Security and data
Plain answers about where candidate data is kept, who can see it and how long it stays.
Where your data lives
The AviMetric database is hosted in Singapore and the web application runs from Singapore. Hosting, the database and email delivery are provided by infrastructure companies that handle data only to run the platform for us.
Who can see what
A candidate sees their own results. A school or airline sees only its own candidates in its portal. AviMetric staff can access data to run and support the platform.
Sign-in and passwords
Passwords are stored as salted hashes, never as readable text. A candidate account can be signed in on one device at a time. School and airline portals have their own sign-in, separate from candidate accounts.
Payments
AviMetric does not store card, UPI or bank details. Payments are handled by the payment processor.
How long we keep it
Account and activity data is kept for the life of the account plus 90 days after it expires, after which it may be deleted or anonymised. Payment records are kept for as long as tax and accounting law requires.
What we do not do
We do not sell, rent or trade personal data. It is shared only with the payment processor, with our infrastructure providers to operate the platform, and with authorities where the law requires it.
What we collect, and your rights
To run the licence and prevent account sharing, AviMetric records device and connection details, test activity and account details. The Privacy Policy lists everything. You can ask for a copy of your data, a correction or deletion of your account by emailing avimetric1@gmail.com, subject to legal retention requirements.
Security questions
AviMetric has not been independently certified to a security standard such as ISO 27001, and does not claim to be. If your organisation has security questions, email us and we will answer in writing. Support is available from 8am to 10pm IST.