This policy explains what personal data SuperExams collects, why, and your rights over it. We aim to collect as little as possible and never sell your data.
1.Who controls your data
SuperExams (superexams.com) is operated by Andreas Photiades, a sole trader based in Cyprus, who is the “data controller” responsible for your personal data. For any privacy question or request, email support@superexams.com.
2.Data we collect
We collect:
- Account data, name, email and password hash;
- Usage data, the work you’re set and submit, marks, progress and AI-tutor questions, to power your dashboard;
- Payment data, handled by Stripe; we never see your full card number;
- Technical data, basic analytics and error logs.
3.How we use it
To provide and improve the service, save your progress, process subscriptions, respond to support requests, and keep the platform secure. We rely on your consent and our legitimate interest in running the service.
4.AI tutor data
Questions you ask the AI tutor are processed to generate a response and may be retained to improve quality and prevent misuse. Don't share sensitive personal information in tutor chats.
5.Sharing
We share data only with processors that run the service, for example Stripe (payments), our hosting and email providers, the AI model provider, and our analytics providers (PostHog and Microsoft Clarity). They act on our instructions and are bound by contract. We do not sell personal data.
6.Analytics & session recording
To understand how the site is used and fix problems, we use PostHog (product analytics, hosted in the EU) and Microsoft Clarity (heatmaps and anonymised session recordings). These only load if you choose “Accept all” on our cookie banner, they never load for visitors who choose essential-only. They record how pages are used, not your keystrokes in sensitive fields, and we don’t use them to identify you or profile you across other sites. Our own first-party analytics is cookieless and aggregated. You can change your choice any time from the cookie banner or Settings → Privacy & data.
7.International transfers
Some of our providers (such as Stripe, our AI model provider and Microsoft Clarity) process data outside the European Economic Area, including in the United States. Where data leaves the EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses to protect it. (PostHog analytics is hosted in the EU.)
8.Cookies
We use essential cookies for login, and optional analytics cookies only if you accept them. See our Cookie Policy for the full list and controls.
9.Your rights
You can access, correct, export or delete your data from Settings → Privacy & data, or by emailing us. You can also object to certain processing and withdraw consent at any time. If you believe we have mishandled your data, you have the right to complain to a data-protection authority. In Cyprus, the Office of the Commissioner for Personal Data Protection.
10.Retention
We keep account data while your account is active and for a short period afterwards, then delete or anonymise it, except where we must retain records (e.g. for tax).
11.Contact
For privacy questions or requests, email support@superexams.com.