevent misuse and support beta participants.
• Improve the service using feedback and technical diagnostics.
• Contact people who have asked to hear about trying ExamGen. Product or launch updates are sent only where the separate optional consent was selected.

ExamGen does not sell personal information or use it for advertising.

ExamGen currently uses a small number of service providers:

• Supabase provides authentication, the primary database and database backups. The primary ExamGen database is located in Sydney, Australia.
• Vercel hosts and delivers the application. Sydney is selected for server-function execution, while delivery, security and technical metadata may use Vercel's wider network and subprocessors.
• Resend delivers account invitations and password emails. Resend states that its customer data is stored in the United States.
• Microsoft processes sign-in information when a teacher chooses optional Microsoft login.

These providers may process limited information outside Australia in accordance with their own privacy terms and data-processing arrangements.

Questions and saved resources are shared only within the organisation workspace to which your account belongs. Authorised ExamGen administration may access limited account or workspace information when reasonably necessary for onboarding, support, security or legal obligations. We do not otherwise disclose information except to the providers above or where required by law.

Information is retained while it is reasonably needed to operate the beta, support the relevant workspace, protect the service and meet legal obligations. Deleted information may remain temporarily in provider backups before being overwritten through their normal backup cycles. Contact us to request account or content deletion.

Interest registrations from people who do not join are reviewed for deletion after 24 months. A person can ask for their registration to be corrected or deleted sooner, or withdraw optional product-email consent, by emailing Mark. Withdrawing optional email consent does not affect essential messages if the person later chooses to join.

ExamGen uses encrypted web connections, individual authentication, organisation-separated database rules, restricted administrator access and daily primary-database backups. No online service can guarantee absolute security. Please report concerns through our security page.

This notice may be updated as the beta changes. Material updates will be reflected on this page and communicated to participating organisations where appropriate.