Privacy policy

Information we use

Your signed-in identity connects you to your orders. An email address may be sent to the payment platform for receipts. The server stores the exam identifier, access term, payment order ID, payment time and expiry time.

Accounts and verification emails

Supabase Auth processes email, passwords and verification codes. Resend delivers account emails. The website does not store plaintext passwords. Sessions use secure cookies and encrypted server-side tokens. Resetting a password revokes previous website sessions.

Payments

Payments take place on Stripe-hosted checkout. This website does not store card numbers. Payment notifications activate or revoke download access.

Storage and access

PDFs and order records are kept in private server storage. Download requests are checked against your identity and order validity. We do not add advertising trackers. Servily provides website chat support and may process your messages, contact details and technical information needed for support. For signed-in customers, the Servily SDK retrieves a short-lived signed token from our protected identity endpoint. It contains an opaque customer ID and a display name; because ExamPico accounts are email-first, a verified registration email is used as that display name when no personal name is available. The token contains no password or order details. When a customer signs out, the SDK clears the visitor identity and local chat session. You can also contact [email protected]. Do not send passwords, verification codes or card details.

Data requests

Contact [email protected] to request access, correction or deletion. Account information is retained while your account is active. Order and payment records are retained as needed to provide purchased access, resolve disputes and meet applicable accounting or legal obligations. On an eligible deletion request, data no longer needed for those purposes is deleted or anonymised.