Privacy Policy

Last updated 12 November 2026

Examio is operated by Gordon MacCoy. Contact support@examio.io with questions about this policy, access to your information, corrections, or deletion.

Information we process

Professors can sign in with Google or email. We use the account identifier and verified email supplied by our authentication service to identify your account and protect your workspace. Google sign-in may also supply basic profile information such as your name and profile picture. Examio does not request access to your Gmail messages, Google Drive files, or contacts.

We store professor profile details you provide, including your name and optional institution. We store tests, uploaded content included in saved tests, folders, session settings, student names and student numbers, answers, progress, scores, grading decisions, and monitoring events. Contact requests contain your account email and the category, subject, and message you submit.

During a session, Examio records whether the student page is visible and relevant connection and session events. A page-hidden interval longer than five seconds can lock an attempt and result in a score of zero. Professors can review events and apply available overrides. Examio does not record the contents of other applications, capture the screen, or record audio or video.

Why we use information

We process this information to provide sign-in, test authoring and delivery, classroom monitoring, scoring, results exports, support, and service operation. Technical service providers may process connection information and operational logs while delivering these services.

Who can see information

The professor's workspace provides access to their class records. A public classroom display shows student names and activity states. Student numbers and grades are reserved for the professor's private views and exports. Anyone who can see the classroom display or has its display link may see its public roster. Students can see their own submission receipt and any scores or corrections their professor has enabled.

The operator and service providers may access information when needed to operate the service, respond to support requests, or investigate failures. Professors control copies they download or share.

Providers and AI

Railway hosts the application and its PostgreSQL data. Supabase provides professor authentication. Google processes Google sign-in when chosen. Porkbun provides forwarding for the support email address. These providers may process information outside your country under their applicable service arrangements.

When a professor explicitly uses an AI feature, the submitted source material or questions and relevant generation instructions are sent to OpenAI. The Help chatbot sends the typed question, a bounded recent conversation, and Examio's help guide to OpenAI. It is not given access to class records through tools. Do not include student records or secrets in AI source material or Help questions.

Examio requests that OpenAI not store generated responses through the API's response-storage option. This setting does not determine OpenAI's separate processing or security-log retention. Their applicable policies and account configuration govern that processing.

Storage and deletion

Browser storage is used for sign-in, language and theme preferences, and student session recovery and saved draft answers. Information left in browser storage can remain on that device until cleared.

Saved tests and results remain until the professor deletes them or requests account deletion. Tests and results moved to Trash can be restored for 30 days. They are then removed by scheduled cleanup. Choosing permanent deletion removes them from the active application database earlier.

Where self-service account deletion is available, it removes the professor's profile, folders, tests, saved results, contact requests, and sign-in identity. If the option is unavailable, contact support@examio.io. Infrastructure logs, backups, provider records, and copies previously downloaded by professors can have separate retention and deletion processes.

Students should contact their professor about class records. They may also contact support@examio.io for help identifying the appropriate request route. We may need to verify a request before acting on it.

Changes

We will update this page when our data practices change and show the revised date. Material changes affecting existing users will also be communicated through the service or an appropriate account contact.