1. Who is responsible for your data
ExamIT Lab is an independent online service operated by an individual based in Bulgaria. For data-protection questions or requests, use the Need help? contact form on examitlab.com.
2. Data we collect
- Account data, such as your name, email address, user identifier, and profile image when you sign in.
- Purchase and access data, such as the exam purchased, payment status, transaction identifiers, and access expiry date.
- Learning data stored for the service, such as practice progress and answers where the product supports this.
- Messages and contact details you submit through the support form.
- Technical and security data needed to operate, protect, and troubleshoot the website.
ExamIT Lab does not receive or store your full payment-card number.
3. Why we use the data
We process data to create and secure accounts, provide practice exams and purchased access, process and confirm payments, respond to support requests, prevent fraud and abuse, comply with legal obligations, and improve the reliability of the service.
The legal bases may include performance of a contract, compliance with legal obligations, legitimate interests in operating and securing the service, and consent where required.
4. Service providers
We use specialised providers that may process data on our behalf:
- Supabase for authentication and database services.
- Google when you choose Google sign-in.
- Stripe for payment processing and fraud prevention.
- Resend for transactional and support email delivery.
- Vercel for website hosting, delivery, and operational logs.
These providers may process data outside the European Economic Area under their own safeguards and applicable data-transfer mechanisms.
5. Retention and security
We keep personal data only for as long as needed for the purposes above, including contractual, accounting, tax, dispute-resolution, and security requirements. Retention periods can differ by category. We use reasonable technical and organisational safeguards, but no internet service can guarantee absolute security.
6. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and may object to certain processing or withdraw consent. Use the Need help? form to make a request. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection or another competent supervisory authority.
7. Children and changes
The service is not directed to children under 16. We may update this policy when the service or legal requirements change. The current version and its effective date will remain available on this page.