Privacy policy
Draft for legal review. This policy isn't in effect yet and will change before it is.
Who we are
Ensobook is run by Ensobook LLC (“we”). We run exams for instructors, who decide which students take them; for most purposes your school or instructor decides how your exam data is used, and we process it for them. Questions: support@ensobook.com.
What we collect
About students, from their instructor: name, email and student ID or username, and the exam code.
While a student takes an exam: a recording of their screen from start until hand-in (not on a tablet, when the instructor allows tablets); their answers; when they start, leave the exam window, come back and hand in; and the kind of device and browser. If they leave the exam window, a few still images of their screen. The camera and microphone are never used.
Paper exams: scans of the pages, when an instructor gives the exam on paper and uploads them.
Afterwards: scores, grades and feedback, and study guides made from the results.
About instructors: name, email and the Google or Microsoft account they sign in with; the exams, questions and materials they add.
Technical: to slow down people guessing codes, we keep a scrambled form of the connecting address for a day. The only cookie keeps instructors signed in; students' answers and recording are kept in their browser only until they upload. No advertising or tracking.
Files from Google Drive
An instructor who signs in with Google can choose files from Google Drive instead of uploading them. Ensobook asks Google for access only to the files they pick (Google's “drive.file” permission), makes one copy of each for their exam or course materials, and keeps no access afterwards: no Google token is stored, and Ensobook never looks through their Drive. Google Docs and Slides are copied as PDFs, and Sheets as Excel files.
Ensobook's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Copied files are used only to build that instructor's exams and study materials (including reading them with the AI service listed below, which doesn't use them to train AI models); they aren't sold, used for advertising, or used to train AI models.
Why
To run exams and show instructors how they went: to record and save each exam, point out moments an instructor may want to check, grade and give feedback, send codes and results notices, and keep the service working and secure. We don't sell this data or use it for advertising, and exams aren't used to train AI.
Who can see it
A student's recording, still images, scans, answers and grades are visible to their instructor (and anyone their instructor or school shares them with). Students see their own results once their instructor releases them. Our service providers, listed below, process data only to run Ensobook. We may also disclose data where the law requires it.
How long it's kept
By default, recordings and scans are deleted 120 days after an exam's results are released, unless they're held for an integrity review. Instructors can change this for each exam. Answers, grades and other records are kept while the instructor keeps the exam. Retention of the rest is to be completed in legal review.
Your requests
Students can ask to see, correct or delete their data. Start with your instructor, who controls your exam records; you can also write to support@ensobook.com and we'll work with your school. Rights under laws such as FERPA are handled with your school. Details to be completed in legal review.
Service providers
| Provider | What it does for Ensobook |
|---|---|
| Vercel | Hosts the website and runs the service. |
| Supabase | Stores the database (exams, answers, grades) and files (recordings, still images, scans, uploads); instructor sign-in. |
| Resend | Sends email: exam codes, results notices and instructor invitations. |
| Anthropic | AI (Claude): reviews still images, suggests scores and feedback, reads paper scans and uploaded exam files, drafts study guides. |
| Instructor sign-in, and the files an instructor chooses from Google Drive (copied once; see below). |
Google and Microsoft handle instructor sign-in for instructors who choose them.
Security
Recordings and files are stored privately and shown only to signed-in instructors with access to the exam. Connections are encrypted. Details to be completed in legal review.
Changes
If this policy changes, we'll update this page and the date below. See also the Terms of use.
Draft of October 14, 2026.