Privacy Policy
Official statement detailing how Ahu collects, protects, utilizes, and safeguards your personal information.
General Provisions and Data Controller
This Privacy Policy ("Policy") governs the collection, processing, storage, and protection of personal data by Ahu ("Ahu", "we", "us"), operating in Baku, Republic of Azerbaijan.
Ahu respects the privacy of every user—educators, school administrators, and students—and is committed to maintaining the confidentiality and integrity of all data entrusted to us.
Data handling practices are governed by the Law of the Republic of Azerbaijan "On Personal Data" (No. 998-IIIQ) and internationally recognized data protection principles.
By accessing or using the platform, you acknowledge that your personal information will be handled as described in this Policy.
Information We Collect
We collect only the data necessary to provide seamless examination services and administrative oversight:
1. Educators and Institutional Administrators:
- Account Profiles: Full name, email address, and securely hashed account credentials.
- Contact Verification: Mobile telephone number and one-time verification codes (SMS OTP) to validate educator authenticity.
- Institutional Details (Firms): Organization name, contact email, contact phone, physical location, and branding logo.
- Billing Records: Subscription tier, payment timestamps, and transaction identifiers (card numbers are tokenized by the payment gateway and never touch our servers).
2. Students and Exam Participants:
- Participant Identity: Student full name entered when joining an exam (and email address if requested by the presiding educator).
- Session Responses: Question answers, calculated scores, start/submission timestamps, and time allocated per question.
- Optional Student Accounts: Full name and email address if a student voluntarily chooses to register to archive their exam history.
3. Technical and Security Telemetry:
- Network Identifiers: Internet Protocol (IP) address, browser family, and operating system details utilized to verify session continuity and prevent simultaneous unauthorized sessions.
- System Logs: Access timestamps, error diagnostics, and administrative audit trails.
Anti-Cheat Monitoring Transparency
To ensure exam fairness, Ahu monitors specific in-browser events during active assessments. We maintain full transparency regarding these signals:
During an exam session, the system records only the following indicators:
- Tab & Focus Changes: Switching away from the exam tab, minimizing the browser window, or focusing an external application.
- Fullscreen Status: Exiting fullscreen mode when required by the instructor.
- Copy & Context Menu Interception: Attempting to copy text or right-click to access context menus.
- Developer Tools Inspection: Opening browser developer consoles or DOM inspection utilities.
- Disparate Network Locations: Resuming the same ongoing test session from an altered IP address.
- Abnormally Rapid Submissions: Answering questions at speeds inconsistent with human reading comprehension.
Purposes of Data Processing
We process your personal information strictly for legitimate, declared operational purposes:
- Service Provision: Delivering exam questions, managing waiting rooms, recording answers, and generating automated scores.
- Pedagogical Analytics: Providing educators and school administrators with comprehensive performance breakdowns, question-level analytics, and grade distributions.
- Security and Authentication: Verifying teacher identities via SMS OTP, safeguarding against unauthorized access, and detecting platform abuse.
- Billing Administration: Managing subscription plans and maintaining lawful financial records.
- Technical Support: Diagnosing platform issues and responding promptly to user inquiries.
AI Document Extraction and Privacy
When educators upload exam papers (PDFs and images) for digitization, files are processed under strict privacy controls:
Uploaded files are analyzed solely to extract text, LaTeX formulas, diagrams, and tables into structured questions.
Your content is never used to train public machine learning models and is never exposed to third-party public databases.
Extracted items are visible only to the uploading educator and are not committed to the Material Bank until explicitly confirmed.
Subprocessors and Third-Party Disclosures
Ahu will never sell, lease, or monetize your personal information. Data is shared exclusively with vetted infrastructure providers essential to service delivery:
- Authentication Infrastructure: Secure identity management and encrypted credential validation.
- Optical Recognition Engine: Specialized document OCR processing for rapid import of questions from printed materials.
- Payment Gateway: Licensed domestic payment gateway operating in Azerbaijan for encrypted transaction processing.
- SMS Gateway: Telecommunications gateway for delivering OTP verification codes to mobile devices.
- Cloud Object Storage: Encrypted object storage infrastructure for housing uploaded question media and firm assets.
Student Privacy and Protection of Minors
Protecting student data, particularly for minor pupils, is a paramount priority for Ahu:
We practice rigorous data minimization: students are never required to provide phone numbers, financial details, or social accounts to take a test.
Only the student name (and optional email if requested by the teacher) is gathered at the point of exam entry.
Student exam responses and grading records are visible solely to the presiding teacher and authorized institutional staff. Results are never made public or indexed in web search engines.
Data Security and Storage Controls
We implement rigorous administrative, physical, and technical safeguards to protect your personal data:
All web transmissions are protected with modern TLS/SSL encryption.
Passwords and secret keys are stored using one-way cryptographic hash functions and are inaccessible even to internal operators.
Database access is protected by strict role-based access control, enterprise firewalls, and comprehensive audit logs.
Regular automated data backups ensure business continuity and recovery from technical disruptions.
Data Retention and Erasure
We retain personal data only for the duration required to fulfill pedagogical and operational needs:
Question banks and exam records are retained while the user account remains active.
Upon a verified account deletion request, personal profile data is permanently eradicated. To maintain historical grading accuracy for schools, exam session metrics are dissociated from personal identities and fully anonymized.
To request data erasure or export, contact our support desk.
Your Statutory Rights
Under the Law of the Republic of Azerbaijan "On Personal Data", you possess the following rights:
- Right of Access: Obtain confirmation and copies of your personal data being processed.
- Right to Rectification: Request correction of inaccurate, misleading, or outdated personal information.
- Right to Erasure: Request deletion of personal information when it is no longer necessary for declared purposes.
- Right to Withdraw Consent: Revoke previously granted consent for processing at any time.
- Right of Complaint: Lodge formal complaints with competent regulatory authorities or judicial bodies.
Policy Updates and Notifications
We may update this Privacy Policy periodically to reflect technological enhancements or regulatory changes.
Significant revisions will be announced via platform notices or direct email communications. Continued use of the service constitutes acceptance of the updated terms.
Contact and Privacy Inquiries
For inquiries regarding this Policy or to exercise your statutory data rights, please contact our data protection team.
Privacy & Data Protection Desk
Our compliance team is ready to assist you with data requests, privacy inquiries, and deletion requests.
Privacy inquiries are reviewed and addressed within three business days.