At eSTEP, we value your privacy and are committed to protecting your personal information. This privacy policy explains how we collect, use, and safeguard your data.
March 5, 2025
This Privacy Policy describes how eSTEP ("we," "us," or "our") collects, uses, and discloses your information when you use our website at idp.estep.asia (the "Service").
We take your privacy seriously and have developed this policy to help you understand what information we collect, how we use it, and what choices you have regarding your personal data.
When you create an account with eSTEP, we collect the following information:
When you sign in through Google's authentication service, we collect:
We use this information only for authentication purposes and to create and maintain your eSTEP account. This OAuth integration improves security by reducing the need to store separate passwords.
As you interact with our platform, we automatically collect information about your activity and device:
This data helps us understand how our platform is used, identify areas for improvement, and create a more personalized learning experience.
We use cookies and similar tracking technologies to enhance your experience and collect information about your browsing activities:
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect functionality of the Service.
We use the collected information for various purposes, including but not limited to:
We implement comprehensive security measures to protect your personal information:
All data is encrypted in transit using HTTPS/TLS protocols and at rest using industry-standard encryption methods.
Strict access controls limit who can access user data, with staff access provided on a need-to-know basis only.
Secure authentication procedures including support for Google OAuth to protect account access.
Regular security assessments and vulnerability testing to identify and address potential security issues.
Despite our efforts to implement appropriate security measures, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
We share information with select third-party services to enhance your experience and operate our platform effectively:
Purpose: Website analytics and user behavior tracking
Data Shared: Usage patterns, device information, page views, and navigation flow (anonymized when possible)
Privacy Policy: https://policies.google.com/privacy
Purpose: Displaying relevant advertisements
Data Shared: Cookies, device information, browsing history, and interaction with ads
Privacy Policy: https://policies.google.com/privacy
Purpose: User authentication and account creation
Data Shared: Email, name, and profile information from your Google account (with your permission)
Privacy Policy: https://policies.google.com/privacy
These third parties have their own privacy policies addressing how they use the information they receive. We encourage you to read their privacy policies to understand their data practices.
We do not sell your personal information to third parties. Any sharing of information is done to provide and improve our Service or as required by law.
Depending on your location, you may have various rights regarding your personal information. We respect these rights and provide mechanisms for you to exercise them:
You can request copies of your personal information that we maintain. We'll provide this information in a structured, commonly used, and machine-readable format.
If you believe information we hold about you is inaccurate or incomplete, you can request that we correct or update it.
You can request that we delete your personal information. We'll comply unless we have a legitimate reason to retain certain information.
You can request that we temporarily or permanently stop processing certain elements of your personal information.
To exercise any of these rights, please contact us at info@estep.asia. We will respond to your request within 30 days. We may need to verify your identity before processing your request.
If you're not satisfied with our response, you have the right to lodge a complaint with a supervisory authority in my jurisdiction of local area.
We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. The criteria used to determine our retention periods include:
When personal information is no longer necessary for the purposes for which it was collected, we will securely delete or anonymize it, unless further retention is required by law.
Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.
We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, regardless of where it is processed.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
For significant changes that materially affect your rights or how we use your personal information, we will provide a more prominent notice (such as an email notification). We encourage you to review this Privacy Policy periodically for any changes.
Your continued use of the Service after any modifications to the Privacy Policy constitutes your acknowledgment of the changes and your consent to abide and be bound by the modified Privacy Policy.
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: info@estep.asia
We will respond to your inquiries as soon as possible, typically within 5 business days.
This Privacy Policy applies to organizations using eSTEP's Enterprise Edition, which includes premium features, dedicated infrastructure, enhanced security, and customization options. It describes how we collect, process, and protect information when your organization uses our Enterprise services.
This Enterprise Privacy Policy supplements our standard Privacy Policy and outlines additional protections and considerations specific to Enterprise customers.
When an organization subscribes to our Enterprise Edition, we collect additional information:
For Enterprise customers using our custom domain and white labeling features:
Enterprise Edition provides advanced analytics capabilities, which involve collecting:
For Enterprise customers using our "Bring Your Own AI Model" feature:
We do not store or access your actual AI models or training data unless explicitly requested as part of a support engagement.
Enterprise Edition provides dedicated infrastructure with enhanced data isolation:
Enterprise Edition implements comprehensive encryption measures:
Enterprise Edition includes additional security features beyond our standard offering:
Custom permission systems, role-based access control, and detailed user activity logs.
Additional security measures including IP restrictions, enhanced monitoring, and regular security reviews.
Enterprise Edition supports custom integrations with your existing systems:
These integrations may involve additional data processing activities based on your specific configuration. We implement appropriate safeguards for all integrated systems.
For Enterprise customers using our automated email reporting features:
Enterprise Edition provides an ad-free experience:
Enterprise Edition provides organization administrators with enhanced control over user data and privacy settings:
Enterprise customers receive dedicated support with enhanced privacy and security handling:
Enterprise customers benefit from enhanced incident response:
Upon termination of your Enterprise subscription:
Details regarding termination procedures are specified in your Enterprise Services Agreement.
For Enterprise-specific privacy inquiries, please contact:
Email: info@estep.asia
Your Dedicated Success Manager
For Enterprise customers, we provide expedited response times for privacy-related inquiries, typically within 2 business days.