Privacy Policy

Last Updated: 20 November 2025

Quick Summary for Students

  • We respect your privacy and protect your data.
  • We only use your data to help you improve your writing and run our service.
  • You're always in control—contact us to access or delete your data.

1. Introduction

Welcome to MarkM8 ("we", "us", "our"). Your privacy is of paramount importance to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services (collectively, the "Platform"). MarkM8 is committed to safeguarding your information in accordance with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and other applicable data protection laws.

By using our Platform, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

2. Data Controller

MarkM8 is the data controller responsible for your personal data.

Contact: support@markm8.ai
Address: London, United Kingdom

3. What Data We Collect

We collect and process the following categories of data:

  • Personal Identification Data: Name, email address, university/school, country of residence, student ID (optional), profile photo (optional).
  • Account Data: Username, authentication method, login history, session data.
  • Academic Data: Essay submissions, assignment instructions, grades, feedback, writing samples.
  • Transactional Data: Payment details (processed securely via Stripe), purchase history, credit balance, auto-reload status, and related Stripe customer reference/tokens.
  • Technical Data: IP address, browser type, device information, usage data, cookies and similar tracking technologies.
  • Communications Data: Support queries, feedback, survey responses, messages sent via the Platform.

Special Category Data: We do not require or intentionally collect "special category" data (e.g., ethnicity, health, political views) except where explicitly provided for accessibility or support reasons (e.g., ADHD, dyslexia), and only with your explicit consent.

4. How We Use Your Data

We process your data only where we have a lawful basis. Main purposes include:

  • Providing, personalizing, and improving our Platform and services.
  • Authenticating your identity and securing your account.
  • Delivering AI-generated assignment feedback and grades.
  • Processing payments and managing credits, including optional auto-reload functionality.
  • Communicating important updates, support, or service notifications.
  • Research, analytics, and service development (using anonymized or aggregated data).
  • Complying with legal obligations (including fraud prevention and academic integrity).
  • Enforcing our Terms of Use and protecting the integrity of our Platform.

AI Processing & Model Improvement: Our Platform uses artificial intelligence to generate assignment feedback and grade predictions. Your essay submissions may also be used, in an anonymized and aggregated form, to improve our AI models. We will always seek your explicit consent before using your data for this purpose beyond providing your requested feedback.

5. Identity Provider

We use Google OAuth as our identity provider for user authentication. When you sign in, your name and email address are collected directly from your Google account with your consent. Google may also set cookies as part of this process. For more details, please refer to Google's Privacy Policy.

6. Payment Processing

We use Stripe to process payments securely. When you make a payment, your payment information (such as credit/debit card number, billing address, and other relevant data) is transmitted directly to Stripe. We do not store your full card details on our servers.

Stripe processes your data in accordance with their own Privacy Policy, which you can review here. Stripe may transfer data outside the UK/EEA, but will ensure appropriate safeguards are in place, such as Standard Contractual Clauses or UK International Data Transfer Agreements.

Auto-Reload Feature: If you choose to enable our auto-reload feature for purchasing credits, you will be asked to provide explicit consent. You can disable this feature at any time in your account settings. We only retain Stripe's customer or token reference, never your card details.

7. Analytics & Communication Partners

We may use analytics services such as Google Analytics 4 and/or PostHog to collect aggregated usage statistics and help us improve our Platform. We may also use external providers to send emails, notifications, or service updates.

These providers process your data only as instructed by us and in compliance with GDPR, and their privacy policies will be made available on request or in future policy updates.

8. AI Sub-Processing

We use the OpenAI API to process and provide AI-generated feedback and grades. Essay texts submitted for feedback are sent to OpenAI's servers. OpenAI may process this data outside the UK/EEA (e.g., in the United States), but contractual safeguards such as Standard Contractual Clauses are in place to protect your data in compliance with GDPR.

OpenAI acts strictly as a processor and does not use your data for its own model training or improvement. For more information, see OpenAI's Privacy Policy.

9. International Data Transfers

Some of our service providers (including Stripe, OpenAI, Google, and analytics/email partners) may process your data outside the UK or EEA. In these cases, we ensure that appropriate safeguards—such as Standard Contractual Clauses or the UK International Data Transfer Agreement—are implemented to protect your data.

10. Data Protection Impact Assessments (DPIA)

MarkM8 performs regular Data Protection Impact Assessments in line with the requirements of the UK GDPR. DPIAs are conducted for all major data processing activities—especially those involving student data and automated decision-making—to identify, assess, and mitigate privacy risks. The goal is to ensure that all personal data processing is fair, necessary, proportionate, and secure.

11. Automated Decision-Making & AI Model Explainability

Our Platform uses artificial intelligence (AI) to generate feedback and grade predictions. These outputs are produced via automated processes using large language models trained on anonymized academic data.

  • Explainability: The AI analyzes the structure, language, and content of your submission to provide feedback aligned with common academic standards. If you would like more information about how these recommendations are produced, or want to know the main criteria used by the AI, you may request an explanation by contacting us.
  • Your Rights: You may request a human review of any AI-generated decision or output that you feel has a significant impact on you, and you are entitled to an explanation of the decision-making process in clear, understandable language.

12. Legal Basis for Processing

We process your data on the following grounds:

  • Contractual necessity: To provide you with our services.
  • Legitimate interests: To improve our Platform, maintain security, prevent fraud, and conduct analytics.
  • Consent: For optional features (e.g., marketing, accessibility support, research/model training, and auto-reload).
  • Legal obligations: Compliance with UK law and regulatory requirements.

13. How We Share Your Data

We do not sell your data. We may share your data in the following limited circumstances:

  • Service Providers: With trusted third-party IT, payment, analytics, communications, and cloud service providers under strict contractual controls.
  • Academic Institutions: Only with your explicit consent or at your request (e.g., for institutional integration).
  • Legal/Regulatory: If required by law, regulation, court order, or for the protection of our rights or safety.
  • Business Transfers: In the event of a business reorganisation, merger, or sale, we will notify you before your data is transferred and becomes subject to a different policy.

14. Your Rights (UK GDPR)

You have the right to:

  • Access your data and receive a copy.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten") in certain circumstances.
  • Restrict or object to processing.
  • Data portability (receive your data in a usable format).
  • Withdraw consent at any time where processing is based on consent.
  • Complain to the UK Information Commissioner's Office (ICO).

Requests can be made by contacting support@markm8.ai. We may need to verify your identity before responding.

15. Children's Data

Our Platform is intended for users aged 16 and above (or as permitted by applicable law). We do not knowingly collect data from children under 16 without parental consent. If you believe a child's data has been provided without appropriate consent, please contact us.

16. Cookies & Tracking

We use cookies and similar technologies to operate our Platform, analyze usage, and improve user experience. You will be presented with a cookie banner when you first visit the site, allowing you to manage your preferences in accordance with UK law. See our Cookie Policy for full details.

17. Third-Party Links

Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies.

18. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page, and where material, we will notify users directly. Continued use of the Platform constitutes acceptance of any changes.

19. Contact Us

If you have questions, concerns, or requests regarding your privacy or this policy, please contact:

Email: support@markm8.ai
Address: London, United Kingdom

MarkM8 Ltd
Company Number: [To be registered]
Registered Office: London, United Kingdom