1. Controller
The personal data controller is individual entrepreneur Belgibayev Azamat — Belgibayev Azamat Talgatogich (the “Provider”). Privacy contact: noreply@examhacks.study.
2. Data we process
- Account data: login, username, email, password hash, verification status, and plan.
- Learning data: selected exams, answers, results, timing, mistakes, test history, and AI Tutor requests.
- Speaking and Writing: audio recordings, transcripts, written responses, pauses, and speech indicators required for the requested analysis.
- Technical data: IP address, IP-derived country for currency selection, language, theme, device type, session cookies, and security or error logs.
- Payment data: order ID, plan, period, currency, amount, discount, and payment status. Full card details are handled by Dodo Payments and are not provided to ExamHacks.
3. Purposes and legal bases
- Create and secure accounts, verify email, provide two-factor checks, and restore access.
- Deliver tests, personal analytics, AI features, and paid access.
- Process payments, promotions, refunds, and required transaction records.
- Prevent fraud, protect infrastructure, and diagnose errors.
- Perform the agreement, comply with law, and rely on consent where required.
4. Processors and international transfers
Data may be shared as necessary with hosting, email, AI model, transcription, security analytics, and Dodo Payments providers. Each provider applies its own terms and safeguards.
Some processing may occur outside Kazakhstan. By using the relevant function and providing consent where requested, users agree to necessary cross-border processing subject to reasonable contractual and technical safeguards.
5. Retention
Account and learning history are retained while the account is active and afterward for the period needed to resolve disputes and comply with law. Transaction records follow mandatory accounting periods. Temporary audio and technical logs are deleted or anonymized when no longer needed.
6. Cookies and local settings
Essential cookies maintain authentication and security. Local Storage remembers language, theme, and currency. Disabling essential technologies can prevent sign-in or other functions. Advertising cookies are not used by default.
7. User rights
- Request information and access to personal data.
- Request correction, blocking, or deletion where provided by law.
- Withdraw consent for future processing without affecting prior lawful processing.
- Submit a complaint to the controller or the competent authority in Kazakhstan.
8. Security and changes
Controls include access restrictions, encrypted transport, password hashing, email verification, and security logging. No storage method guarantees absolute security.
Material changes are published on this page with an updated revision date.