Privacy Policy and Personal Data Processing Terms

1. Scope & Legal Framework

This Privacy Policy sets forth the principles governing the collection, processing, protection, and erasure of personal data on the TESTAI.AZ educational platform. We comply with the Law of the Republic of Azerbaijan on Personal Data (Law No. 998-IIIQ). Where applicable, European Union GDPR standards and US COPPA principles regarding children under 13 are observed.

2. Data Controller & Processor

The data controller and operator of TESTAI.AZ is Emil Majidov, founder and operator of TESTAI.AZ. Official contact: aztestai.az@gmail.com. Vetted infrastructure providers handle hosting and databases strictly as technical service processors under statutory safeguards.

3. Categories of Data Collected

• Student Data: Full name, date of birth/age group, district/school, grade tier (Grades 1–11), and algorithmic Student ID.
• Parent & Guardian Data: Contact email, phone reference, Parent Dashboard cryptographic link-key, and parental consent records.
• Diagnostic Telemetry: Assessment scores, incorrect answer taxonomy analytics, question timings, and academic progression curves.
• Technical Metrics: Anonymized/masked IP addresses, browser/OS configurations, and secure session tokens (such as JWT).

4. Purposes of Processing

Personal data is processed strictly for authenticating accounts, linking student and parent portals, rendering curriculum-based diagnostic assessments, delivering insights to parents, and maintaining system security.

5. Protection of Minors & Parental Supervision

Minor data processing requires parental consent under national statutory standards. Parents retain full visibility through the real-time Parent Dashboard and possess the right to inspect, update, or demand permanent erasure of their child's educational records.

6. AI Processing & PII Isolation

Technical measures prevent direct identifying personal data (names, emails, schools) from being dispatched to underlying AI language models. AI queries operate strictly on textbook context. User personal data is never utilized to train public AI models.

7. Non-Disclosure & Subprocessors

TESTAI.AZ never sells, leases, or monetizes user personal or educational records. Subprocessors (Supabase/PostgreSQL, Vercel) process data exclusively for technical service delivery. According to official vendor documentation, Supabase holds SOC 2 Type 2 compliance and ISO/IEC 27001 certification (which pertains to the vendor's own infrastructure).

8. Google AdSense, Third-Party Cookies & Minor Protection

8.1. TESTAI.AZ may deploy Google AdSense and related digital advertising technologies to support the ongoing availability of free educational diagnostic resources. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to our website or other websites across the Internet.

8.2. Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visits to TESTAI.AZ and other web destinations. Users may opt out of personalized advertising at any time by visiting Google Ads Settings or aboutads.info.

8.3. Child-Directed Treatment & Student Protection (COPPA / GDPR-K / Google Tag for Age Treatment - TFAT): In strict compliance with Google Publisher Policies regarding minors (Grades 1–11), we enforce protections against behavioral profiling or remarketing on student accounts. To safeguard student concentration and privacy, active test-taking sessions, student profiles, and personal diagnostic dashboards are strictly commercial ad-free zones with zero third-party advertising. Non-personalized, contextual educational notices and partnerships may appear exclusively across public resource sections (blog, methodology, and public informational pages).

9. Right to Erasure ("Right to be Forgotten")

Users and legal guardians may request account and record deletion by emailing aztestai.az@gmail.com. Subject to statutory retention requirements, verified erasure requests are executed, as a rule, within 7 business days.

10. Contact & Prevailing Language

For all data governance inquiries: aztestai.az@gmail.com. In the event of discrepancies between translation versions, the Azerbaijani text shall legally prevail.