Privacy Policy

Account information — When you register, we collect your name, email address, and role (student or teacher). Teachers may also provide a bio, institution name, and profile photo.

Exam data — We store your exam attempts, answers (encrypted at rest), scores, and rankings.

Payment information — If you purchase a paid exam or receive a teacher payout, we process transaction details through our payment partners (bKash, Stripe). We do not store your full card number or mobile banking PIN.

Usage data — We collect standard server logs (IP address, browser type, pages visited) to maintain security and improve the platform.

Provide the service — Authenticate you, grade exams, display leaderboards, and process payments.

Communicate with you — Send verification codes, password resets, and important account notices via email.

Improve the platform — Analyse aggregated, anonymised usage patterns to fix bugs and build better features.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Exam answer keys are encrypted at rest using industry-standard encryption. Passwords are hashed with bcrypt. All traffic between your browser and our servers is encrypted with TLS.

We restrict internal access to personal data to team members who need it to operate the service.

We retain your account and exam data for as long as your account is active. If you delete your account, we remove your personal information within 30 days, except where we are required by law to retain it.

Aggregated, anonymised data (e.g. average scores per exam) may be retained indefinitely.

We use a single authentication cookie (`mcq-auth`) to keep you logged in. We do not use third-party tracking cookies or advertising pixels.

We use the following third-party services that may process your data according to their own privacy policies:

Payment processing — bKash, Stripe

Error monitoring — Sentry (if enabled)

Hosting — Amazon Web Services (AWS)

You may request access to, correction of, or deletion of your personal data at any time by emailing support@skillshare.bd.

You may deactivate your account from your profile settings. Deactivation stops all data processing except where required by law.

Skillshare BD is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13.

We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the platform.

If you have questions about this policy, email us at support@skillshare.bd.