Skip to main content

Privacy Policy

Last updated: 14 July 2026

1. Who We Are

Examova ("we", "us", "our") operates the website examova.com, a professional exam preparation platform for certifications including CIPS, PMP, and more. For any privacy-related enquiries, contact us at [email protected].

2. Information We Collect

Account data: When you register, we collect your email address, display name, and a hashed version of your password. We never store plaintext passwords.

Study data: Your exam results, question answers, study progress, flashcard performance, and readiness scores are stored to provide personalised learning analytics.

Payment data: If you subscribe to Pro, payment is processed by Stripe. We do not store credit card numbers. Stripe's privacy policy applies to payment processing.

Technical data: We collect standard server logs including IP address, browser type, and pages visited to maintain security and improve the platform. If you accept optional analytics, we also retain a consented, fixed-vocabulary funnel record such as the Examova surface, certification, CTA, destination, and approved campaign token. We do not store the full referring URL in account attribution.

3. How We Use Your Data

  • Provide and personalise your study experience
  • Track your progress, readiness scores, and exam performance
  • Send transactional emails (welcome, password reset)
  • Process subscription payments via Stripe
  • Maintain platform security and prevent abuse
  • Measure which campaigns lead to account creation, enrolment, and subscription

We do not sell your personal data. We do not share it with third parties for marketing purposes.

4. Data Storage & Security

Your data is stored on secure servers located in the EU (Hetzner, Germany). We use HTTPS encryption for all data in transit, bcrypt hashing for passwords, and httpOnly cookies for session management. Access to the database is restricted to application-level connections only.

5. Data Retention

We retain your account and study data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymised, aggregated statistics (e.g., platform-wide question accuracy rates) may be retained indefinitely.

If you consent to optional analytics, we retain the limited public-funnel attribution linked to your account for up to 90 days to measure whether public pages lead to learning activity. You can withdraw consent at any time, which deletes this attribution record.

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your account and data
  • Export your study data
  • Withdraw consent for non-essential communications

To exercise any of these rights, email [email protected].

7. Cookies

We use essential cookies to maintain signed-in sessions, protect forms, and remember relevant site preferences. Our first-party Umami analytics is configured without analytics cookies. Google Analytics 4 and our first-party public-funnel attribution cookie load only if you accept optional analytics; they may then set analytics cookies. We do not use third-party advertising cookies. You can change or withdraw your choice at any time.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. The "Last updated" date at the top reflects the most recent revision.