Skip to content

Privacy

What we store about you, why we store it, and what we deliberately do not.

Last updated 25 August 2026

Who we are

Bizomatic Solutions Pvt Ltd operates this examination and certification service. Write to support@bizomatic.in about anything on this page.

What we store

  • Your account — email address, a hash of your password (never the password), your legal first and last name, and your timezone. The legal name is what appears on a certificate, which is why we ask for it separately and why it locks once your first certificate is issued.
  • Your enrolments and attempts — which exams you were enrolled in, when, how many attempts you used, the questions you were shown, the answers you gave and the score you received.
  • Integrity signals during an attempt — for example whether the tab lost focus, or whether the connection dropped. These are evidence for a person to look at. They are never an automatic fail.
  • Your certificates — including a snapshot of your name and the exam title as they were when it was issued.

What we do not store

  • Your password. Only an Argon2id hash, which cannot be turned back into the password.
  • Access codes in plain text. Only a keyed hash and the last four characters. Nobody here — support included — can read a code back to you.
  • Your IP address, in the clear. Where we need to tell requests apart for rate limiting and abuse detection, we store a salted hash of the address, not the address.
  • Anything from a third-party tracker. There are no analytics scripts, no advertising pixels and no third-party fonts on this site. Nothing you load here is fetched from anyone but us.

What is public

A certificate’s verification page is public and permanent, by design — that is what makes the credential worth holding. It shows your name, the certificate, the issue and expiry dates, and whether it is currently valid. It does not show your email address, your score, or your attempt history. See how we verify.

Where your data lives

On servers in the European Union, operated by Contabo. Backups are held on the same infrastructure. If you are in India, this means your data is processed outside India; we state it plainly rather than burying it.

How long we keep it

  • Certificates are permanent. They are never deleted — a withdrawn one is marked withdrawn and keeps resolving. A credential nobody can check is not a credential.
  • Attempts and answers are kept while they may be needed to answer a dispute about a result.
  • Audit records of privileged actions are append-only and retained.

Your rights

You can see and correct your account details in your profile. For a copy of your data, or to ask us to remove what we are not required to keep, write to support@bizomatic.in. We cannot delete an issued certificate, because its verification page is a promise made to whoever relies on it — we can withdraw it, which is a different thing and is recorded as such.

Cookies

One cookie, holding your session so you stay signed in. There is no advertising or analytics cookie, so there is no consent banner to dismiss.