Privacy Policy

This Privacy Notice explains how we collect and use personal data when you access and complete Mindmarqs' assessment test(s) (the "Service"), including processing of webcam video and derived measurements where enabled.

Depending on how you access the Service (private or client mode), we process:

A. Account and identity data

• Name (if provided), email address, username, language preferences
• Organization or Client reference

B. Assessment interaction and results data

• Your test responses and behavioral interaction data (e.g., timing, clicks/taps, task choices, performance indicators)
• Derived outputs and scoring results created by the Service

C. Webcam video and derived biometric-related data

• Webcam video stream during the assessment (as applicable)
• Derived technical measurements from video, such as gaze/attention markers, pupil/eye-region features, facial landmarks or similar signals, only to the extent required for the assessment features you use
• We do not use your webcam video to identify you in public databases, nor do we sell it.

D. Technical and device data

• IP address, device type, browser/app version, operating system, timestamps
• Security logs, error logs, audit logs (e.g., suspicious activity)

E. Support and communications

• Messages you send to support, and our replies

We process personal data for the following purposes:

1. Provide the Service (create access, run the assessment, generate your results)
2. Quality, integrity, and security (fraud prevention, abuse detection, technical debugging, ensuring assessment integrity)
3. Research and product improvement (improving reliability, validity, fairness, and performance of the assessment)
4. Client delivery (Client mode only) — where you take a test as part of an evaluation process, delivering outputs to the relevant client/organization as described at invitation and in the Shared Consent Form
5. Legal and compliance (responding to lawful requests, enforcing Terms)

Because the Service involves webcam-derived sensitive processing, we rely on a combination of:

• Contract performance: to provide the Service you or the Client request (account, test delivery, reporting)
• Legitimate interests: to secure, maintain, and improve the Service (where permitted)
• Explicit consent: for webcam video processing and any derived biometric/sensitive processing used for the assessment

If you do not provide explicit consent for webcam processing, you will not be able to complete assessments that require it.

Private mode (Private Consent Form):

• Results are delivered to you and remain under your account.
• We do not disclose your identifiable results to any third-party organization unless you instruct us or it is required by law.

Shared mode (Shared Consent Form):

• Your identifiable results may be disclosed to the organization that invited you (the "Client Organization"), as described at the time you receive the invitation.
• The Client Organization may use your results for purposes described in the shared invitation/consent (e.g., screening, evaluation, development).
• We recommend that the Client Organization provides its own privacy information for how it uses results once received.

We use vetted service providers ("processors") to run and secure the Service. These may include:

• Cloud hosting / infrastructure
• Video processing / computer vision services (if external)
• Database and storage
• Analytics / performance monitoring
• Email delivery
• Customer support tools

If any vendor is located outside Switzerland/EEA/UK, we ensure appropriate safeguards (e.g., contractual clauses and technical measures).

We retain personal data only as long as needed for the purposes above.

Default rule: We anonymize personal data after 3 years of inactivity on your account, unless:

• You request deletion earlier (where possible), or
• We must keep some data longer for legal claims, security, fraud prevention, or compliance obligations.

"Inactivity" means no login and no assessment activity associated with the account during that period.

Depending on your location and applicable law, you may have rights to:

• Access your data
• Correct inaccuracies
• Delete data (in certain cases)
• Restrict or object to processing (in certain cases)
• Data portability (in certain cases)
• Withdraw consent at any time (for consent-based processing)

Withdrawing consent for webcam/sensitive processing will stop such processing going forward and may prevent completion of a test requiring webcam processing.

To exercise rights: email privacy@mindmarqs.com with the subject "Privacy Request". We may ask for verification.

We implement technical and organizational measures appropriate to the risk, including access control, encryption in transit, and audit logging. No system is perfectly secure; if a breach occurs we will handle it according to applicable laws.

The Service is not intended for children under 16. If you believe a child provided data, contact us.

We may update this notice from time to time. We will show the effective date and, where appropriate, ask you to review changes.

Version: v1.0