1. Scope and purpose of this privacy policy
This Privacy Policy describes how NativeScore processes information when organizations use the platform for language assessment, candidate readiness testing, campaign-based screening, and certificate verification workflows. The policy applies to public pages, authenticated dashboards, attempt sessions, and post-test review surfaces where personal information or assessment evidence may appear. It is designed so institutions, hiring teams, and candidates can understand what data is handled, why it is handled, and how controls are applied through role-based permissions.
The platform is used in different operating models, including schools, colleges, training partners, recruitment teams, and multilingual service operations. Data handling therefore reflects both platform-level safeguards and campaign-level choices made by customer administrators. When an admin enables features such as secure fullscreen flow, screen share checks, camera capture, microphone recording, or transcript support, relevant technical data is processed to run the requested function. This policy explains those processing pathways in plain language.
If a customer has executed separate contractual terms that include stricter retention windows or region-specific obligations, those terms can apply in addition to this policy. In case of conflict between this page and a signed agreement, the signed agreement governs the extent permitted by law. For all general website visitors and non-contracted usage, this published policy remains the primary reference.
2. Categories of data we collect and process
NativeScore may process account and identity attributes such as candidate name, assigned identifier, email, phone number, campaign membership, and role information for admin, supervisor, HR, or agent users. We may also process technical metadata required for secure delivery, including browser and device context, timestamped events, session state, and permission signals related to camera, microphone, or screen-share setup where those controls are required by campaign configuration.
During assessment execution, the platform processes section-level responses, objective and subjective answer payloads, test navigation events, timing signals, start and submit milestones, and scoring artifacts generated by workflow rules. For speaking and proctored flows, additional evidence may include transcript payloads, media file references, upload logs, and secure attempt intelligence records that link activity to a campaign and attempt identifier. This information is used to deliver a valid testing process and support authorized review.
For certificate and verification workflows, data may include certificate ID, linked attempt summary, result status, section breakdown metrics, issuance timestamp, and verification lookups. We process this information to provide trust-preserving result validation and to prevent mismatched certificate representations across user roles. Public verification surfaces are intentionally constrained to relevant fields so sensitive internals are not broadly exposed.
3. Legal basis and legitimate platform use
Processing activities are performed for legitimate business purposes such as delivering contracted assessment services, maintaining platform integrity, enforcing campaign security controls, supporting operational accountability, and preserving auditable results for organizations that rely on language evaluation data in admissions or hiring decisions. In many cases, processing is necessary for contractual performance between NativeScore and the customer organization that provisions the campaign.
Where required by applicable law, processing may also rely on consent or equivalent lawful grounds, particularly for device permissions connected to recording features. Campaign owners are responsible for ensuring that candidates are informed of applicable assessment conditions before attempt start. NativeScore provides technical controls and policy disclosures, while customer organizations remain responsible for lawful deployment within their jurisdiction and institutional context.
We do not support unauthorized surveillance. Platform recording and monitoring controls are intended only for declared assessment governance, quality assurance, and integrity review. Misuse outside legitimate exam operations is prohibited by platform terms and may trigger suspension of access or legal action where relevant.
4. How we use data during assessment delivery
Data is processed to initialize attempts, enforce section sequencing, maintain timing controls, and apply campaign-defined constraints such as fullscreen and secure test flow requirements. These controls are essential for fairness and consistency because candidate outcomes should reflect language capability, not inconsistent delivery conditions. Session telemetry allows the platform to detect whether required prerequisites are met before progression.
Response data is used to calculate objective scoring, route subjective answers for review, generate section summaries, and maintain a complete attempt trail for post-test analysis. Where speech-to-text integrations are enabled, audio segments and transcript payloads are processed to provide review support and scoring context. The platform architecture is designed so this information can be accessed only through authorized roles with campaign scope checks.
Post-assessment, data is used for result publication, certificate generation, downloadable records, and verification endpoints. This continuity reduces manual reconciliation and supports organizations that need to validate candidate performance after the test window has closed.
5. Recording data, proctoring evidence, and media handling
If enabled by campaign settings, NativeScore may process screen recordings, camera streams, microphone captures, and related media metadata. These artifacts are used for integrity verification, incident review, and controlled supervisor or admin analysis. Media collection is configuration-driven: if a campaign does not require a particular stream, the platform should not process that stream for the attempt.
Recording persistence follows operational logic associated with complete test submission or configured save checkpoints. Media files may be organized in storage paths that support campaign-level management so customers can retain or purge evidence in an administratively manageable way. Retention behavior can differ based on plan selection and contractual requirements. Access to media references is restricted to authorized roles and should never be treated as a publicly shareable asset.
Customers are expected to communicate recording expectations clearly to candidates before test start. NativeScore supports this through instruction prompts, permission checks, and attempt gating controls, but institutional policy communication remains the responsibility of the deploying organization.
6. Data sharing, subprocessors, and third-party integrations
NativeScore does not sell candidate personal information. Data may be shared with authorized users of the same customer organization according to role and campaign access rules. Limited sharing may occur with infrastructure providers and technical subprocessors that support hosting, storage, delivery, analytics, monitoring, or speech processing capabilities, strictly to the extent necessary to deliver platform functions.
When customers configure third-party speech-to-text or language intelligence providers, relevant audio and metadata can be transmitted to those services according to integration settings chosen by the customer. Customers should review third-party terms and regional compliance requirements before enabling such integrations. NativeScore can provide integration controls, but responsibility for vendor suitability within a specific legal regime remains with the customer organization.
Government requests, legal obligations, or court orders may require disclosure in limited circumstances. Where permitted, we aim to narrow scope, verify legal basis, and preserve transparency with the affected customer organization.
7. Retention periods and deletion approach
Retention duration depends on data category, plan configuration, and contractual terms. Attempt records, score artifacts, and operational logs are retained as needed to run the service, support dispute resolution, and maintain accountable reporting. Certificate verification records may be retained for long-term trust continuity where lifetime verification is part of the service model.
Media evidence retention may be shorter or longer depending on customer policy and storage governance settings. Customers that require campaign-level media cleanup should coordinate operational retention controls with platform support to avoid accidental deletion of records that are still needed for compliance or review. Retention decisions should be documented by the customer in line with internal policy and applicable law.
When valid deletion requests are received and no overriding legal, contractual, or security obligation requires continued retention, data may be removed or anonymized using controlled procedures. Some backups may persist for a limited period as part of disaster recovery architecture before final expiration.
8. Access control, security safeguards, and incident response
NativeScore uses layered controls including authentication checks, role-scoped authorization, campaign-level visibility restrictions, transport security, and audit-friendly workflow design to reduce unauthorized access risk. Administrative operations are expected to follow least-privilege principles so users only see data required for their responsibilities.
No digital platform can guarantee absolute security, but we continuously prioritize practical protections that reduce likelihood and impact of incidents. This includes monitoring for anomalous behavior, applying infrastructure hardening, and maintaining process controls around media handling and sensitive result workflows. Customers are also responsible for safeguarding credentials and enforcing organizational security hygiene on endpoint devices.
In the event of a confirmed incident affecting personal data, response actions may include containment, investigation, remediation, and legally required notifications. Timelines and notification pathways depend on jurisdiction and contractual terms.
9. User rights, requests, and grievance channels
Depending on applicable law, individuals may have rights to request access, correction, deletion, restriction, portability, or objection regarding personal data processed through NativeScore. Because many users are provisioned by institutions or employers, request handling may involve both NativeScore and the relevant customer organization that acts as data controller for campaign decisions.
To submit a privacy request, users can contact the support channel listed on this page and include enough detail to identify the account, campaign, and request type. We may require verification steps to protect account security and prevent unauthorized disclosure. Some requests may be limited where legal obligations, fraud prevention, contractual duties, or public-interest grounds apply.
If a user believes their privacy concern has not been handled appropriately, they may escalate through the documented grievance route or relevant data protection authority, depending on jurisdiction.
10. Cookies, analytics, and public pages
Public pages may use essential technical cookies or local storage mechanisms required for session continuity, security, and basic performance. Where analytics tools are used, information may be aggregated to improve website quality, understand traffic behavior, and prioritize support resources. Analytics usage is governed by minimization principles and should not expose restricted attempt data on public surfaces.
Users can manage cookie preferences through browser settings, but disabling essential mechanisms may impact site functionality. Assessment sessions in particular rely on stable browser behavior for secure flow and timing accuracy. Organizations should provide candidates with practical device guidance before high-stakes attempts.
Public verification routes are designed to provide targeted certificate checks and should not be interpreted as a broad personal data search interface.
11. International transfers and jurisdictional considerations
Where infrastructure or subprocessors operate across regions, personal information may be processed in jurisdictions different from the user location. In such cases we aim to apply suitable safeguards through contractual and technical measures appropriate to the service context. Customers with strict residency requirements should discuss deployment constraints before production rollout.
Cross-border obligations vary by law. Customer organizations remain responsible for evaluating whether their use of the platform meets local legal requirements, including employee notice duties, candidate consent obligations, and public-sector procurement rules where applicable.
NativeScore can support implementation guidance, but legal interpretation for a specific institution or employer should be obtained from qualified counsel.
12. Changes to this policy and contact details
This policy may be updated when product capabilities, legal requirements, or operational practices change. Material updates will be reflected on this page with revised wording so users can review current handling expectations. Continued use of the platform after updates means the revised policy applies to the extent permitted by law and contract.
For privacy questions, security concerns, or policy clarification, contact NativeScore at contact@nativescore.com or call 7827806009. Please include your organization name, campaign reference, and user role so the team can route your request accurately and respond faster.
Last reviewed: 15 March 2026.