Privacy Policy (GDPR)

At FoxCheck, we take privacy seriously. Below we summarize our data processing principles in accordance with GDPR.

1. Roles of Controller and Processor

FoxCheck Platform: Acts as the Data Processor towards the Customer (school).

Customer (School): Acts as the Data Controller. Decides which students are entered and why.

2. What Data We Process

• School Representatives: Name, email, school name, billing contacts.
• Students: Name, student ID, or email.
• Test Data: Answers, scores.
• Anti-cheat metadata: Browser events like window blur/focus. We do not record video/audio or monitor outside applications.

3. Data Usage

All student test data is used exclusively by the specific school. We do not sell or share data for marketing.

4. Retention Period

Accounts and tests are kept for the duration of the contract, unless deleted earlier by the Customer.

5. Security

Data is isolated (Multi-Tenant) and communication is encrypted (TLS/HTTPS).

6. Rights of the Data Subject

If you are a student, please direct your GDPR requests to your School (Controller). We cannot delete or export your data without their direct instruction.

7. Contact

If you have any questions, you can contact us at any time.