Privacy Policy
GovAssess is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our government assessment platform.
1. Information We Collect
We collect information that you provide directly to us, including:
- Account information (name, email address, phone number, organization affiliation)
- Authentication credentials and security information
- Test responses and assessment data
- Communication preferences and correspondence
- Usage data and platform interaction logs
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our assessment platform services
- Process and score assessments according to organizational requirements
- Communicate with users about their accounts, tests, and results
- Ensure platform security and prevent fraudulent activity
- Comply with legal obligations and government regulations
- Generate anonymized analytics to improve platform performance
3. Data Security
We implement robust security measures to protect your information:
- AES-256-GCM encryption for all test links and sensitive data
- Microsoft Entra ID authentication with multi-factor authentication support
- Infrastructure designed for FISMA Moderate compliance
- Regular security audits and vulnerability assessments
- Role-based access controls and data isolation between organizations
- Secure data transmission using industry-standard protocols
4. Data Sharing and Disclosure
We do not sell your personal information. We may share information only in the following circumstances:
- With your organization's authorized administrators and HR personnel as configured
- With service providers who assist in platform operations under strict confidentiality agreements
- When required by law, court order, or government regulation
- To protect the rights, property, or safety of GovAssess, our users, or others
- With your explicit consent or at your direction
5. Data Retention
We retain your information for as long as necessary to:
- Provide services and maintain your account
- Comply with legal, regulatory, and contractual obligations
- Resolve disputes and enforce our agreements
- Support organizational record-keeping requirements
Assessment data is retained according to your organization's policies and applicable government retention schedules.
6. Your Rights and Choices
Depending on your location and role, you may have certain rights regarding your personal information:
- Access and obtain a copy of your personal information
- Request correction of inaccurate or incomplete data
- Request deletion of your data (subject to retention requirements)
- Object to certain processing activities
- Withdraw consent where processing is based on consent
To exercise these rights, please contact your organization's administrator or reach out to us at privacy@govassess.com.
7. Children's Privacy
Our platform is not intended for individuals under the age of 18 unless they are test candidates authorized by a government agency. We do not knowingly collect personal information from children without appropriate authorization and parental consent where required by law.
8. Government Compliance
GovAssess is designed to meet government security and privacy requirements:
- Infrastructure positioned for FISMA Moderate compliance
- Prepared for future FedRAMP certification requirements
- Section 508 accessibility compliance
- Support for agency-specific privacy and security requirements
9. Third-Party Services
Our platform utilizes trusted third-party services including Microsoft Azure cloud infrastructure and Microsoft Entra ID for authentication. These providers maintain their own privacy policies and security standards that meet or exceed government requirements.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify users of material changes through the platform or via email. Your continued use of GovAssess after such changes constitutes acceptance of the updated policy.
11. International Data Transfers
Your information is primarily stored and processed in the United States on Microsoft Azure infrastructure. If you access our platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Privacy Office
GovAssess
Email: privacy@govassess.com
Phone: (800) 555-1234
Address: 1234 Government Way, Suite 500, Washington, DC 20001
13. Accessibility
We are committed to ensuring that our Privacy Policy is accessible to all users. If you need this policy in an alternative format or have difficulty accessing any information, please contact us at accessibility@govassess.com.