evalbox

The new free online test maker to
create and manage online exams (and paper exams too !)

Online quizzes or paper-based exams (with automatic exam grading !), education, training, recruitment, assessment, certification

Privacy Policy

Last Updated: 2025-04-08


About this Privacy Policy

Evalbox knows you care about how your personal information is used and shared, and we take your privacy seriously. This Privacy Policy outlines how we collect, use, and share your personally identifiable information ("Personal Information") through our website (evalbox.com) and our services. Please read it carefully.

Remember that your use of Evalbox is at all times subject to the Terms of Use, which incorporates this Privacy Policy. Any terms we use in this Privacy Policy without defining them have the definitions given to them in the Terms of Use.

What does this Privacy Policy cover?

This Privacy Policy details how we collect, receive, use, store, share, transfer and process your Personal Information. It also describes the choices you have regarding the use of your Personal Information, as well as your rights and how you execute these rights.

This Privacy Policy only applies to the processing of your Personal Information by Evalbox as a data controller, meaning where we process your Personal Information for our purposes. This Privacy Policy does not apply to any processing of your Personal Information by Evalbox as a data processor on behalf of a Creator. Creators will have their own privacy practices governing their use of Personal Information as outlined in their own terms of use and/or privacy policies.

Will Evalbox ever change this Privacy Policy?

We’re constantly trying to improve our services, so we may need to change this Privacy Policy from time to time as well, but we will alert you to changes by placing a notice on our site, by sending you an email, and/or by some other means.

Please note that if you’ve opted not to receive legal notice emails from us (or you haven’t provided us with your email address), those legal notices will still govern your use of Evalbox, and you are still responsible for reading and understanding them.

What Information does Evalbox collect?

We collect and process Personal Information about you when you interact with us and our services, as well as when you subscribe to any of our paid or unpaid services. This may include:

We may also collect information about you when one of our users syncs their address book information with our app for contact syncing purposes. This information collection is strictly limited to email addresses and phone numbers, and any information collected in this manner is securely stored only as hashed values.

Finally, we also collect information on the use of our website via Cookies. Please view the section “Cookies” below for more information.

How does Evalbox use your Personal Information?

We process this Personal Information for the following purposes:

How will Evalbox share the Personal Information it receives?

We may share your Personal Information with third parties as described below:

In certain cases, we may anonymize your Personal Information in such a way that you can no longer be identified as an individual, and we reserve the right to use and share such anonymized information to trusted partners not specified here. However, we never disclose aggregated or de-identified information in a manner that could identify you as an individual.

Where will we send your Personal Information?

Evalbox is established in the US and uses service providers established both in the US and in other countries to process Personal Information as described in this Privacy Policy. As such, your Personal Information may be shared internationally.

Does Evalbox participate in the Data Privacy Framework?

To facilitate the lawful import of Personal Information from the European Union, the United Kingdom, and the Swiss Confederation, Evalbox participates in the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) (each, a “DPF”). To verify our participation, please consult the Data Privacy Framework List.

When we receive Personal Information under a DPF, the DPF Principles apply to our processing of that information. Under any DPF, we are accountable for the onward transfer of Personal Information, and only transfer Personal Information received pursuant to a DPF under agreements that provide the same protections as the DPF. Our adherence to the DPFs specified above is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.

In the event of a dispute between you and us regarding our use of Personal Information under a DPF, we ask that you first raise the dispute with us directly at privacy@evalbox.com If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. These dispute resolution services are provided at no cost to you.

If you have a “residual claim” regarding our use of your Personal Information under a DPF that is unresolved after (i) direct contact with us; (ii) your use of the independent dispute resolution mechanism identified above; and (iii) your raising the issue with your data protection authority, you have the the right to seek redress through binding arbitration in accordance with the applicable DPF.

Is Personal Information about you secure?

Your account is protected by a password for your privacy and security. You must prevent unauthorized access to your account and Personal Information by selecting and protecting your password appropriately and limiting access to your computer or device and browser by signing off after you have finished accessing your account.

We endeavor to protect the privacy of your account and other Personal Information we hold in our records, but unfortunately, we cannot guarantee complete security. Unauthorized entry or use, failure of the services, or other factors may compromise the security of user information at any time.

Privacy and your direct messages

You can use Evalbox to send direct messages to other Evalbox users, and to receive direct messages from other Evalbox users. Please note that, at this time, direct messages are not end-to-end encrypted, and are not a substitute for secure messaging services. Direct messaging contents are disclosed to their intended recipients. Recipients of direct messages may keep those messages even if you request their deletion, and even if you delete your Evalbox account. Keep in mind that recipients of your direct messages do not necessarily have any obligation to keep them private.

We will only disclose direct message contents to people other than the intended recipients in very limited circumstances where allowed or required by law, for example, in response to valid court orders or in emergency situations involving danger of death or serious physical injury. While we maintain strict internal access controls on direct messaging content, keep in mind that Evalbox personnel may access the contents of direct messages to enforce our Terms of Use, ensure the security of our platform, to provide user support, or as otherwise necessary to provide our services. We may also use automated means to ensure the safety of direct messaging content, including scanning for spam, malicious content, and child abuse material.

Privacy and SMS Services

If you provide us with your phone number, we may use a third-party service provider to verify your phone number with an SMS text message. Information regarding this SMS verification is used only for verification purposes, and is not shared with third parties/affiliates for marketing/promotional purposes.

What are your rights?

Depending on applicable local laws, you may be entitled to ask Evalbox for a copy of your Personal Information, to correct it, erase or restrict its processing, or to ask us to transfer some of this information to other organizations. You may also have rights to object to some processing activities or to request restriction of some processing activities. Where we have asked for your consent to process your Personal Information, you may also have the right to withdraw this consent. These rights may be limited in some situations or in accordance with applicable law – for example, we cannot delete your Personal Information when we can demonstrate that we have a legal obligation to retain it. In some instances, this may mean that we are able to retain data even if you withdraw your consent or you delete your account.

Where we require Personal Information to comply with legal or contractual obligations, then provision of such information is mandatory: if such information is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. In all other cases, provision of requested personal data is optional. Please note we will always inform you where the provision of your Personal Information is mandatory or optional.

We hope that we can satisfy any queries you may have about the way we process your Personal Information. If you have any concerns about how we process your Personal Information, or would like to opt out of marketing, you can get in touch at privacy@evalbox.com

You can access, edit, or delete some personal information by yourself

Through your account settings, you may access, and, in some cases, edit or delete the following information you’ve provided to us:

The information you can view, update, and delete may change as the services change. If you'd like to delete your account, you can do so from your account page.

Where you have directed third-party services to provide Personal Information to us, you can direct those third-party service providers to stop providing us your Personal Information. For example, you can use your Google security settings page to revoke our access to information from your YouTube account.

If you have any questions about viewing or updating information we have on file about you, please contact us at privacy@evalbox.com

You can unsubscribe from our marketing communications

You may unsubscribe from our marketing communications by clicking on the “unsubscribe” link located on the bottom of our e-mails, updating your communication preferences or by contacting us at privacy@evalbox.com

We remind you that this Privacy Policy does not apply to any processing of your Personal Information by Evalbox as a data processor on behalf of a Creator. A Creator’s own terms and policies govern its use of Personal Information it collects on the Creator’s subdomain on the services, including their own marketing emails and other communications.

You have the right to complain to your local data protection authority

In the event you have unresolved concerns, please note that you have the right to complain to a data protection authority. Contact details for data protection authorities in the EEA, Switzerland and certain non-European countries are available here.

How long will Evalbox retain your data?

We retain information about you only for as long as reasonably necessary to fulfill the purposes for which it was collected. We may retain your Personal Information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

Cookies

We use cookies on our website. Cookies are small text files sent by a web server to your web browser and saved locally on your computer. The cookie allows the server to uniquely identify the browser on each page. Cookies do not cause any harm to your computer and do not contain viruses.

We use the following categories of cookies on our website:

Category 1: Strictly Necessary Cookies

These cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for such as remembering your login details or data provided for a purchase cannot be provided.

Category 2: Performance Cookies

These cookies collect information on how people use our website. The data stored by these cookies never shows personal details from which your individual identity can be established.

Category 3: Functionality Cookies

These cookies remember choices you make such as the country you visit our website from, language and search parameters. These can then be used to provide you with an experience more appropriate to your selections and to make the visits more tailored and pleasant.

Disabling and opting-out of cookies

Evalbox is rolling out a detailed cookie management system for users in select jurisdictions that can be used to disable all cookies except for necessary cookies. If you do not see this system, please note that current versions of web browsers offer enhanced user controls regarding the placement and duration of both first and third party cookies. Search for "cookies" under your web browser's “Help menu” for more information on cookie management features available to you. You can enable or disable cookies by modifying the settings in your browser. You can also find out how to do this, and find more information on cookies at www.allaboutcookies.org. However, if you choose to disable cookies in your browser, you may be unable to complete certain activities on our websites or to correctly access certain parts of it. If you would like more information about interest-based advertising, including how to opt-out of these cookies, please visit http://youronlinechoices.eu/.

Information Collected From Other Websites and Do Not Track Policy

Through cookies we place on your browser or device, we may collect information about your online activity after you leave our website. Just like any other usage information we collect, this information allows us to improve the services and customize your online experience, and otherwise as described in this Privacy Policy. Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time and across different websites. Our services do not support Do Not Track requests at this time, which means that we collect information about your online activity both while you are using the services and after you leave our services.

Questions about this policy?

The data controller for this processing is Evalbox.

If you have any questions or concerns regarding our privacy policies, please send us a detailed message to privacy@evalbox.com