Privacy Policy

Every OneCoreHive product is developed according to the following principles:

Privacy by Design

Privacy requirements are integrated into every stage of product design, development and maintenance.

Data Minimization

We collect only the information necessary to deliver the requested functionality. We never collect data simply because it may become useful in the future.

Transparency

Users should always understand:

• what information is collected;
• why it is collected;
• how long it is retained;
• who can access it;
• how it is protected.

User Control

Organizations remain in control of their own data. Whenever technically possible, customers choose:

• what to store;
• where to store it;
• when to delete it;
• whether cloud synchronization is enabled.

Security by Design

Privacy cannot exist without security. All OneCoreHive systems are developed following secure development practices intended to reduce risks throughout the software lifecycle.

Depending on the product being used, OneCoreHive may process the following categories of information:

Account Information

Examples include:

• name;
• email address;
• organization name;
• authentication credentials.

Organization Information

Where applicable:

• organization name;
• administrator information;
• licensing details;
• subscription information.

Assessment Data

For products such as TestScan, organizations may process:

• assessment templates;
• answer sheets;
• scoring information;
• assessment metadata.

Assessment content remains under the control of the organization.

Technical Information

Limited technical information may be processed to improve security and compatibility, including:

• operating system;
• application version;
• device type;
• crash diagnostics (where enabled).

OneCoreHive does not intentionally collect:

• contact lists;
• SMS messages;
• personal photographs unrelated to product functionality;
• advertising identifiers for profiling;
• precise location data unless explicitly required by a specific feature;
• financial information outside authorized payment providers.

We do not sell personal data. We do not build advertising profiles. We do not monetize customer information.

Some OneCoreHive applications require access to the device camera.

For example, TestScan uses the camera exclusively to scan assessment sheets. Camera images are processed only for the intended functionality.

OneCoreHive does not use camera access for facial recognition, surveillance or behavioral profiling.

Whenever technically feasible, processing occurs directly on the user's device. Benefits include:

• improved privacy;
• reduced network dependency;
• faster response times;
• greater organizational control.

This Offline-First approach is a core architectural principle of OneCoreHive.

Certain features may optionally use cloud infrastructure. Cloud functionality may include:

• account synchronization;
• encrypted backups;
• license validation;
• optional collaboration features.

Organizations remain responsible for determining whether cloud services are appropriate for their environment.

Some OneCoreHive products include AI-assisted capabilities. Artificial Intelligence is designed to:

• assist users;
• improve efficiency;
• automate repetitive operations;
• increase recognition accuracy.

AI is not intended to replace human judgment. Final decisions remain the responsibility of the user or organization.

Information is retained only for as long as necessary to:

• provide the requested service;
• comply with legal obligations;
• maintain security;
• support legitimate operational requirements.

Retention periods vary depending on:

• product;
• deployment model;
• organizational configuration;
• applicable legislation.

When information is stored exclusively on a customer-controlled device and has not been synchronized with OneCoreHive services, OneCoreHive cannot:

• recover deleted information;
• restore damaged devices;
• access locally stored assessment data.

Organizations are responsible for implementing appropriate backup procedures and device protection measures.

Where personal information is processed across different jurisdictions, OneCoreHive implements appropriate safeguards consistent with applicable privacy legislation.

Depending on applicable legislation, users may have rights including:

• access;
• correction;
• deletion;
• restriction of processing;
• data portability;
• objection to processing;
• withdrawal of consent where applicable.

Requests may be submitted through the contact information below.

• Generalcontact@onecorehive.com
• Privacyprivacy@onecorehive.com
• Securitysecurity@onecorehive.com