← Back to Home

Privacy Policy

Last Updated: December 27, 2024

This Privacy Policy explains how MarkScheme collects, uses, shares, and protects your personal data when you use our service.

1. Who We Are

MarkScheme.co is the data controller of your personal data. When we mention "MarkScheme", "we", "us" or "our" in this privacy policy, we refer to MarkScheme.co, based in Dubai, United Arab Emirates.

2. What Personal Data We Collect

Personal data is any information about you by which you can be identified. We collect the following types of personal data:

Information You Provide Directly:

• Account Information: Name and email address (from your Google account)
• Payment Information: Payments are processed by Razorpay Software Pvt. Ltd. (India). Card and bank details are entered directly into Razorpay's hosted checkout - we never receive or store your full payment card details. We store your email address linked to your purchases and credit balance.
• Uploaded Content: Practice answers, images of handwritten work
• Communications: Messages you send to our support team

Information We Collect Automatically:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent on service, marking history
• Location Data: General location based on IP address (country/region level)
• Cookies and Tracking: See our Cookies section below

3. How We Collect Personal Data

We collect personal data when you:

• Create an account or sign up for early access
• Purchase credits or subscribe to our service
• Upload answers for marking
• Complete surveys or provide feedback
• Contact our support team
• Use our website and interact with our features

4. Why We Use Your Personal Data

We use your personal data for the following purposes:

To Provide Our Service:

• Process and mark your uploaded answers
• Generate feedback and Assessment Objective breakdowns
• Manage your account and credits
• Process payments and fulfill orders
• Provide customer support

To Improve Our Service:

• Analyze usage patterns to enhance features
• We do not use your submissions to train AI models
• Conduct research and statistical analysis
• Test new features and functionality

To Communicate With You:

• Send service-related notifications and updates
• Respond to your inquiries and support requests
• Send marketing communications (with your consent)
• Notify you of changes to our service or policies

For Security and Legal Compliance:

• Prevent fraud and abuse
• Ensure service security and integrity
• Comply with legal obligations
• Enforce our Terms of Service

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To provide the services you've signed up for
• Consent: When you've given permission (e.g., for marketing emails)
• Legitimate Interests: To improve our service, ensure security, and operate efficiently
• Legal Obligation: To comply with applicable laws and regulations

6. How We Share Your Data

We do not sell, rent, or trade your personal data. We may share your data with:

Service Providers:

• AWS (Amazon Web Services): Cloud hosting and storage (US East region)
• OpenAI (US): When you submit an answer for marking, the full content of your submission (the image of your handwritten work or your typed answer) is sent to OpenAI's API together with the relevant official mark scheme, and the resulting feedback is returned to you. Please do not include more personal information in your answers than is needed.
• Razorpay Software Pvt. Ltd. (India): Payment processing. Your email address is shared with Razorpay to link payments to your account. Card details are handled solely by Razorpay's checkout and are not visible to us.
• Google: Sign-in and identity verification (your Google account name, email address and profile picture when you choose "Continue with Google")
• PostHog (EU cloud): Privacy-friendly product analytics, only after you accept analytics in the consent banner
• Email: We contact you only at the email address you sign in with, about your account and purchases

Legal Requirements:

We may disclose your data if required by law, court order, or government request, or to:

• Protect our rights and property
• Prevent fraud or security issues
• Protect the safety of users or the public

Business Transfers:

If MarkScheme is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States (AWS US East region). We ensure appropriate safeguards are in place to protect your data, including:

• Standard Contractual Clauses with service providers
• Compliance with applicable data protection frameworks
• Security measures to protect data in transit and at rest

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited access to personal data by authorized personnel only

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

Specifically:

• Account Data: Retained while your account is active and for a reasonable period after closure
• Uploaded Answers: Retained while your account is active so you can view your results, and deleted upon request. We do not use them for AI training.
• Payment Records: Retained as required by tax and accounting regulations
• Marketing Data: Retained until you unsubscribe or request deletion

10. Your Rights and Choices

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Objection: Object to processing of your data for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request transfer of your data to another service
• Withdraw Consent: Withdraw consent for processing based on consent

To exercise these rights, contact us at support@markscheme.co

11. Marketing Communications

We may send you marketing emails about our services, features, and offers. You can:

• Opt out by clicking "unsubscribe" in any marketing email
• Manage preferences in your account settings
• Contact us to update your preferences

Note: You cannot opt out of service-related emails (e.g., account notifications, payment confirmations).

12. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze how you use our service
• Improve service performance and user experience
• Provide personalized content and recommendations

Types of Cookies We Use:

• Essential Cookies: Required for service functionality
• Performance Cookies: Help us understand usage patterns
• Functional Cookies: Remember your preferences
• Analytics Cookies: Measure and improve service performance

You can control cookies through your browser settings, but disabling cookies may limit service functionality.

13. Children's Privacy

MarkScheme is designed for students preparing for GCSE and A-Level examinations, and many of our users are under 18. To protect them:

• At sign-up, every user must confirm they are 13 or older, and users under 18 must confirm they have permission from a parent or guardian
• We do not knowingly collect data from children under 13. If we learn that a child under 13 has created an account, we will delete it
• Parents and guardians can contact us at support@markscheme.co to review, modify, or delete their child's data at any time

14. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending email notifications for material changes

Your continued use of the service after changes constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: support@markscheme.co
Website: markscheme.co

By using MarkScheme, you acknowledge that you have read and understood this Privacy Policy.