Privacy Policy

1. Introduction

At Zeryth Technologies ("Zeryth", "we", "us", or "our"), we understand that privacy and data security are paramount, especially in the context of high-stakes assessments. This Privacy Policy outlines how we collect, use, process, and protect your information when you use the Zeryth Browser, the Zeryth Mobile companion app for Android, and our associated services (collectively, the "Services").

By using our Services, you consent to the data practices described in this policy. If you do not agree with these practices, you should not use the Zeryth Browser or the Zeryth Mobile companion app.

2. Information We Collect

To provide an iron-clad proctoring environment, Zeryth requires access to specific system data during an active assessment session. We collect the following information:

A. Session Telemetry & Hardware Data

• Hardware Identifiers: MAC addresses, CPU/GPU metadata, and unique hardware IDs to prevent virtual machine spoofing.
• System Environment: Operating system version, active background processes, connected external displays, and peripheral devices.
• Network Diagnostics: IP addresses, latency metrics, and connection stability logs.

B. Assessment Integrity Data

• Screen Captures: Periodic or continuous screen captures during an active assessment, as mandated by the examining institution.
• Input Metadata: Keystroke cadence, mouse movement patterns, and clipboard interaction logs (we do not log the actual contents of your keystrokes outside of the assessment input fields).
• Web Traffic: DNS queries and unauthorized navigation attempts made from within the locked browser environment.

C. Account Information

• Basic profile information (Name, Email) provided by your institution or entered during registration.

D. Zeryth Mobile Companion App (Android)

The Zeryth Mobile companion app acts as a secondary physical-environment watchdog during an active assessment session. It only collects information while connected to an active session, and only to the extent needed to verify exam integrity:

• Camera (QR connection): The app briefly uses your device camera solely to scan and read the session QR code provided at the start of an assessment. No photos are captured, processed, or stored beyond the QR code text needed to establish the connection.
• Motion sensors: The app reads the device's accelerometer (orientation/movement) to detect when the phone is moved in a manner inconsistent with an in-progress assessment. This data is used to flag physical mobility violations and is not used for any other purpose.
• Notification & screen settings: To prevent distractions, the app may detect and, with your permission, manage notification access (Do Not Disturb) and screen brightness during a session. The contents of your notifications are never read, collected, or transmitted.
• Connection data: IP address and latency metrics used to maintain the encrypted (WSS) connection to your assessment session.

The Zeryth Mobile app works in conjunction with the Zeryth Browser on your computer. Physical-environment flags detected by the mobile app are transmitted securely to your active desktop session and shared with the administering institution as part of the integrity report for that assessment.

3. How We Use Your Information

The core purpose of our data collection is strictly to ensure the integrity of the assessment. We use this data to:

• Authenticate your identity and authorized device.
• Enforce the security protocols of the exam (e.g., blocking unauthorized tabs, VMs, or screen sharing).
• Detect and flag physical-environment violations reported by the Zeryth Mobile companion app (e.g., device movement).
• Generate integrity reports and flag suspicious behavior for the administering institution.
• Improve our anti-cheat algorithms and optimize browser performance.

4. Data Sharing and Disclosure

We do not sell your personal data to third parties. We only share data in the following circumstances:

• With the Administering Institution: All assessment integrity data, flags, and reports are shared directly with the school, employer, or certification body hosting the exam.
• Legal Compliance: If required by law, subpoena, or to protect the safety and rights of Zeryth and its users.
• Service Providers: We may use secure, audited third-party infrastructure providers (e.g., AWS, GCP) to store data, governed by strict confidentiality agreements.

5. Data Retention and Deletion

Session data and telemetry are retained only for as long as required by the administering institution for grading, auditing, and dispute resolution. In most cases, this data is automatically purged from our systems within 30 to 90 days after the assessment concludes.

6. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to request access to, correction of, or deletion of your personal data. Please note that because Zeryth acts as a data processor for the examining institution (the data controller), requests regarding assessment data must usually be directed to the institution that administered the exam.