Privacy Policy

1. Introduction

At Zeryth Technologies ("Zeryth", "we", "us", or "our"), we understand that privacy and data security are paramount, especially in the context of high-stakes assessments. This Privacy Policy outlines how we collect, use, process, and protect your information when you use the Zeryth Browser and our associated services (collectively, the "Services").

By using our Services, you consent to the data practices described in this policy. If you do not agree with these practices, you should not use the Zeryth Browser.

2. Information We Collect

To provide an iron-clad proctoring environment, Zeryth requires access to specific system data during an active assessment session. We collect:

A. Session Telemetry & Hardware Data

• Hardware Identifiers: MAC addresses, CPU/GPU metadata, and unique hardware IDs to prevent virtual machine spoofing.
• System Environment: Operating system version, active background processes, connected external displays, and peripheral devices.
• Network Diagnostics: IP addresses, latency metrics, and connection stability logs.

B. Assessment Integrity Data

• Screen Captures: Periodic or continuous screen captures during an active assessment, as mandated by the examining institution.
• Input Metadata: Keystroke cadence, mouse movement patterns, and clipboard interaction logs (we do not log the actual contents of your keystrokes outside of the assessment input fields).
• Web Traffic: DNS queries and unauthorized navigation attempts made from within the locked browser environment.

C. Account Information

• Basic profile information (Name, Email) provided by your institution or entered during registration.

3. How We Use Your Information

The core purpose of our data collection is strictly to ensure the integrity of the assessment. We use this data to:

• Authenticate your identity and authorized device.
• Enforce the security protocols of the exam (e.g., blocking unauthorized tabs, VMs, or screen sharing).
• Generate integrity reports and flag suspicious behavior for the administering institution.
• Improve our anti-cheat algorithms and optimize browser performance.

4. Data Sharing and Disclosure

We do not sell your personal data to third parties. We only share data in the following circumstances:

• With the Administering Institution: All assessment integrity data, flags, and reports are shared directly with the school, employer, or certification body hosting the exam.
• Legal Compliance: If required by law, subpoena, or to protect the safety and rights of Zeryth and its users.
• Service Providers: We may use secure, audited third-party infrastructure providers (e.g., AWS, GCP) to store data, governed by strict confidentiality agreements.

5. Data Retention and Deletion

Session data and telemetry are retained only for as long as required by the administering institution for grading, auditing, and dispute resolution. In most cases, this data is automatically purged from our systems within 30 to 90 days after the assessment concludes.

6. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to request access to, correction of, or deletion of your personal data. Please note that because Zeryth acts as a data processor for the examining institution (the data controller), requests regarding assessment data must usually be directed to the institution that administered the exam.