ExamNet LLC

Version R2026.1.0 | Effective Date: January 1, 2026

Applies to: examnet.com | app.examnet.com

By clicking “I Agree,” creating an account, or otherwise accessing or using the ExamNet services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, do not use the services.

This Privacy Policy is incorporated by reference into the ExamNet Master Subscription & License Agreement (MSLA). In the event of a conflict between this Policy and the MSLA or its Data Processing Addendum (Exhibit E), the MSLA/DPA controls.

1. Introduction

ExamNet LLC (“ExamNet,” “we,” “our,” or “us”) is an Illinois limited liability company headquartered in Joliet, Illinois. We operate the websites https://examnet.com and https://app.examnet.com (collectively, the “Services”).

This Privacy Policy describes how we collect, use, disclose, and protect personal and business information in connection with the Services. It applies to:

• Authorized Users who access the Services on behalf of a Customer organization;

• Visitors to our public-facing websites; and

• Prospective customers and other individuals who communicate with us.

This Policy does not apply to information processed solely within a Customer’s own on-premises (“On-Prem”) environment, where the Customer acts as the sole controller. For On-Prem deployments, ExamNet’s obligations are governed by the applicable Order Form and Exhibit F of the MSLA.

2. Roles and Responsibilities

ExamNet operates in different privacy roles depending on the context:

• Data Controller: ExamNet acts as a controller for information it collects directly, such as account registration data, website usage analytics, and marketing communications.

• Data Processor: ExamNet acts as a processor when handling Customer Data on behalf of the Customer organization. In this role, ExamNet processes data only per documented Customer instructions, consistent with the Data Processing Addendum (Exhibit E of the MSLA).

3. Information We Collect

We collect the following categories of information:

3.1 Account Information

Information provided at registration or during account management, including name, company name, facility details, job title, email address, phone number, and login credentials (stored in hashed form).

3.2 Customer Data

Data, records, files, and operational content that Customers and their Authorized Users submit to, store in, or generate within the Services — including facility records, grain measurement data, bin configurations, inventory entries, and audit logs. Customer retains all right, title, and interest in Customer Data. ExamNet does not use Customer Data for any purpose other than providing, maintaining, securing, and improving the Services, as set out in Section 8.2 of the MSLA.

3.3 Usage Data

Automatically collected information about how you interact with the Services, including login timestamps, feature interactions, application events, session duration, and error logs. Usage Data is aggregated and de-identified before use for product analytics or benchmarking. No Usage Data shared externally will identify a Customer or individual, consistent with Section 8.3 of the MSLA.

3.4 Technical Data

Device type, operating system, browser type and version, IP address, referring URLs, and diagnostic information collected automatically when you access the Services or our websites.

3.5 Communications

Emails, support tickets, chat messages, and other correspondence submitted to ExamNet (e.g., via support@examnet.com), including the contents of those communications.

3.6 Feedback

Suggestions, feature requests, or evaluations you voluntarily submit. Per Section 8.4 of the MSLA, ExamNet receives a perpetual, royalty-free license to use feedback for product improvement. We will not publicly attribute feedback to you without your consent.

4. How We Use Information

ExamNet uses collected information for the following purposes:

• Service Delivery: To provision, operate, maintain, and support the Services as contracted.

• Account Management: To create and manage user accounts, authenticate access, and communicate service-related notices.

• Support: To respond to technical support requests and resolve incidents.

• Product Improvement: To analyze aggregated Usage Data, identify bugs, improve performance, and develop new features.

• Security: To detect, investigate, and prevent unauthorized access, fraud, and other harmful activity.

• Legal Compliance: To comply with applicable laws, respond to lawful government requests, enforce agreements, and protect rights.

• Marketing Communications: To send product updates, newsletters, and promotional content where you have provided consent or where permitted by applicable law. You may opt out at any time (see Section 9).

Lawful Basis for Processing (GDPR/UK GDPR): Where these laws apply, ExamNet relies on contractual necessity, legitimate interests, consent, and legal obligation as applicable lawful bases.

5. Data Storage, Infrastructure, and Security

ExamNet hosts SaaS Services on Microsoft Azure, utilizing geo-redundant dual data centers for resilience and disaster recovery. Safeguards maintained include:

• Encryption in transit using TLS 1.2 or higher;

• Encryption at rest using AES-256;

• Multi-factor authentication (MFA) enforced for administrative access;

• DDoS protection and network security group controls;

• Role-based access controls and least-privilege principles;

• Audit logging and monitoring; and

• Regular backups with automated retention policies.

Microsoft Azure maintains SOC 2 Type II, ISO 27001, and GDPR adequacy certifications. ExamNet restricts internal access to Customer Data to authorized personnel with a documented need, bound by confidentiality obligations.

Security Incident Notification: In the event of a confirmed security incident involving unauthorized access to Customer Data, ExamNet will notify the affected Customer without undue delay, consistent with MSLA Section 10.2 and the DPA (Exhibit E).

6. Data Sharing and Subprocessors

ExamNet does not sell or rent personal data or Customer Data to third parties.

6.1 Subprocessors

ExamNet engages trusted subprocessors for hosting, email delivery, billing, and authentication, bound by written data protection obligations consistent with the DPA. Current subprocessors:

• Microsoft Azure — Cloud hosting, storage, networking, and identity services

• Azure Communication Services — Transactional email delivery

• Stripe — Billing and payment processing

ExamNet maintains a current subprocessor list and provides notice of material changes via email or website posting. Customers may object on reasonable data-protection grounds within 30 days (per Exhibit E, Section 4 of the MSLA).

6.2 Legal Requirements

We may disclose information if required by law or governmental authority, provided we give prior notice where legally permissible and cooperate in seeking protective treatment (MSLA Section 13.4).

6.3 Business Transfers

In connection with a merger, acquisition, or asset sale, Customer Data may be transferred as part of that transaction. We will provide notice and, where required, obtain consent before Customer Data is subject to a materially different privacy policy.

6.4 With Your Direction

We may share information with third parties at a Customer’s direction, such as for API integrations or third-party data feeds on Premium or Enterprise plans.

7. Data Retention and Deletion

Customer Data is retained for the duration of the active Subscription Term. Upon termination or expiration:

• Customers may request an export of Customer Data within 30 days of termination (MSLA Section 8.5);

• After the 30-day export window, ExamNet will delete or de-identify Customer Data unless legally required to retain it; and

• Backup copies are removed within the same timeframe per Azure retention policies.

Account Information and communications data is retained as long as necessary to fulfill the purposes in this Policy, or as required by law.

8. Individual and Customer Rights

Depending on your jurisdiction, you or the Customer organization you represent may have rights to: access, correct, delete, port, restrict, or object to processing of personal data, and to withdraw consent where processing is consent-based.

For Authorized Users: Requests relating to personal data within Customer Data should generally be directed to the Customer organization (as data controller). ExamNet will assist Customers as reasonably feasible, consistent with Exhibit E, Section 3(d) of the MSLA.

To exercise rights directly against ExamNet, submit a verified request to:

privacy@examnet.com | ExamNet LLC, Joliet, Illinois, USA

We will respond within 30 days (or the applicable statutory period) and may require identity verification.

9. Marketing Communications and Opt-Out

With your consent or where otherwise permitted, we may send product updates and promotional emails. Each marketing email includes an unsubscribe link, or you may opt out by emailing support@examnet.com.

Opting out will not affect transactional communications (billing notices, security alerts, maintenance notifications), which are necessary for the Services.

10. Cookies and Tracking Technologies

ExamNet uses only essential session cookies within the application platform to maintain secure authentication and session state. These cookies are strictly necessary for operation and are not used for advertising or behavioral tracking.

We do not use third-party analytics cookies, advertising pixels, or fingerprinting technologies. Our public-facing website (examnet.com) may use minimal analytics tooling, disclosed in a cookie notice on that site.

11. International Data Transfers

Customer Data may be processed in Microsoft Azure data centers across multiple geographic regions. For transfers from the EEA, UK, or Switzerland to countries without an adequacy decision, ExamNet relies on Standard Contractual Clauses (SCCs) or other valid transfer mechanisms (DPA Exhibit E, Section 5 of the MSLA).

12. On-Premises and Customer-Hosted Deployments

For Enterprise Prem-Host customers, the Customer is solely responsible for security, availability, backup, and compliance of their hosting environment (MSLA Exhibit F, Sections 2.2 and 6). ExamNet does not access Customer Data in on-premises environments unless expressly provided access for support. This Policy applies only to information ExamNet collects directly.

13. Children’s Privacy

The Services are for professional and business use by individuals aged 18 or older. ExamNet does not knowingly collect personal data from children under 18. If we become aware of such collection, we will delete it promptly. Contact privacy@examnet.com if you believe a child has submitted personal data.

14. Third-Party Links and Integrations

The Services or our websites may link to external resources or enable third-party integrations (e.g., via API access on Premium/Enterprise plans). ExamNet is not responsible for the privacy practices of these third parties. We encourage you to review their policies independently.

15. California Privacy Rights (CCPA / CPRA)

California residents have additional rights under the CCPA as amended by the CPRA:

• Right to Know: Categories and specific pieces of personal information collected, used, disclosed, or sold.

• Right to Delete: Request deletion of personal information, subject to exceptions.

• Right to Correct: Request correction of inaccurate personal information.

• Right to Opt Out: ExamNet does not sell or share personal information for cross-context behavioral advertising.

• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

Submit CCPA/CPRA requests to privacy@examnet.com. We will respond within 45 days, extendable by 45 days with notice.

16. Updates to This Privacy Policy

We may update this Policy periodically. We will provide notice of material changes by:

• Posting the updated Policy at https://examnet.com/privacy with a revised effective date;

• Sending an email notification to the account holder’s registered email address; and/or

• Presenting an in-application notice or updated click-through agreement upon next login.

Continued use of the Services after the effective date of a revised Policy constitutes acceptance. Material changes to data processing practices will follow the notice procedures in Sections 22 (Notices) and 24 (Entire Agreement) of the MSLA.

17. Contact Information

For privacy inquiries, data subject requests, or questions about this Policy:

ExamNet LLC — Privacy Contact

Privacy inquiries and general support: support@examnet.com

Website: https://examnet.com/privacy

Address: ExamNet LLC, Joliet, Illinois, USA