Data we process
We process SSO account data such as name, email address, account identity, and required profile information; assessment answers and results; session and participant records; credit, payment, and withdrawal records; and technical data such as sessions, IP addresses, devices, and security logs.
How we use data
Data is used to authenticate users, deliver and calculate assessments, display results according to session permissions, process credits and transactions, send service notifications, provide support, and protect the application.
Result access and service providers
Users may access results they are entitled to view. Session creators may only access participant results when the session settings and permissions allow it. To operate the service, required data may be processed by Kastara SSO, payment providers, email services, Google when connected by the user, and private object storage providers.
Retention and user requests
Data is retained as needed to provide the service, preserve transaction records, maintain security, and meet applicable obligations. Users may contact us to request assistance, correction, or deletion of their data. Requests are reviewed against system capabilities and the need to preserve transaction or security records.