ProctorU does not use any test-taker’s personal information for any purpose other than for facilitating the proctoring of online exams.
We never sell personal information to third parties.
We do not market to test-takers, nor do we share personal information for the purpose of marketing to test-takers.
Information You Provide to Us
Contact Us: When you contact us through an online form, email, or through LiveChat, we will ask for identifying information such as your name, email address, educational institution, certifying entity, and ProctorU status (e.g., test taker, professor, or administrator). We may also ask you to provide us with information about the reason you are contacting us. We request this information so that we can accurately respond to your inquiries and address any support needs. We also collect any information you provide within your communications with us.
Downloading Whitepapers and eBooks: We require you to provide us with your email address when you download certain whitepapers and eBooks. You may also provide us with your name.
Account Registration: When you create or reconfigure a ProctorU account, you will be required to provide us with your name, username, password, email address, educational institution or certifying entity, contact phone number, country of residence, and for registrants in the United States, your residential address. You can also choose, but are not required, to provide us with additional phone numbers, your full residential address (non-U.S. users), and a profile picture using your device’s camera (instructor registration only). When you pay for an exam within your account, a third-party entity processes your payment, and records of your transactions with ProctorU are maintained within your account.
Before taking an exam, you must download our browser extension, using your username and password. Before your exam you must provide us with access to your device’s camera and microphone and share your screen with our proctors through a LogMeIn File. We require you to share your photo ID on camera and we use that ID in conjunction with biometric facial recognition software to authenticate your identity. We also require you to perform a biometric keystroke measurement for some exams if your institution or organization requires it. During your exam, we continue to monitor your screen, camera, and microphone in order to meet the requirements of your institution’s testing parameters, communicate with you, and monitor your exam.
Job Applications: When you apply to work for us through our website, we require you to provide us with your name, email address, phone number, resume, work eligibility status, information about prior employment with ProctorU, information about your proximity to the office where you are applying, and information about how you learned about the position. We request this information in order to satisfy our legal obligations and to evaluate your eligibility and qualifications for the open position.
Information Collected Automatically
Website Log Data: Our servers automatically record information (“Log Data”) created by your use of the Services. Log Data may include information such as your IP address, browser type, the referring domain, internet service provider (ISP), operating system, date/time stamp, clickstream data, and browser plug-ins. We use this information to analyze trends, to administer our websites, to track users’ movements around the site and to gather demographic information about our user base as a whole.
Testing: During testing, we automatically track your keystroke pattern to ensure it matches the biometric profile created before the start of your exam if your institution or organization requires it. We also obtain IP address information to help troubleshoot issues and verify your testing location.
Legal Bases for Processing
In most processing contexts, ProctorU acts as a processor or service provider for a controller educational institution or certifying entity. In those situations we process personal data only on documented legally-compliant instructions from the controller entity. In the limited situations where ProctorU acts as a controller, we process your personal information, with your consent, where necessary to perform a contract, and where doing so is in our legitimate interest and does not outweigh your rights and freedoms, such as to protect the integrity of our software, protect the integrity of our testing process, protect our intellectual property or the intellectual property of educational institutions or certifying entities, provide and improve our Services, and ensure compliance with applicable laws and our Terms of Service.
Third Party Sharing
Advertising: We partner with a third party to manage our advertising on other sites. Our third-party partner may use technologies such as cookies to gather information about your activities on this site and other sites in order to provide you advertising based upon your browsing activities and interests. If you wish to not have this information used for the purpose of serving you interest-based ads, you may opt-out by clicking here (or if located in the European Union, click here). Please note this does not opt you out of all ads, only targeted ads. You will continue to receive generic advertisements online.
Your Institution: We may disclose information, including video and audio recording of your exam session, to your educational institution/certifying entity upon request. We do this so that your educational institution/certifying entity can verify that you were the person taking the exam and that no exam protocols were violated.
Legal: In certain situations, ProctorU Inc. may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
We may also disclose your personal information as required by law, such as to comply with a subpoena or other legal process, when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
Business Transfers: ProctorU may transfer information to a third party in the event of a bankruptcy, merger, acquisition, reorganization, or similar transaction. You will be notified via email and/or a prominent notice on our website of any change in ownership that affects the processing of your personal information, as well as any choices you may have regarding your personal information.
Other Sharing: We will also share your information when you provide us with consent to do so.
We retain information for as long as necessary to perform the Services described in this Policy, as long as necessary for us to perform any contract with you or your institution, or as long as needed to comply with our legal obligations.
International Data Transfers
In most processing contexts, ProctorU acts as a processor or service provider for a controller educational institution or certifying entity. In those situations, where required by applicable law, ProctorU only transfers personal data to third countries or international organizations where the controller educational institution or certifying entity has authorized ProctorU to do so and only where we have taken appropriate steps to ensure your privacy rights continue to be protected in accordance with applicable law.
When we transfer information from individuals in the EEA to countries that have not received an adequacy finding under Article 45 of the GDPR, we rely on alternative adequate safeguards, such as the contractual mechanisms set forth in Article 46 of the GDPR or derogations for specific situations set forth in Article 49 of the GDPR. Our standard Article 46 transfer documentation is available here. In the limited situations where we act as a controller and rely on a cross-border transfer mechanism under Article 49, we only collect and transfer your information to third countries: (i) with your consent; (ii) to perform a contract with you; or (iii) to establish, exercise, or defend legal claims.
We use commercially reasonable technical, organizational, and administrative measures to protect our Services against unauthorized or unlawful access or processing and against accidental loss, theft, disclosure, copying, modification, destruction, or damage. Nonetheless, we cannot guarantee that transmissions of your information will always be secure or that unauthorized third parties will never be able to defeat the security measures taken by us or our service providers. You play an important role in keeping your information secure. You should not share your user name, password, or other security information for your account with anyone. If you have reason to believe that your interaction with us is no longer secure (e.g., if you feel that the security of any account you might have with us has been compromised), please contact us immediately as detailed in the Contact Us section, below.
Our Services are only provided to children with parental or guardian consent in accordance with applicable law. If you believe that a child has provided their information to ProctorU without parental or guardian consent, please contact us as detailed in the “Contact Information” section, so that we can take steps to delete it.
Your California Privacy Rights
California residents may view the California specific privacy policies and practices at: https://www.proctoru.com/ca-privacy-policy
Other Individual Rights
To the extent required by applicable law, we provide you with the ability to access, correct, export, delete, withdraw consent, object to the processing of, or suspend processing of your personal information. These functions will either be available within our Services, or you can contact us to submit a request. Note that if your request relates to information associated with your exam, you must submit your request through your testing institution or certifying entity as we are not the controller of that information. We will respond to your request in accordance with applicable regulations.
Individuals in the European Economic Area (EEA): You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal information in a manner inconsistent with your rights.
Changes to this Policy
2200 Riverchase Ctr.
Birmingham, AL 35244
Effective Date: December 4, 2020