Privacy Policy
Effective June 22, 2026
This Privacy Policy explains what data OneTestBank ("we", "us") collects, how we use it, and your choices. It applies to the OneTestBank web application.
What we collect
- Account data — name, email, password hash, and optional profile details (title, institution, bio, avatar).
- Your Content — the questions, exams, pools, learning objectives, and files you create or upload.
- Usage data — AI token usage for quota enforcement, export history, sign-in sessions (device, IP, timestamps), and basic logs.
- Billing data — plan and subscription status. Card details are handled entirely by Stripe; we never see or store your full card number.
How we use it
- To provide and operate the Service (store your bank, generate exams, export files).
- To enforce plan limits and bill paid subscriptions.
- To send transactional email (verification, password reset, share invites, and billing lifecycle notices).
- To secure the Service and prevent abuse.
Third-party processors
We share the minimum data necessary with service providers that help us run OneTestBank:
- Stripe — payment processing and billing.
- AI providers (Anthropic, Google) — text you submit for AI-assisted import or editing is sent to the configured model provider to produce the result. We do not use Your Content to train models.
- Resend — transactional email delivery.
- Google Cloud Vision — optional OCR for scanned PDF import, when configured.
Data retention & deletion
We keep your data while your account is active. You can export all of your data or delete your account at any time from Settings → Danger zone. On deletion, your class databases are removed from the active Service (renamed and retired on disk as a short safety net) and your account record is removed. Billing records may be retained as required for legal and accounting purposes.
Security
Passwords are hashed with bcrypt, sessions use signed JWTs, and all traffic is served over HTTPS. No system is perfectly secure, but we take reasonable measures to protect your data.
Students
Students do not log in to OneTestBank. They receive exported exam files from their instructor; we do not collect student data through the Service.
Your rights
You may access, correct, export, or delete your personal data from your account settings. For other requests, contact us using the address below.