1. Introduction
Welcome to MarkM8 ("we", "us", "our").
Your privacy is extremely important to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services (the "Platform").
We process your data in accordance with:
- the UK General Data Protection Regulation ("UK GDPR");
- the Data Protection Act 2018; and
- the Privacy and Electronic Communications Regulations 2003 ("PECR").
By using our Platform, you agree to this Privacy Policy. If you do not agree, please do not use our services.
2. Data Controller
MarkM8 is the data controller responsible for your personal data.
Contact: support@markm8.com
Address: London, United Kingdom
(We will update this section with full company details once formally incorporated.)
3. What Data We Collect
We collect and process the following categories of data:
Personal Identification Data
- Name
- Email address
- Profile photo (optional)
Academic Profile Data
- Institution/university (optional)
- Course (optional)
- Academic level (optional)
Account Data
- Clerk account identifier
- Authentication method
- Email preference records
Academic Data
- Essay submissions
- Assignment instructions
- Grades and feedback
- Writing samples
Transactional Data
- Payments (processed securely via Stripe)
- Purchase history
- Credit balance
- Stripe customer IDs/tokens
Technical Data
- IP address
- Browser type and device information
- Usage data
- Cookies and similar technologies
- Referral and campaign data (e.g. UTM parameters)
Communications Data
- Support queries
- Messages sent through our contact form
- Feedback you submit about grades or the product
Marketing Preferences Data
- Your email marketing preferences
- Opt-in/opt-out status
- Timestamp and method of consent collection
- Unsubscribe records
Special Category Data: We do not intentionally collect special category data (e.g. health, ethnicity, political views). If you voluntarily provide information (e.g. ADHD or dyslexia for support purposes), we will only process it with your explicit consent.
4. How We Use Your Data
We use your data for the following purposes:
- Providing and operating our Platform
- Delivering AI-generated feedback and estimated grade ranges
- Managing your account and authentication
- Processing payments and managing credits
- Providing customer support and service communications
- Improving our Platform, features, and performance
- Conducting analytics using anonymised or aggregated data
- Preventing fraud and maintaining security
- Enforcing our Terms of Use
Service Communications
We send essential service emails about your account, including welcome messages and grading notifications. These are sent regardless of your marketing preferences.
Marketing Communications
We may send you emails about:
- credit deals and special offers
- new features and product improvements
- draft reminders and submission follow-ups
- credit balance alerts
We will only send marketing emails where permitted by law. This will be based on:
- Your consent (e.g. if you opt in to marketing); or
- Soft opt-in (where applicable under PECR), if you have previously purchased from us and:
- you were given an opportunity to opt out when your data was collected; and
- you are given an opt-out option in every email.
You can unsubscribe at any time using the link in any marketing email or by contacting us.
AI Processing & Model Improvement
We use artificial intelligence to generate feedback and grading insights.
Your submissions may be used in anonymised and aggregated form to improve our systems.
We will always seek your explicit consent before using your data for model improvement beyond providing your requested service.
5. Identity Provider
We use Clerk for authentication. When you sign in, your name and email are processed.
Please refer to Clerk's Privacy Policy for further details.
6. Payment Processing
We use Stripe to process payments securely.
- We do not store full card details
- Stripe processes payment data under its own Privacy Policy
- Stripe may transfer data internationally with appropriate safeguards (e.g. Standard Contractual Clauses)
7. AI Sub-Processing
We use AI providers via OpenRouter to process essay submissions.
- Data may be processed outside the UK/EEA
- Safeguards such as Standard Contractual Clauses are in place
- Providers act strictly as processors
- Your data is not used by them for training their own models
8. International Data Transfers
Some providers (e.g. Stripe, Clerk, Convex, analytics tools, AI providers) may process data outside the UK/EEA.
We ensure appropriate safeguards such as:
- Standard Contractual Clauses (SCCs)
- UK International Data Transfer Agreements (IDTAs)
9. Automated Decision-Making & AI Explainability
Our Platform uses automated systems to generate feedback and estimated grade ranges.
- These outputs are based on analysis of structure, content, and academic standards
- You may request:
- an explanation of how decisions are made
- a human review of outputs that significantly affect you
Contact: support@markm8.com
10. Legal Basis for Processing
We rely on the following legal bases:
- Contractual necessity — to provide our services
- Legitimate interests — to improve the Platform, ensure security, and prevent fraud
- Consent — for marketing and any model-improvement use beyond providing your requested service
- Soft opt-in (where applicable under PECR) — for marketing to existing customers about similar services
- Legal obligations — to comply with applicable laws
11. How We Share Your Data
We do not sell your data.
We may share data with:
Service Providers
Trusted third parties including:
- hosting and infrastructure (e.g. Convex)
- authentication (Clerk)
- payments (Stripe)
- analytics and communications providers
These providers are bound by strict contractual obligations.
Academic Institutions
Only where you request or explicitly consent.
Legal Authorities
Where required by law or to protect rights and safety.
Business Transfers
In case of merger or sale, with prior notice to users.
12. Your Rights (UK GDPR)
You have the right to:
- Access your data
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent at any time
Marketing Rights
You can object to marketing at any time. We will stop immediately.
You also have the right to complain to the Information Commissioner's Office (ICO).
To exercise your rights: support@markm8.com
13. Children's Data
Our Platform is generally intended for users aged 16 and above.
We do not knowingly collect data from children under 13. If we become aware of such data, we will delete it.
14. Cookies & Tracking
We use cookies to:
- operate the Platform
- analyze usage
- improve performance
You will be given control over cookies via a banner when you first visit.
See our Cookie Policy for more details.
15. Third-Party Links
We may link to external websites. We are not responsible for their privacy practices.
16. Updates to This Policy
We may update this policy periodically.
Where changes are significant, we will notify you directly.
17. Contact Us
If you have any questions or requests:
Email: support@markm8.com
Address: London, United Kingdom
MarkM8
London, United Kingdom