PRIVACY POLICY

Last updated October 4, 2026 | Version 2.3

This Privacy Policy describes how American Standard Typing Certificates™ ("Company", "we", "us", or "our") collects, uses and discloses your personal data when you use our website, our testing platform and our services (collectively, the "Service"). It also explains your privacy rights under applicable United States federal and state privacy laws and how the law protects you. By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Important: we do not sell or rent your personal data for monetary consideration. Your data is collected and used to administer and verify your typing assessment, to maintain your account, and for the limited analytics and advertising measurement described in this policy, which may involve sharing limited identifiers with advertising partners.

1. Interpretation and Definitions

Capitalized terms have the meanings defined below and apply whether they appear in singular or plural form.

  • Account: a unique account created for you to access our Service.

  • Company: refers to American Standard Typing Certificates™.

  • Cookies: small files placed on your device by a website, containing browsing history details.

  • Device: any device that can access the Service, such as a computer, mobile phone or tablet.

  • Main Test: a certified typing assessment completed on our platform that consumes a test subscription, is designed to be completed under webcam proctoring and produces a certificate.

  • Personal Data: any information that relates to an identified or identifiable individual, as defined under applicable United States federal and state privacy laws.

  • Practice Test: a practice typing exercise on our platform that involves no webcam capture, produces no certificate and whose results are not saved.

  • Proctoring Images: still images captured by your webcam during a Main Test, with your consent, for assessment integrity purposes.

  • Service: the Website, the testing platform and any related services offered by the Company.

  • Service Provider: any person or entity that processes data on behalf of the Company.

  • Usage Data: data collected automatically, generated by the use of the Service or from Service infrastructure.

  • Website: the American Standard Typing Certificates website, accessible at www.americanstandardtypingcertificates.com.

  • You: the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

2. Personal Data We Collect

Personal Data: When you purchase, register for or use our Service, we collect the following personally identifiable information:

  • Email address

  • First name and last name

Consent Records: When you first sign in to the platform, we record your acceptance of this Privacy Policy and our Terms and Conditions. The consent record includes the version number of each document you accepted and the date and time of acceptance, and forms part of your account data.

Assessment Data: When you complete tests on our platform, we collect and generate your test results and performance data, including words per minute, accuracy, test date and test metadata, together with the text you typed during Main Tests, which appears on the transcript page of your certificate.

Proctoring Images: When you sit a Main Test, up to three still images are captured by your webcam during the session, with your consent requested before each Main Test begins. Where consent is declined or no camera is available, the Main Test proceeds without Proctoring Images and no images are captured or stored for that attempt. The images are captured at the start of the test, at the midpoint and at the end of the test, to record your presence and your completion of the assessment. Proctoring Images are used solely to support assessment integrity. They appear only on the Virtual Proctoring Summary page of your certificate PDF and in internal administrative review, and they are never displayed on the public certificate verification page. We do not use facial recognition, face matching or any other automated analysis on Proctoring Images. When your certificate is ready, we email you a copy of the certificate PDF, including the Virtual Proctoring Summary page, through our email provider. Access to Proctoring Images is restricted to you and authorized administrators through secure, time limited access. If your webcam is unavailable or is interrupted during a Main Test, the test continues, no further images are attempted for that capture point, and any missing image is represented on the proctoring summary by a placeholder noting that the webcam snapshot was unavailable at that capture point. Practice Tests involve no webcam capture of any kind.

Passwordless sign in: Our platform uses secure magic link sign in delivered to your email address. We do not create or store passwords for your account.

Note regarding payment information: payment transactions are processed directly by our third party payment processors. These processors may collect additional information such as billing address and phone number as required for payment processing. We do not store payment card details, billing addresses or phone numbers in our own systems. Please refer to the privacy policies of the payment processors identified at checkout for information on how they handle your payment data.

We do not collect sensitive personal information such as government issued identification numbers, Social Security numbers or health information.

Usage Data: Usage Data is collected automatically when you use the Service. It may include your device's IP address, browser type and version, pages visited, time and date of your visit, time spent on pages and other diagnostic data.

Tracking Technologies and Cookies: We use cookies and similar technologies to monitor activity on our Service and store certain information:

  • Necessary and Essential Cookies: essential to provide the core functionality of the Website and platform, including secure sign in sessions.

  • Functionality Cookies: allow us to remember choices you make, such as display preferences.

  • Analytics and Advertising Cookies: used by third party services such as Google Analytics and the Meta Pixel to understand how visitors use our Website and to measure and improve the effectiveness of our advertising. These cookies may collect information about your visit and, in the case of the Meta Pixel, may share hashed identifiers with Meta Platforms, Inc. to help us reach relevant audiences. You can opt out of personalized advertising through your Meta account settings and via your browser or device controls.

Our testing platform and certificate verification pages use only the cookies and similar browser storage needed to run them, such as keeping you signed in and secure. They do not use analytics or advertising cookies, which are used on our Website only.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. Refusing cookies may affect your ability to use some parts of our Service.

3. How We Use Your Personal Data

  • To provide and maintain our Service, including monitoring usage for performance and security purposes.

  • To manage your Account and provide access to features available to registered users, including secure sign in links sent to your email and the recording of your acceptance of our legal documents at first sign in.

  • To deliver the contracted service: processing your typing tests, capturing Proctoring Images during Main Tests where you have consented, generating your three page certificate and enabling certificate verification by third parties you share your certificate with.

  • To maintain assessment integrity: authorized administrators may review the Proctoring Images associated with a test attempt solely for assessment integrity purposes. This access forms part of an internal administrative review record.

  • To contact you by email regarding service updates, security notices or information directly related to your contracted services.

  • To manage requests you submit to us, including support and data access requests.

Automated Scoring: Your Main Test results, including words per minute and accuracy, are calculated automatically by our platform from the text you type, and your certificate is generated automatically from those results. Integrity reviews of Proctoring Images are carried out by authorized administrators.

We explicitly confirm that we do not sell your Personal Data for monetary consideration. We use third party advertising and analytics tools, including the Meta Pixel, to measure website performance and to promote our Service to relevant audiences. This may involve sharing hashed identifiers with these providers and may constitute sharing for cross context behavioral advertising as defined under the CCPA and CPRA. You have the right to opt out of this sharing, as described in the California section of your privacy rights below. Aside from this limited advertising and analytics activity, your Personal Data is used solely for administering and verifying your typing assessments and managing your account.

4. Third Party Service Providers

Purchases are made through our regional online store, with payment processed by the regional payment processors identified at checkout. We engage the following third party service providers who may process personal data on our behalf in order to deliver our Service. Each operates under its own privacy policy:

We engage these providers only to the extent necessary to deliver and promote our Service. Our hosting, storage, certificate generation and email providers process personal data only on our instructions. Payment processors and analytics and advertising providers may also handle data for their own purposes under their own privacy policies, linked above.

5. International Transfer and Storage of Your Personal Data

Your Personal Data, including your assessment records and Proctoring Images, is stored on secure infrastructure located in Sydney, Australia, and your certificates are generated on a server in Sydney. In addition, some of our service providers operate internationally and may process personal data in other jurisdictions, including the United States.

Where personal data is transferred outside the United States, we take steps to ensure it receives a comparable level of protection to that required under applicable United States federal and state privacy laws, including through contractual arrangements with our service providers. This section is our notice to you that your personal data is stored in Australia and may be processed in the other countries described above. Personal data processed in another jurisdiction may be subject to lawful access requests by authorities in that jurisdiction.

United States. There is no single federal law prescribing a transfer mechanism for personal data sent outside the United States. We rely on contractual arrangements with our service providers, including confidentiality and security obligations, to protect your personal data wherever it is processed.

6. Retention of Your Personal Data

We retain different categories of data for different periods, based on the purpose for which they were collected:

  • Test results and performance data, including words per minute, accuracy, date, test metadata and typed transcripts: retained for 5 years from the date of test completion.

  • Proctoring Images: automatically deleted 12 months after the date each image was captured. The copy of each image shown on the Virtual Proctoring Summary page of your certificate PDF is kept with that PDF for as long as the PDF is retained.

  • Certificate PDFs: retained with your test results for 5 years from the date of test completion.

  • Certificate verification records, comprising name, scores, test date, test type, certificate ID and snapshot proctoring status: retained while your account remains active so that issued certificates can be verified by third parties such as employers.

  • First login consent records: retained while your account remains active.

  • Account and registration data: retained for 5 years following the date of last account activity.

  • Usage Data: retained for 12 months.

Upon expiry of the applicable retention period, data is permanently deleted from our systems. Where you request deletion of your account, we will action a full deletion within 30 days. This deletion is total. It permanently removes all of your account data, attempt history, results, transcripts, certificate files and stored PDFs, Proctoring Images and the certificate verification record. Once the deletion is processed, the verification link for any certificate previously issued to you will return a not found response. We do not retain a minimum record to preserve the validity of an issued certificate. The only information we may retain is information we are specifically required to keep by law, and we will inform you of any such requirement at the time of your request. Residual copies of deleted data may remain in our secure backups for a limited period until they are overwritten in the normal backup cycle.

7. Disclosure of Your Personal Data

Certificate Verification: When you share your certificate with a third party, that party may use the QR code or verification link on the certificate to view your public verification record, comprising your name, scores, test date, test type, certificate ID and snapshot proctoring status, which shows how many webcam snapshots were captured. The verification page is accessible to anyone who holds the verification link or scans the QR code, so this disclosure occurs through the verification mechanism you choose to share. Proctoring Images are never displayed on the public verification page.

Business Transactions: If the Company is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different privacy policy. Any successor entity will be required to honor the terms of this Privacy Policy or obtain fresh consent from affected individuals.

Legal Requirements: We may disclose your Personal Data if required to do so by law or in response to valid requests by public authorities. We may also disclose Personal Data in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users of the Service or the public, or protect against legal liability.

8. Security of Your Personal Data

We implement appropriate technical and organizational security measures to protect your Personal Data from misuse, interference, loss and unauthorized access, modification or disclosure. These measures include HTTPS and TLS encryption for all data in transit, encryption at rest for stored personal data and assessment records, role based access controls limiting data access to authorized personnel only, secure and reputable cloud hosting infrastructure, and regular monitoring and review of our security practices.

No method of transmission over the internet or method of electronic storage is completely secure. While we implement commercially appropriate measures to protect your Personal Data, we cannot guarantee absolute security.

9. Age Restriction

Our Service is intended for individuals who are 18 years of age or older. We do not knowingly collect Personal Data from anyone under the age of 18. By using our Service, you represent that you are at least 18 years of age. If we become aware that we have inadvertently collected Personal Data from a person under 18, we will take steps to delete that information as promptly as possible.

10. Your Privacy Rights

Under applicable United States federal and state privacy laws, and depending on your circumstances, you may have the following rights regarding your Personal Data. To exercise any of these rights, contact us using the details in the final section of this policy.

  • Right to Access: you may request a copy of the Personal Data we hold about you.

  • Right to Correction: you may request that inaccurate or incomplete Personal Data be corrected.

  • Right to Deletion: you may request that we delete your Personal Data. We will action a full and total deletion, including the certificate verification record, after which the verification link for any certificate issued to you will return a not found response. We will only retain information where specifically required by law.

  • Right to Withdraw Consent: you may withdraw consent to the collection, use or disclosure of your Personal Data at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide the Service to you. You may decline webcam consent before any Main Test without affecting your ability to sit it. Declining does not remove Proctoring Images already captured, which are deleted on the schedule in the Retention section or as part of a full account deletion.

  • Right to Object or Restrict: you may object to or request restriction of the processing of your Personal Data in certain circumstances.

California Residents, CCPA and CPRA Rights. If you are a California resident, you have the following additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act.

  • Right to Know: you have the right to know what Personal Data we collect about you, the purposes for which it is used, and whether it is disclosed to third parties.

  • Right to Delete: you have the right to request deletion of your Personal Data that we have collected, subject to certain exceptions.

  • Right to Correct: you have the right to request correction of inaccurate Personal Data.

  • Right to Opt Out of Sale or Sharing: you have the right to opt out of the sale or sharing of your Personal Data. We do not sell your Personal Data for monetary consideration. However, our use of advertising tools such as the Meta Pixel may constitute sharing for cross context behavioral advertising under the CCPA and CPRA. To opt out, you may adjust your browser and device controls, use your Meta account ad preferences, or contact us at the email address in the Contact Us section and we will action your request.

  • Right to Non Discrimination: we will not discriminate against you for exercising your CCPA rights. Exercising your rights will not result in denial of services, different pricing or a reduced quality of service.

  • Right to Limit Use of Sensitive Personal Information: to the extent we collect any sensitive personal information, you have the right to limit its use to what is necessary to provide our Service.

California residents may submit requests to exercise these rights by contacting us at the email address in the Contact Us section. We will respond to verifiable consumer requests within 45 days.

Other US State Residents. If you are a resident of Virginia, Colorado, Connecticut, Texas or another US state with applicable privacy legislation, you may have rights similar to those described above. Please contact us to exercise your rights and we will respond in accordance with applicable law.

11. Do Not Track Signals

Our Service does not currently respond to Do Not Track signals. As there is no industry wide standard for these signals, we will continue to monitor developments and update this policy accordingly.

12. Links to Other Websites

Our Service may contain links to websites not operated by us. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites. We encourage you to review the privacy policy of every website you visit.

13. Changes to This Privacy Policy

This Privacy Policy is version controlled. Each published version carries a version number, shown at the top of this page, and the same version is published on our website and presented on our platform. Your acceptance of the current version is recorded when you first sign in to the platform. We may update this Privacy Policy from time to time. When we make material changes, we will update the Last Updated date and the version number at the top of this page, and you will be asked to review and accept the updated version when you next sign in to the platform. Your continued use of the Service following the posting of non material changes constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or wish to make a complaint about our data handling practices, please contact us:

We will endeavor to respond to all privacy related requests within 30 days of receipt, and to verifiable California consumer requests within 45 days. Depending on the state you live in, you may also have the right to make a complaint to your state Attorney General. California residents may contact the California Attorney General.