Privacy Policy

1. Who we are

ScriptGrade provides coding exam software and an online classroom to universities and polytechnics in Nigeria. In this policy, “we”, “us” and “ScriptGrade” mean the ScriptGrade team.

We provide ScriptGrade to schools. When a school uses ScriptGrade, the school decides which students and staff use it and what they do with it. For information about students and lecturers, the school is in charge of that information, and we look after it on the school’s behalf.

2. Our website

• No tracking or ads. Our website does not use analytics tools, advertising, or tracking cookies.
• Theme choice. If you switch between light and dark mode, your browser remembers that choice on your own device. It is not sent to us.
• The enquiry form. The “Write your message” form only writes a message for you to copy or send from your own email app. It does not send anything to us by itself.
• Emails you send us. If you email us, we receive your email address and whatever you write, and we use it to reply to you.
• Website delivery. Our website is delivered by Cloudflare. Like any website service, Cloudflare handles basic technical details such as IP addresses to deliver pages and protect the site from attacks.

3. What the apps collect

From schools

• The school’s name, contact details, and the plan and number of seats it pays for.
• Payment records, including the bank transfer reference and any proof of payment the school sends us.

From lecturers and school staff

• Name, school email address, and account password (we store only a scrambled form of passwords, never the password itself).
• Exam papers, questions, tests, classes, notes, assignments, marks and feedback they create.

From students

• Matric number, name and email address, as supplied by the school on its class list.
• For the online classroom: account password (stored only in scrambled form), classes joined, assignment answers, uploaded files, scores and feedback.
• For exams: answers, the output of their code, marks, and exam activity such as when the exam window lost focus, when an invigilator paused or released the exam, and when the work was submitted.
• An exam PIN chosen by the student, stored only in scrambled form.

Technical information

• Sign-in sessions, and short records of important account actions (for example, when a password is reset), so we can keep accounts secure and fix problems.

We do not collect students’ bank details, and we do not use ScriptGrade to track students’ locations.

4. How we use information

• To run exams and the online classroom, and to mark answers by running code against the lecturer’s tests.
• To show marks and feedback to the right people, when the lecturer chooses to release them.
• To send emails the service needs, such as class invitation codes and password reset codes.
• To check a school’s access and seats, and to confirm payments.
• To keep the service secure, prevent misuse, and fix problems.
• To reply when you contact us.

We do not sell personal information, use it for advertising, or use students’ work to train AI systems.

5. Where information is kept

• Exams on campus. During a supervised exam, papers and answers are kept on the lecturer’s computer and the school’s own folder on the school network.
• Online. The online classroom, school accounts, payment records, and backup copies of exam results and papers are kept on our online service, hosted by our hosting provider, Truehost.
• Email. Our emails are sent and received through Truehost’s email service.

6. Who we share information with

• The school. Lecturers and authorised staff at a school can see the information for their own school and classes. Students can see their own work and released results.
• Service providers who help us run ScriptGrade, only as needed: Truehost (hosting and email) and Cloudflare (website delivery and domain services). If the Student app is offered through the Microsoft Store, Microsoft handles the app download and updates, but not students’ exam or classroom data.
• When the law requires it, for example if a valid legal request is made to us.

We do not share one school’s information with another school.

7. How we protect information

• Passwords and exam PINs are stored only in scrambled (hashed) form.
• The online service uses secure (HTTPS) connections.
• Hidden marking tests stay with the lecturer’s exam server and are not sent to student computers.
• Access to our systems is limited to the ScriptGrade team members who need it.

No system is perfectly secure. If we learn of a security problem that affects your information, we will tell the affected school and take steps to fix it.

8. How long we keep information

We keep a school’s information while the school uses ScriptGrade. When a school stops using ScriptGrade or asks us to delete its information, we delete its online accounts, classes, files, submissions and exam backups. Copies in our backups may remain for a short time until those backups are replaced. Payment records may be kept longer where the law requires.

Information stored on a school’s own computers and network is controlled by the school.

9. Your rights

Under Nigerian data protection law, you can ask to see the information we hold about you, ask us to correct it, ask us to delete it, or object to how it is used.

If you are a student or lecturer, please contact your school first, because the school is in charge of your information. You can also email us and we will work with your school to help. If you are not happy with how we handle your request, you can complain to the Nigeria Data Protection Commission.

10. Changes to this policy

We may update this policy as ScriptGrade changes. We will change the “Last updated” date at the top, and tell schools about important changes.

11. Contact us

For any privacy question or request, email schools@scriptgrade.com. If you can’t find our reply, check your spam or junk folder.