privacy policy - marki

last updated: 9 sep 2025

1. introduction

welcome to marki ("we," "us," "our," or "the platform"), an ai-powered educational technology platform operated through the website marki.so (the "website," "platform," or "service"). we are committed to protecting your privacy and ensuring the security of your personal information.

this privacy policy explains how we collect, use, disclose, and safeguard your information when you use our platform. by accessing or using marki, you agree to the collection and use of information in accordance with this privacy policy. if you do not agree with the terms of this privacy policy, please do not access the platform.

2. information we collect

2.1 information you provide directly

when you register for an account or use our services, we collect information you voluntarily provide, including:

• account information: name, email address, username, and password (managed through clerk authentication)
• uploaded content: questions, answers, markschemes, rubrics, and essays you upload to the platform
• user-generated content: responses, answers, and other content you create within the platform
• communication data: information from emails, feedback, or support requests you send to us

2.2 information collected automatically

when you use our platform, we automatically collect certain information:

• usage data: pages visited, features used, time spent on pages, frequency of use
• device information: browser type, operating system, device type, ip address
• log data: access times, referring urls, error logs, and system activity
• cookies and similar technologies: session cookies, preference cookies, and analytics cookies

2.3 information from third parties

we receive information from third-party services integrated with our platform:

• authentication data: profile information from clerk when you sign up or log in
• file storage data: metadata about files uploaded through uploadthing
• payment information: transaction details from payment processors (if applicable)

3. how we use your information

we use the collected information for the following purposes:

3.1 service provision

• to create and manage your account
• to process your uploaded questions and generate ai markschemes
• to mark your answers and provide targeted feedback
• to evaluate essays against uploaded rubrics
• to store and manage your uploaded files

3.2 service improvement

• to analyze usage patterns and improve platform features
• to develop new functionalities and educational tools
• to optimize ai algorithms for better marking accuracy
• to conduct research on educational effectiveness

3.3 communication

• to send service-related notifications and updates
• to respond to your inquiries and support requests
• to provide educational tips and resources (with your consent)
• to notify you of changes to our terms or privacy policy

3.4 legal and security

• to comply with legal obligations and regulations
• to protect against fraud and unauthorized access
• to enforce our terms of service
• to protect the rights and safety of users and the public

4. how we share your information

4.1 service providers

we share information with third-party service providers that help us operate our platform:

• clerk: for authentication and user management
• uploadthing/aws s3: for file storage and management
• ai providers: for processing content and generating markschemes/feedback
• analytics providers: for understanding platform usage
• customer support tools: for managing support requests

4.2 educational institutions

if you access marki through an institutional account, we may share limited information with your school or institution for:

• account management and administration
• academic integrity monitoring
• usage reporting and analytics

4.3 legal requirements

we may disclose your information when required by law or in response to:

• court orders or subpoenas
• government or regulatory requests
• legal proceedings or investigations
• protection of our legal rights

4.4 business transfers

in the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

4.5 with your consent

we may share your information for other purposes with your explicit consent.

5. data security

we implement appropriate technical and organizational measures to protect your personal information:

5.1 security measures

• encryption of data in transit using tls/ssl protocols
• secure storage of files in aws s3 with encryption at rest
• access controls and authentication through clerk
• regular security audits and vulnerability assessments
• employee training on data protection practices

5.2 limitations

while we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. we cannot guarantee absolute security but commit to notifying you of any data breaches as required by law.

6. your rights and choices

6.1 access and portability

you have the right to:

• access your personal information
• receive a copy of your data in a portable format
• review uploaded content and generated markschemes

6.2 correction and update

you can:

• update your account information at any time
• correct inaccurate personal data
• modify your communication preferences

6.3 deletion

you have the right to:

• delete uploaded files instantly through the platform
• request deletion of your account and associated data
• remove specific content you've created

6.4 restriction and objection

you may:

• restrict processing of your personal data
• object to certain uses of your information
• opt-out of marketing communications

6.5 how to exercise your rights

to exercise these rights, please contact us at antoinekllee@gmail.com or through your account settings.

7. data retention

7.1 active accounts

we retain your information for as long as your account is active or as needed to provide services.

7.2 deleted content

• files deleted by users are immediately removed from active storage
• backup copies may persist for up to 30 days for recovery purposes
• after permanent deletion, data cannot be recovered

7.3 account termination

upon account deletion:

• personal information is deleted within 30 days
• some data may be retained for legal compliance or legitimate business purposes
• anonymized data may be retained for analytics

8. children's privacy

8.1 age requirements

• marki is intended for users aged 13 and above
• we do not knowingly collect information from children under 13
• users between 13-18 require parental consent in certain jurisdictions

8.2 parental rights

parents or guardians may:

• review information collected from their children
• request deletion of their child's information
• refuse further collection or use of their child's information

8.3 school consent

when marki is used in educational settings, schools may provide consent on behalf of parents for school-authorized educational purposes.

9. cookies and tracking technologies

9.1 types of cookies we use

• essential cookies: required for platform functionality
• analytics cookies: help us understand usage patterns
• preference cookies: remember your settings and preferences
• session cookies: maintain your login state

9.2 managing cookies

you can control cookies through:

• browser settings to block or delete cookies
• platform settings for cookie preferences
• third-party opt-out tools

9.3 do not track

we do not currently respond to do not track browser signals.

10. third-party services

10.1 integrated services

our platform integrates with third-party services that have their own privacy policies:

• clerk (authentication): see clerk's privacy policy
• uploadthing (file storage): see uploadthing's privacy policy

10.2 external links

our platform may contain links to external websites. we are not responsible for the privacy practices of these third-party sites.

11. international data transfers

11.1 cross-border transfers

your information may be transferred to and processed in countries other than your own, including countries that may have different data protection laws.

11.2 safeguards

we implement appropriate safeguards for international transfers, including:

• standard contractual clauses
• data processing agreements
• compliance with applicable data protection frameworks

12. european privacy rights

if you are in the european economic area (eea), we strive to handle your data in accordance with gdpr principles as we continuously improve our compliance measures.

13. singapore data protection (pdpa)

if you are in singapore, you have rights under the personal data protection act (pdpa), including the right to:

• access your personal data
• correct errors or omissions in your personal data
• withdraw consent for data collection and use
• request data portability where applicable

to exercise pdpa rights, contact us at antoinekllee@gmail.com.

14. updates to this privacy policy

we may update this privacy policy periodically to reflect:

• changes in our practices
• new features or services
• legal or regulatory requirements

we will notify you of material changes through:

• email notification
• platform announcement
• update to the "last updated" date

your continued use after changes constitutes acceptance of the updated privacy policy.

15. contact information

if you have questions or concerns about this privacy policy or our privacy practices, please contact us:

16. additional provisions

16.1 no sale of personal information

we do not sell, rent, or trade your personal information to third parties for their marketing purposes.

16.2 automated decision-making

our ai systems make automated assessments of your answers, but:

• these are educational tools, not final academic judgments
• you can request human review of ai-generated feedback
• teachers retain final authority over grades

16.3 data breach notification

in the event of a data breach affecting your personal information, we will:

• notify you as required by applicable law
• provide information about the breach and its impact
• offer guidance on protective measures

16.4 governing law

this privacy policy is governed by the laws of singapore, without regard to conflict of law principles.