ExamLiftPrivacy at ExamLift
ExamLift is account-free by design and keeps the public product surface separate from a learner's private study flow.
The original PDF is handled temporarily during extraction and is not retained as persistent product data. Extracted pages, the Practice Exam, Source evidence, and the Exam attempt are retained for at most 30 days. You can delete them immediately; deletion or expiration ends access and invalidates related exports.
Privacy at a glance
The points most learners need before uploading a PDF.
Temporary during extraction
The original file is not retained as persistent product data.
Up to 30 days
Generated study data can be deleted immediately and otherwise expires within 30 days.
Analytics require consent
Google Analytics and Clarity stay off until you accept analytics.
Privacy topics people ask about
Open only the section you need.
Private access and Recovery linksHow private study access works and what learners should protect.
Use only a Source document you have permission to use; you are responsible for licensing and compliance.
Study data includes Source document content during extraction, Extracted pages, the Practice Exam, Source evidence, and the Exam attempt.
Access data includes the credentials, cookies, and identifiers used for Anonymous access and the Recovery link.
Technical and operational data may include IP address and request headers processed by hosting and security providers, timestamps, request and Exam generation identifiers, selected settings, model, duration, token usage, approximate cost, allowlisted event names, and coarse error or security information.
We use these data to deliver and secure the service, generate and store the Practice Exam, restore private access, verify Purchases and refunds, answer support requests, prevent abuse, diagnose failures, and meet legal obligations.
The original PDF is handled temporarily during extraction and is not retained as persistent product data.
Extracted pages, the Practice Exam, Source evidence, and the Exam attempt are retained for at most 30 days.
You can delete them immediately; deletion or expiration ends access and invalidates related exports.
Anonymous access and Recovery link are bearer-style access; keep them private.
AI provider processingWhat text is processed and what model-training promise ExamLift makes.
Cloudflare provides hosting and security, Supabase stores application data, and ZenMux and its upstream models process the minimum Extracted-page text needed for Exam generation.
ExamLift does not use learner material to train its own models.
ZenMux and upstream models may still process requests under their applicable terms; ExamLift does not make an absolute provider no-processing, no-retention, no-training, or ZDR promise.
Payments and support dataThe payment information ExamLift uses—and the card data it does not store.
Purchase and support data includes provider transaction identifiers, amount, currency, payment or refund status, and any email address and message you send to support.
ExamLift does not receive or store full payment card numbers; the configured Merchant of Record collects and processes buyer contact and payment details under its own terms.
Transaction and support records may be retained longer when reasonably necessary for refunds, disputes, fraud prevention, accounting, tax, support, or other legal obligations.
Product analytics records allowlisted operational or aggregate events and excludes document content, Questions, Source evidence, and credentials.
Google Analytics and Microsoft Clarity load only after you accept analytics. They are limited to public product pages and are not loaded on private study pages; Clarity uses strict text masking.