Privacy Policy

Last updated: January 2026

Introduction

OMREX ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Personal Information

When you create an account, we collect:

  • Email address
  • First and last name
  • Password (encrypted)
  • Institution/organization name
  • Role (professor, administrator, etc.)

Academic Data

For exam processing, we may process:

  • Exam answer sheets (PDFs)
  • Student grades and scores
  • Attendance records
  • Course information

Usage Data

We collect information about how you use our service:

  • Login times and frequency
  • Features accessed
  • Files uploaded and processed
  • Browser and device information

2. How We Use Your Information

  • Process and grade exam sheets accurately
  • Provide access to published grades and attendance records
  • Communicate service updates and maintenance schedules
  • Improve our service and fix technical issues
  • Comply with legal obligations

3. Student Data Protection

Student grades, personal information, and attendance data are treated with special care:

  • Only accessible to authorized institution staff
  • Never shared with third parties without explicit consent
  • Encrypted in transit and at rest
  • Subject to role-based access controls
  • Available only to students viewing their own data

4. Data Sharing & Third Parties

We do NOT sell, rent, or lease your personal information. We only share data with:

  • Your institution's authorized administrators (as configured)
  • Service providers who assist in operating our platform (under strict confidentiality agreements)
  • Legal authorities when required by law

5. Data Retention

We retain your information as long as your account is active. After account deletion:

  • Personal data is deleted within 30 days
  • Academic records may be retained if required by institutional or legal compliance
  • You can request complete data deletion (with institutional consent if applicable)

6. Security

We implement industry-standard security measures:

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for data at rest
  • Regular security audits and penetration testing
  • Role-based access controls
  • Secure password hashing and authentication

However, no method of transmission over the Internet is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.

7. Cookies & Tracking

We use cookies to:

  • Maintain your login session
  • Remember your preferences
  • Understand how you use our service

We do not use third-party advertising cookies or behavioral tracking. You can control cookie settings in your browser.

8. Your Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your account
  • Export your data in a standard format
  • Object to certain processing activities

To exercise these rights, contact us at privacy@omrex.com

9. GDPR & International Compliance

For users in the European Union and other regions with data protection regulations:

  • We comply with GDPR principles for data processing
  • Your data is processed lawfully, fairly, and transparently
  • We collect only necessary data
  • Academic records are processed under legitimate educational interests

10. Children's Privacy

OMREX is an educational tool used by institutions. If you are under 13 and accessing this service, parental/guardian consent may be required. Please contact your institution.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email and update the "Last updated" date above.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices: