Privacy Policy – Clean My Exam

This privacy policy aims to inform you about the commitments and practical measures taken by Clean My Exam to ensure respect for your personal data. Clean My Exam undertakes to carry out any processing of personal data in accordance with the provisions of Regulation No. 2016/679 of April 27, 2016, known as the General Data Protection Regulation, as well as those of Law No. 78-17 of January 6, 1978, as amended and/or any other applicable national legislation.

Data Controller: Clean My Exam

Contact Email: [email protected]

Processing Purposes:

As a data controller, Clean My Exam determines the means and purposes of the following personal data processing:

Respond to all requests or inquiries you may submit on our website;
Allow you to connect to certain restricted access parts of our website;
Manage your navigation, interactions on the website and your user account
Perform document analysis (plagiarism, AI, etc.)
Send confirmation, verification, notification emails
Improve the service (statistics, anti-abuse prevention)
Ensure the proper functioning of the service and its algorithms

Clean My Exam collects the following personal data:

Identification Data: first name, last name, email address
Connection Data: IP address, browser, operating system (via analytics tools)
Payment Data: via Stripe (we do not store any banking data internally)
Other: documents uploaded for analysis, expressed needs, data related to GDPR rights requests

Retention Period:

Your personal information is kept by Clean My Exam for a period of 30 days, after which it will be deleted from our servers unless the user explicitly requests to keep the data longer.
Inactive accounts: deletion after 12 months without activity
Documents: deletion after 30 days or at user request
Technical logs: maximum 30 days

Recipients:

Only Clean My Exam is the recipient of your personal information. However, our technical partners (Firebase, Stripe, Railway) have access to it as part of the service. Clean My Exam does not commercialize the personal data of visitors and users of its website.

Data Security and Integrity

We implement appropriate technical and organizational measures to ensure the security of your data against any loss, accidental destruction, alteration and unauthorized access to your personal data.

Google Firebase (database)
Railway (Node.js API)
Vercel (React.js Frontend)
Stripe (payment)
PostHog (behavioral analytics)

Servers are located in the European Union or the United States, in environments compliant with ISO/IEC 27001 security standards.

Behavioral Analytics (PostHog):

We use PostHog, an open-source behavioral analytics tool, to understand how users interact with our site. PostHog may capture data such as pages visited, clicks, and user journeys. This data is anonymized and helps us improve the user experience. PostHog does not collect personally identifiable information without your consent. You can refuse this tracking via our cookie banner. For more information, see PostHog's privacy policy: https://posthog.com/privacy

Computer and Freedom Rights:

You have the right to access, rectify, delete, object, withdraw your consent, as well as the right to limit processing and portability of your data, which you can exercise by email at [email protected].

Notification of changes to this charter:

This charter was last updated in May 2025. We may modify this charter regularly to adapt to new technologies, industry practices and regulatory requirements, among other reasons.