Privacy Policy

This Privacy Policy describes how Neravil ("we," "us," or "our") collects, uses, discloses, and safeguards information when you access or use our website located at neravil.com and any related services, features, or content we offer (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

We collect information you voluntarily provide when you interact with the Service. This may include:

• Full name and display name
• Email address
• Password (stored in encrypted form)
• Profile details such as organization, role, or educational level
• Quiz responses, test results, and assessment submissions
• Messages sent through contact or support forms
• Feedback, survey responses, and user-generated content

When you use the Service, certain technical data is collected automatically, including:

• IP address and approximate geographic location derived from it
• Browser type, version, and operating system
• Device type and screen resolution
• Referring URLs and exit pages
• Pages visited, features used, and time spent on the Service
• Session identifiers and interaction logs
• Cookie identifiers and similar tracking technologies

We may receive information about you from third parties in the following circumstances:

• When you choose to register or log in using a third-party authentication provider (such as a social login service), we receive basic profile data that provider shares
• When institutional or organizational accounts are created on your behalf by an administrator
• From analytics and performance monitoring services that help us understand how the Service is used

We use the information we collect for the following purposes:

We process your personal information on the following legal grounds:

• Contract performance: Processing necessary to provide the Service you have registered for or requested
• Legitimate interests: Processing for purposes such as improving the Service, maintaining security, and preventing abuse, provided such interests are not overridden by your rights
• Consent: Processing based on your explicit consent, such as receiving marketing emails — you may withdraw consent at any time
• Legal obligation: Processing required to comply with applicable laws or respond to lawful requests from public authorities

You can control or disable cookies through your browser settings. Please note that disabling strictly necessary cookies may impair functionality or prevent you from accessing certain parts of the Service. Where consent is required for non-essential cookies, we will request it through an appropriate mechanism on the Service.

We do not sell your personal information. We may share your information in the following limited circumstances:

We engage third-party vendors who assist us in operating the Service. These include providers of hosting infrastructure, email delivery, payment processing, analytics, and customer support tools. Such parties are contractually bound to handle data only as instructed and in accordance with this policy.

If your account was created under an institutional or organizational plan, designated administrators of that institution may have access to information about your activity, results, and progress within the Service for the purpose of educational management and oversight.

We may disclose information when required by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of users, third parties, or the public.

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for research, benchmarking, or promotional purposes.

We retain personal information for as long as is necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

• The duration of your active account or ongoing use of the Service
• Legal, regulatory, or contractual obligations that require us to maintain records
• The need to resolve disputes, enforce agreements, or investigate suspected violations
• Whether data has been anonymized and no longer constitutes personal information

When personal information is no longer required, we delete or anonymize it using secure procedures. Backups may retain data for a limited additional period before permanent deletion.

We implement technical and organizational measures to protect your information against unauthorized access, loss, destruction, or alteration. These measures include:

• Encryption of data in transit using TLS protocols
• Encryption of stored passwords using strong hashing algorithms
• Access controls limiting data access to authorized personnel on a need-to-know basis
• Regular security reviews, vulnerability assessments, and incident response procedures
• Monitoring and logging of access to systems containing personal data

No method of electronic transmission or storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in significant risk to your rights or freedoms, we will notify you in accordance with applicable legal requirements.

Neravil operates as a global platform. Your information may be transferred to, stored, or processed in countries other than the one in which you reside. These countries may have data protection laws that differ from those in your country.

When we transfer personal information internationally, we take appropriate safeguards to ensure the transfer complies with applicable requirements, such as using contractual clauses approved by relevant data protection authorities or relying on adequacy decisions where available.

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

You may request a copy of the personal information we hold about you. In certain cases, you may request that we provide this information in a structured, machine-readable format.

You may request that we correct inaccurate or incomplete personal information. You may also update many details directly through your account settings.

You may request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful. We will honor such requests subject to our legal obligations and legitimate operational requirements.

You may request that we restrict processing of your information in certain circumstances, or object to processing carried out on the basis of our legitimate interests.

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

You may opt out of receiving marketing emails at any time by clicking the unsubscribe link included in those messages or by contacting us directly. Transactional and service-related messages are not subject to opt-out while your account remains active.

To exercise any of the rights described above, please contact us using the details provided in the Contact section of this policy. We will respond within a reasonable time and in accordance with applicable law. We may ask you to verify your identity before fulfilling your request.

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from individuals under 16 without verifiable parental or guardian consent. If we become aware that we have inadvertently collected such information, we will take prompt steps to delete it. If you believe a child under 16 has provided personal information without appropriate consent, please contact us immediately.

The Service may contain links to third-party websites, platforms, or services. These third parties have their own privacy policies, and we are not responsible for their data practices. We encourage you to review the privacy policies of any third-party services you access through links on our platform. The inclusion of a link does not imply our endorsement of that third party's privacy practices.

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending a notice to the email address associated with your account or displaying a prominent notice within the Service.

Your continued use of the Service following the posting of an updated policy constitutes your acknowledgment of and agreement to the revised terms. If you do not agree with the changes, you should discontinue use of the Service and may request deletion of your account.

If you have questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us:

We are committed to resolving complaints and concerns about your privacy and the collection or use of your personal information. We will respond to inquiries within a reasonable timeframe.