Privacy Policy and Terms of Service

1. Data We Collect
2. Purposes of Data Use
3. Data Protection
4. Sharing Data with Third Parties
5. Payment System and Balance
6. Telegram Integration
7. Cookies
8. User Rights
9. Terms of Service and Rules
10. Documents (files uploaded by creators)
11. Exam Platforms and Restrictions
12. Group quiz (Kahoot-style)
13. CEFR exams
14. IELTS exams
15. Live Speaking video room (WebRTC)
16. Minors
17. Changes to the Policy
18. Contact Information

Information you provide directly:

• Account information: first name, last name, username, email, phone number, password (stored in encrypted form)
• Profile information: profile picture, bio/about, Telegram ID
• Educational data: exam answers, test results, course progress, certificates
• Survey responses: survey and questionnaire responses, uploaded files
• CEFR and IELTS data: answers for all 4 skills (Listening, Reading, Writing, Speaking); Writing — full text; Speaking (async mode) — uploaded audio recording; IELTS band (0–9) and CEFR level (A1–C2) results
• Proctoring data: in exams with proctoring enabled — webcam snapshots (every 5 minutes), fullscreen exit events, and detected face count
• Payment information: payment amount, payment method, transaction status (card numbers are not stored on the platform)

Automatically collected data:

• Technical data: IP address, browser type and version, operating system, device type
• Usage data: page visits, login time, session duration
• Cookies: session identifiers, language preferences, authentication tokens

Data obtained through third parties:

• Google OAuth2: name, email, and profile picture when signing in with a Google account
• Telegram: user ID, name, and username via the Telegram bot

• Service delivery: creating your account, providing exams and courses, calculating results
• Payment operations: managing balance, processing payments, maintaining transaction history
• Security: protecting accounts from unauthorized access, API rate limiting, detecting suspicious activity
• Communication: important notifications, password recovery, payment notifications (via SMS and email)
• Certification: generating certificates based on exam results (name, score, and date are displayed)
• Analytics: improving platform performance, fixing errors, usage statistics

• Encryption: all data is transmitted via SSL/TLS (HTTPS) protocol. Passwords are stored using a one-way hashing algorithm
• Authentication: token-based API authentication, automatic 30-day expiration, sessions expire after 12 hours
• API protection: rate limiting (anonymous 30/min, user 60/min, authentication 5/min), CSRF protection, CORS configuration
• Database: payment operations are protected with atomic transactions (preventing data loss)
• Access control: data access is restricted through a role-based system. Regular users can only view their own data
• Card information: payment card numbers are not stored on the platform. Payments are processed through the Atmos payment system

Your data may be shared with third parties in the following cases:

• Payment providers: necessary data is sent to the Atmos payment system to process payments (amount, account identifier). Card details are sent directly to Atmos servers
• Google: Google OAuth2 service is used for authentication when signing in with a Google account
• Telegram: when using the bot, messages are sent via the Telegram API
• AI services: source text is sent to Google Gemini API for AI question generation (personal data is not sent)
• Legal requirement: to government authorities as required by law

Balance Types

The platform has two types of balance:

Payment Operations

• Payments are processed through the Atmos payment gateway. Card numbers are not stored on the platform
• Each payment is verified via SMS OTP (one-time code)
• All transactions are saved in the payment history and displayed to the user
• New users receive a one-time welcome bonus upon registration (added to bonus balance)

Transfer Exam Earnings

Paid exam creators can transfer earnings from the exam balance to their account. Two types of transfers are available:

Note: Funds transferred to bonus balance cannot be withdrawn to a card. Funds transferred to main balance can be withdrawn.

Withdrawal

• Only main balance can be withdrawn (not bonus balance)
• A 5% tax is deducted on withdrawals
• Example: withdrawing 100,000 UZS — 5,000 UZS tax, 95,000 UZS goes to your card
• Withdrawal requests are reviewed by an administrator and transferred to the card after approval
• When a request is submitted, funds are held from the balance. If rejected, funds are returned to the balance

Tax rates

Pricing

• Service prices are published on the platform and may change without prior notice
• Price changes do not affect already completed transactions
• Paid exam prices are set by the exam creator
• Tax rates are subject to change. Current rates are displayed in the API and platform interface

Payment data security

• Card numbers, expiry dates, and CVV codes are not stored on the platform
• Payment details are sent directly to the Atmos payment provider servers
• The platform only stores transaction ID, amount, and status information

• When using the Telegram bot, your Telegram user ID, name, and username are stored
• Messages and responses sent via the bot are transmitted through the Telegram API and are also stored on Telegram servers
• Linking your Telegram account to the platform is optional. You can unlink it at any time
• When making payments via Telegram Mini App, the same security measures as on the website are applied
• Only platform administrators have access to Telegram bot data

The platform does not use advertising or tracking cookies. You can manage cookies through your browser settings.

• View: you can view your personal data on the profile page
• Edit: you can change your name, email, phone, and other data at any time
• Results: you can view your full exam results and payment history
• Disconnect: you can disconnect your Google and Telegram accounts at any time
• Delete account: you can request to permanently delete your account. After deletion, all personal data will be irreversibly removed

Reset password

If you forgot your password or signed in via Google/Telegram without setting a password, you can receive a new one:

• Telegram: If your Telegram account is linked, a new password will be sent via the Telegram bot
• Email: If your account has an email, a new password will be sent via email (from info@oson-test.uz)

A new random password is generated. We recommend changing it after logging in.

Usage rules:

• Use the platform only for lawful purposes
• Do not share your account credentials with others
• Do not attempt to cheat or provide false answers during exams
• Respect the rights of other users
• Do not post content that violates intellectual property rights

Prohibited actions:

• Registering with false information
• Unauthorized use of others' accounts
• Uploading malware or conducting hacking attacks on the platform
• Distributing spam, malicious links, or prohibited content
• Attempting to disrupt the platform's technical systems
• Collecting data using automated tools (bots, scrapers)

Limitation of liability:

• The platform is provided on an 'as is' basis. Uninterrupted operation is not guaranteed
• The platform is not liable for damages caused by technical failures
• The content owner is responsible for user-generated content

The Documents section allows creators to sell their files (PDFs, documents, presentations, spreadsheets, etc.) to those in need. For each document, the creator uploads a cover image, title, description, a free preview file, and the full file. Users receive the full file after making a payment.

Document owner:

• The sole owner and author of every uploaded document is the creator who uploaded it. The platform has no proprietary or copyright rights to the document.
• The creator grants the platform a non-exclusive, royalty-free, worldwide limited license to store, display, sell, and deliver the document — this license automatically terminates when the document is deleted or the creator's account is closed.
• The platform has no right to use the document as its own product or marketing, resell it, or transfer it to third parties — it only provides technical service consisting of formalizing the sale and delivery to the buyer.

Creator's full responsibility:

• Only the creator is responsible for the document content, accuracy, legality, quality, and compliance with copyright.
• The creator guarantees that they have all necessary rights, permissions, and licenses for the uploaded document and that it does not infringe on the rights of third parties.
• Uploading files containing another person's copyright, trademark, patent, personal or confidential information, state secret, or trade secret is strictly prohibited.
• Uploading illegal, violent, discriminatory, pornographic, extremist, malware, or fraudulent content is prohibited.
• The document size must not exceed 50 MB and must be in one of the approved formats (PDF, DOC(X), PPT(X), XLS(X), TXT, RTF, ODT/ODS/ODP, EPUB, ZIP/RAR/7Z).
• The free preview must give the user an honest understanding of the document and be substantially consistent with the full version — misleading or fraudulent preview is prohibited.
• The purchased document must match the result and quality described; otherwise the creator is personally responsible to the customer.

Platform's role and responsibility limits:

• Oson Test platform is not a publisher, seller, or author — from the perspective of the sales contract between the creator and the buyer, it is only a technical intermediary (storage, payment, delivery).
• The platform does not pre-check, edit, or guarantee the document content. It is the user's responsibility to carefully review the free preview file and description before purchasing.
• The platform makes no warranty for the accuracy, usefulness, or appropriateness of the information behind the document.

Complaints and content removal (takedown):

• Complaints about copyright or legal violations can be sent through the contact section. Upon receipt of a valid complaint, the platform has the right to temporarily or permanently remove the document.
• Upon legal violation or request from law enforcement, the platform may submit relevant information about the document, creator, and buyer to authorized authorities.
• In case of repeated or serious violations, the creator's account may be blocked without warning and funds in the document balance may be frozen until the review is completed.

Indemnification:

The creator bears full responsibility for all claims, legal costs, penalties, and damages brought against the platform, its employees, partners, or third parties as a result of the uploaded document. The platform retains the right to file a regress (recovery) claim against the creator for such claims.

Financial terms:

• User payment is credited to the creator's document balance.
• A 20% commission is deducted on transfers to main balance, 10% on transfers to bonus balance (same rates as exams).
• A 5% tax is deducted on withdrawals to card.
• For free documents, no payment is made, but distribution, storage, and liability conditions remain.

The ability to take exams on different platforms depends on the exam's settings. The table below lists the platforms available in each case:

Proctoring (Monitoring Mode)

• Fullscreen mode: the user must stay in fullscreen mode throughout the exam. Leaving fullscreen automatically ends the exam with a score of 0
• Camera monitoring: the user's face is captured via camera every 5 minutes
• When proctoring is enabled, the exam can only be taken through the website. Telegram bot and group quiz are automatically disabled
• Taking the exam individually in the mobile app depends on the creator's settings

Paid Exams

• Paid exams can be taken individually via the website, Telegram bot and mobile app (subject to the creator's settings)
• Group play (Kahoot-style) is not available for paid exams
• The exam fee is deducted from the user's balance before the exam starts

Group play (Kahoot-style)

• Group play is only available for free exams with proctoring disabled
• Only 'single correct answer' (select_one) questions are used in group play
• Participants join the game through a 6-digit PIN code
• Extra questions are not asked in group play

Group quiz is a live game where all participants answer questions in real time at once. It runs on the website and in Telegram group chats.

How it works

1. The host creates a group quiz session from the exam
2. Participants join through a 6-digit PIN code
3. The host presses the 'Start' button
4. Each question is shown with a timer (5–120 seconds)
5. The faster the correct answer, the higher the score
6. A leaderboard is shown after each question
7. Final results are shown at the end

Who can create

Any registered user can create a group quiz from any active exam. The following restrictions apply:

• ✗ Group quiz cannot be created for exams with proctoring (fullscreen or camera) enabled
• ✗ Group quiz cannot be created for paid exams
• Only 'single correct answer' (select_one) questions are used. Other question types are skipped automatically

Game types (quiz type)

The game can run in two modes in a Telegram group chat:

Score calculation

Game states (State Machine)

Sequence: WAITING → ACTIVE → BETWEEN → ACTIVE → ... → FINISHED

How to participate

Data and privacy

• Group quiz results show only the participant's display name, total score and answer count
• When participating via Telegram, the user's Telegram name is used
• After the group quiz session ends, results are saved, but personal information (phone, email) is not shown to other participants
• The PIN code is valid for one session only and is not reused after the session ends

CEFR exams determine your level on the Council of Europe's language proficiency scale (A1 — C2) and consist of 4 skills: Listening, Reading, Writing, Speaking.

What data we store

• Answers submitted for each skill and the resulting percentage
• Your Writing essay is stored in full text form
• The audio recording you upload in the Speaking section is stored as a file
• The final CEFR level (A1, A2, B1, B2, C1 or C2) and the attempt timestamp

Who can see it

• You: your own result, per-skill score, list of your answers
• The exam creator: all participant answers submitted to their exam (including Writing text and Speaking audio) — needed for manual grading
• Administrators: for troubleshooting and investigating policy violations

IELTS exams consist of Listening, Reading, Writing and Speaking skills; results are reported on the band scale (0–9, in 0.5 increments). Both Academic and General Training types are supported.

What data we store

• Listening and Reading: selected options and text answers submitted per question
• Writing (Task 1 and Task 2): your text is stored in full and graded by a human (grader)
• Speaking (async mode): the audio recording you upload is stored as a file on the server (in the ielts/audio/ folder)
• Speaking (scheduled mode): the booked time and a live video call with the grader (the exam creator) — described in detail in the next section
• Band results: a 0–9 band per skill and an overall band (the average of the 4 skills, rounded to 0.5)

Proctoring (for IELTS)

• If the exam creator has enabled camera monitoring, a webcam snapshot is captured every minute and the system automatically checks for faces
• Snapshots and violation events (no face detected, or multiple faces detected) are stored and visible to the exam creator and administrators
• IELTS proctor snapshots are stored on the server in a separate folder (ielts/proctor_snapshots/) organized by date
• If fullscreen is required, the attempt is terminated automatically when you exit fullscreen

Human grading

• Writing and Speaking skills are graded by a human (usually the exam creator or a grader they have assigned)
• The final overall band is released only after Writing and Speaking have been graded
• The grader reads your full essay and listens to your audio recording. Their comments may appear on the result page

The scheduled IELTS Speaking mode connects you with the exam creator (grader) at the agreed time through a live video call. The call runs in your browser using WebRTC technology.

How it works — technical notes

• The video and audio stream is sent directly between your browser and the grader's browser (peer-to-peer). The server does not record or store these streams
• To establish the peer-to-peer connection, technical signaling messages (SDP, ICE candidates) are exchanged through a server-side cache — these messages are automatically deleted within 1 hour
• The call room opens 5 minutes before the scheduled start and closes 10 minutes after the scheduled end
• The platform does not yet run its own TURN server. Calls may fail for users behind restrictive NATs

What you share

• The video and audio stream from your camera and microphone — the grader sees and hears you. Access to the camera is only possible with explicit browser permission
• Text messages you send in the video room's chat panel — messages are kept in the server cache for 1 hour and then automatically deleted
• The call duration (the booked slot) and the call status (whether it took place or not)

Recording

• The platform does not automatically record the call or store it on the server
• The grader may record the call at their discretion — but must notify you in advance

The platform may not be used by persons under 14 years of age. Users aged 14-18 may use the platform with parental or legal guardian consent.

If we discover that we have collected data from a person under 14, such data will be immediately deleted.

We reserve the right to modify this privacy policy at any time. Significant changes will be announced on the platform.

Continued use of the platform after changes constitutes acceptance of the updated terms.