Privacy Policy

Account & Authentication Data: When you register, we collect your email address, hashed authentication credentials, account nickname, and optional profile preferences (such as target exam and feedback language). If you authenticate through Google OAuth / GIS, we receive basic identity profile verification from Google.

Essays & Evaluation Artifacts: We store candidate submitted essays, user-entered or curated question text snapshots, submission timestamps, automated examiner rubric scores, sentence-level grammar and lexical highlights, and iterative revision history.

Order & Billing Metadata: For prepaid membership purchases, payment transactions are handled directly by PCI-DSS compliant third-party payment gateways. Morexam never stores, processes, or transmits full card numbers or security CVV codes. We store only transactional metadata necessary for fulfillment, such as internal order IDs, provider checkout identifiers, purchased SKU, payment amount, currency, and fulfillment status.

Technical & Security Telemetry: We log IP addresses, browser user-agent tokens, session identifiers, and request timestamps to maintain session security, mitigate abuse, and enforce sliding-window API rate limits.

Providing AI-driven rubric diagnostic scoring, sentence revision suggestions, and longitudinal essay progress tracking.

Managing credit balance settlements, membership expiration schedules, and idempotent transaction audit logs.

Protecting platform integrity against automated scraping, prompt injection attacks, abuse, and fraudulent activity.

Delivering essential system notices, such as account security alerts, billing receipts, and support communications.

Website Analytics: We use Umami Cloud on morexam.com to measure page views, visitors, referrers, and device and location summaries. We exclude URL query strings and fragments. We do not send essay content, email addresses, or private essay and order IDs as analytics event properties.

Conversion Events: We record successful email registrations, evaluation submissions and completions, and observations of fulfilled purchases using category fields. Identifiers used to suppress duplicate events stay in your browser.

Submission Analytics: After a successful submission response, we record the exam type, task type, question source, and word-count range. Task IDs stay in browser session storage to reduce duplicate events and are not sent to Umami.

Payment Processing: Payment transactions are processed directly by compliant third-party payment service providers. These providers operate as independent data controllers or processors subject to their respective privacy standards and PCI-DSS requirements.

Infrastructure & Hosting: Encrypted PostgreSQL databases, caching nodes, and async worker servers hosted in tier-1 secure cloud facilities.

AI Foundation Services: Anonymized writing texts and rubrics are evaluated through secure enterprise AI APIs under zero-retention or non-training agreements where available. We do not sell your personal data or submitted essays to third parties.

We retain your account profile, submitted essays, and evaluation diagnostics as long as your account remains active to provide revision history and longitudinal reporting.

Order records and billing audit trails are maintained for the statutory duration required by applicable commercial and tax accounting laws.

We enforce transport encryption (HTTPS / TLS 1.3), salted password hashing, database transaction boundaries, and strict role-based access controls.

Depending on your location, you may have the right to request access to the personal data we hold about you, request corrections to inaccurate account details, or request deletion of your account and essay records.

To exercise your data privacy rights or submit privacy-related questions, please email our designated privacy team at [email protected].