Privacy Policy

1. Introduction

Welcome to MarkM8 ("we", "us", "our"). Your privacy is of paramount importance to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services (collectively, the "Platform"). MarkM8 is committed to safeguarding your information in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and other applicable data protection laws.

By using our Platform, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

2. Data Controller

MarkM8 is the data controller responsible for your personal data.

Contact: support@markm8.com
Address: London, United Kingdom

3. What Data We Collect

We collect and process the following categories of data:

• Personal Identification Data: Name, email address, institution/university (optional), profile photo (optional). We may also collect country of residence where relevant.
• Account Data: Username, authentication method, login history, session data.
• Academic Data: Essay submissions, assignment instructions, grades, feedback, writing samples.
• Transactional Data: Payment details (processed securely via Stripe), purchase history, credit balance, and related Stripe customer reference/tokens.
• Technical Data: IP address, browser type, device information, usage data, cookies and similar tracking technologies.
• Communications Data: Support queries, feedback, survey responses, messages sent via the Platform.

4. How We Use Your Data

We process your data only where we have a lawful basis. Main purposes include:

• Providing, personalizing, and improving our Platform and services.
• Authenticating your identity and securing your account.
• Delivering AI-generated assignment feedback and grades.
• Processing payments and managing credits.
• Communicating important updates, support, or service notifications.
• Research, analytics, and service development (using anonymized or aggregated data). Any analytics we conduct are solely to improve the Platform and will never be used in ways that prejudice your personal data or privacy.
• Complying with legal obligations (including fraud prevention and academic integrity).
• Enforcing our Terms of Use and protecting the integrity of our Platform.

5. Identity Provider

We use Clerk as our identity provider for user authentication. When you sign in, your name and email address are collected with your consent. For more details, please refer to Clerk's Privacy Policy.

6. Payment Processing

We use Stripe to process payments securely. When you make a payment, your payment information (such as credit/debit card number, billing address, and other relevant data) is transmitted directly to Stripe. We do not store your full card details on our servers.

Stripe processes your data in accordance with their own Privacy Policy, which you can review here. Stripe may transfer data outside the UK/EEA, but will ensure appropriate safeguards are in place, such as Standard Contractual Clauses or UK International Data Transfer Agreements.

7. AI Sub-Processing

We use AI providers via OpenRouter to process and provide AI-generated feedback and grades. Essay texts submitted for feedback are sent to these providers' servers. They may process this data outside the UK/EEA, but contractual safeguards such as Standard Contractual Clauses are in place to protect your data in compliance with GDPR.

Our AI providers act strictly as processors and do not use your data for their own model training or improvement when accessed via our API.

8. International Data Transfers

Some of our service providers (including Stripe, Clerk, Convex, and AI providers) may process your data outside the UK or EEA. In these cases, we ensure that appropriate safeguards—such as Standard Contractual Clauses or the UK International Data Transfer Agreement—are implemented to protect your data.

9. Automated Decision-Making & AI Model Explainability

Our Platform uses artificial intelligence (AI) to generate feedback and grade predictions. These outputs are produced via automated processes using large language models.

• Explainability: The AI analyzes the structure, language, and content of your submission to provide feedback aligned with common academic standards. If you would like more information about how these recommendations are produced, or want to know the main criteria used by the AI, you may request an explanation by contacting us.
• Your Rights: You may request a human review of any AI-generated decision or output that you feel has a significant impact on you, and you are entitled to an explanation of the decision-making process in clear, understandable language.

10. Legal Basis for Processing

We process your data on the following grounds:

• Contractual necessity: To provide you with our services.
• Legitimate interests: To improve our Platform, maintain security, prevent fraud, and conduct analytics.
• Consent: For optional features (e.g., marketing, accessibility support, research/model training).
• Legal obligations: Compliance with UK law and regulatory requirements.

11. How We Share Your Data

We do not sell your data. We may share your data in the following limited circumstances:

• Service Providers: With trusted third-party IT, payment, analytics, communications, and cloud service providers under strict contractual controls.
• Academic Institutions: Only with your explicit consent or at your request (e.g., for institutional integration).
• Legal/Regulatory: If required by law, regulation, court order, or for the protection of our rights or safety.
• Business Transfers: In the event of a business reorganisation, merger, or sale, we will notify you before your data is transferred and becomes subject to a different policy.

12. Your Rights (UK GDPR)

You have the right to:

• Access your data and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") in certain circumstances.
• Restrict or object to processing.
• Data portability (receive your data in a usable format).
• Withdraw consent at any time where processing is based on consent.
• Complain to the UK Information Commissioner's Office (ICO).

Requests can be made by contacting support@markm8.com. We may need to verify your identity before responding.

13. Children's Data

Our Platform is intended for students and is generally used by those aged 16 and above. We do not knowingly collect data from children under 13. If you believe a child's data has been provided without appropriate consent, please contact us.

14. Cookies & Tracking

We use cookies and similar technologies to operate our Platform, analyze usage, and improve user experience. You will be presented with a cookie banner when you first visit the site, allowing you to manage your preferences in accordance with UK law. See our Cookie Policy for full details.

15. Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies.

16. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page, and where material, we will notify users directly. Continued use of the Platform constitutes acceptance of any changes.

17. Contact Us

If you have questions, concerns, or requests regarding your privacy or this policy, please contact:

Email: support@markm8.com
Address: London, United Kingdom