FindExams Privacy Policy
At FindExams, we respect your privacy and keep your personal data safe. This policy explains what we collect, why we collect it, and how it’s protected when you use our platform and browser extensions to prepare for certifications like PMP, PMI-ACP, and ITIL 4.
Data we process Account data, exam activity, AI integration data, technical information, and payment metadata from processors.
Browser and AI integrations How FindExams handles browser extension activity and scoped AI assistant requests.
Rights, retention, and security Retention rules, user privacy rights, security practices, and vulnerability reporting.
1. Privacy Overview
Who controls your data, what we collect, and how payments and packages work
This section covers who is responsible for your data, the information FindExams collects, how it is used, how payments are processed, and the rules that apply to demo and paid packages.
Who we are FindExams is operated by PunkRise LLC. PunkRise LLC is the data controller responsible for your personal information collected through the FindExams website and services.
Account and exam data Name, email address, hashed password, account settings, extension preferences, and exam activity (exam attempts, scores, timing, domain performance) to personalize your experience and track progress.
AI integration data When you use FindExams through an AI assistant or compatible integration, we may process the minimum information needed for your requested operation, such as selected certification, selected domain, practice-question requests, authentication or entitlement information, and, when explicitly requested by an authenticated user, exam or practice performance data. Performance data may include attempts, scores, accuracy, correct and incorrect counts, domain performance, and recent performance where available.
Technical information IP address, device and browser info, usage logs, and cookies to improve performance, security, and reliability.
Service delivery and analytics To run the platform, browser extensions, and supported AI integrations; provide customizable and randomized exams; return user-requested practice questions or result summaries; maintain leaderboards/insights; fix issues; and improve features.
Communication and support To send essential notices (password resets, transactional messages) and respond to support requests. We do not sell your personal data.
Stripe processes all payments Payments are handled by Stripe. FindExams and PunkRise LLC do not collect or store full card numbers, CVC/CVV codes, or bank account details on our servers. Stripe may provide us with limited payment metadata (e.g., transaction ID, status, last4, brand) to complete your order.
Responsibility for card data Stripe is responsible for the processing and security of payment card data submitted at checkout. Please review Stripe’s privacy policy for details on their data practices.
Demo package customization In demo packages, users may change exam duration and question count before starting a test to explore platform features.
Paid package integrity For paid packages, mock exams follow fixed rules (e.g., question count, duration) to preserve exam integrity and consistency.
2. Cookies
Preferences, sessions, and usage analysis
We use cookies and similar technologies to remember preferences, maintain sessions, and analyze usage. You can control cookies through your browser settings.
3. Browser Extensions
Limited, practice-focused browser access
FindExams may provide browser extensions that allow users to access certification practice questions, submit answers, review feedback and explanations, and use optional study reminders directly from their browser.
Local extension data The extension may store limited information locally in your browser, such as the selected certification, reminder preferences, daily practice status, and other settings necessary to maintain the extension experience.
Communication with FindExams The extension communicates with FindExams services to retrieve certification practice questions and related content and, where applicable, to process practice activity and provide features associated with your FindExams account.
Browser permissions The extension may use browser permissions such as storage, alarms, notifications, and access to FindExams domains only where necessary to provide its functionality. FindExams browser extensions do not use these permissions to monitor your general browsing history or read content from unrelated websites.
Notifications If you choose to enable practice reminders, the extension may display browser notifications at your selected time. You can disable these reminders through the extension or browser settings.
4. AI Assistants and Third-Party Integrations
Scoped access through MCP and OAuth
FindExams may provide functionality through third-party AI platforms such as ChatGPT, Claude, Gemini, Microsoft Copilot, and other compatible AI assistants. These integrations may use Model Context Protocol (MCP) or similar integration mechanisms.
Authentication and authorization Where supported, FindExams uses OAuth-based authorization to allow an AI assistant to access permitted FindExams functionality without requiring the user to provide their FindExams password to the AI assistant. Access is limited to the permissions granted through the authorization flow and can be revoked.
Minimum necessary processing For AI assistant requests, FindExams processes only the minimum information necessary for the user-requested operation. This may include selected certification, selected domain, practice-question requests, authentication or entitlement information, and, when explicitly requested by an authenticated user, exam or practice performance data.
Performance data When an authenticated user asks for performance analysis, the integration may return available performance data such as attempts, scores, accuracy, correct and incorrect counts, domain performance, and recent performance. FindExams AI integrations must not request payment card data, government IDs, health information, passwords, API keys, MFA or OTP codes, or other authentication secrets through conversational tool inputs.
Conversation history The MCP integration does not request, retrieve, or reconstruct your complete AI conversation history. It processes only the specific information and tool arguments provided for the requested operation.
Third-party AI platforms Information returned to a third-party AI platform selected by you may be processed by that platform according to its own privacy policy, terms, and user settings. Users should review the applicable third-party AI platform's privacy policy and terms before connecting or using the integration. You can stop using the integration and, where authorization is supported, disconnect or revoke access.
5. Data Retention
How long records and logs are kept
We keep account and exam records for as long as your account is active or as needed to provide services and meet legal obligations. Temporary AI/MCP processing is used to complete the requested operation and is separate from normal FindExams account and exam history. FindExams does not maintain a separate archive of users' complete AI conversations through the MCP integration. Operational and security logs associated with integration requests may be retained for up to 30 days for security, abuse prevention, troubleshooting, and service reliability, unless a longer retention period is required by law or reasonably necessary to investigate security, fraud, or abuse incidents. You may request deletion of eligible personal data at any time.
6. Your Rights
Access, correction, export, and deletion
You can request access, correction, export, or deletion of your personal data. You can also stop using AI integrations and, where authorization is supported, disconnect or revoke access through the relevant platform or account settings. To exercise privacy rights, contact us at support@findexams.com.
7. Security
How we protect your information
We use modern security controls, encryption in transit, and restricted access to protect your information. No method is 100% secure, but we work to safeguard your data.
Security reports If you believe you have identified a security vulnerability affecting FindExams, including its website, browser extensions, APIs, or AI/MCP integrations, please report it to support@findexams.com. We review credible security reports and investigate reported vulnerabilities within a reasonable timeframe.
8. Changes to This Policy
How updates are communicated
We may update this policy from time to time. Material changes will be communicated via email or in-app notifications.
