Privacy Policy

ExamPortal provides schools with tools for managing examinations, classes, questions, results, reports, teacher timetables, and related academic workflows. In this policy, “ExamPortal”, “we”, “our”, and “us” refer to the operator of the service available at examportal.crevmick.com.

Schools control the academic records they upload or create in ExamPortal. We process those records to provide the service to each school.

We may collect account details such as names, email addresses, usernames, roles, school affiliations, and authentication information. Schools may provide student, teacher, class, subject, examination, answer, score, and result information.

We also collect operational information needed to secure and maintain the service, such as device and browser information, IP addresses, timestamps, error reports, and audit activity.

Google Calendar connection is optional. When a teacher connects a Google account, ExamPortal requests permission to create, update, and delete calendar events associated with that teacher’s ExamPortal timetable. We also receive the Google account email address so the connected account can be identified.

We use Google data only to provide calendar synchronization requested by the teacher. ExamPortal stores the Google OAuth refresh token in encrypted form. We do not receive or store the teacher’s Google password.

ExamPortal’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

We use information to operate the school portal, authenticate users, deliver examinations, calculate and publish results, generate reports, synchronize teacher timetables, provide support, prevent misuse, maintain security, and comply with legal obligations.

We do not sell personal information or Google user data. We do not use Google Calendar information for advertising or unrelated profiling.

ExamPortal offers independent practice experiences based on examination categories such as JAMB, WAEC, and NECO. We may record the examination category and subjects selected, questions presented, answers submitted, correct and incorrect responses, scores, grades, completion time, and attempt history.

We use this information to provide immediate feedback, show progress, generate performance insights, improve the practice experience, and support authorized school oversight where the practice account is managed by a school.

Practice activity is not an official examination record and is not submitted to JAMB, WAEC, NECO, or another examination body unless we clearly notify the user and obtain any authorization required by law. ExamPortal does not collect official examination registration details or official results through the practice feature.

Information may be shared with the school that manages the relevant account and with service providers that host or support ExamPortal, only as necessary to provide the service. We may disclose information where required by law, to protect users, or to investigate fraud and security incidents.

We use reasonable administrative, technical, and organizational safeguards, including access controls, secure transport, tenant separation, and encryption of Google refresh tokens. No online system can guarantee absolute security.

We retain information, including practice-attempt history, while an account or school subscription remains active and as needed for academic, contractual, security, backup, or legal purposes. Retention periods may also be determined by the school responsible for the records.

Users may update certain profile information through ExamPortal. Requests to access, correct, export, or delete school-controlled academic information should normally be directed to the relevant school administrator.

Teachers may disconnect Google Calendar through ExamPortal and may revoke ExamPortal access from their Google Account permissions. Disconnecting stops future synchronization. Users may separately delete events already created in Google Calendar.

ExamPortal is provided to students through their schools. Schools are responsible for obtaining any consent required to create and administer student accounts and for using the service consistently with applicable education and child-protection requirements.

We may update this policy as the service or applicable requirements change. We will publish the revised policy on this page and update the date above. Material changes may also be communicated through the service.

Questions or requests concerning privacy may be sent to hello@crevmick.com.