We built MarkingEase with privacy and security in mind. This policy explains what information we collect when you use our AI-powered quiz generation and evaluation tools, how we handle it, and the strict safeguards we employ to keep your data secure. We are committed to GDPR compliance and protecting the academic integrity of students and educators alike.
At MarkingEase, we believe that education technology should empower users while respecting their privacy. This Privacy Policy details our practices regarding the collection, use, and disclosure of personal data when you interact with our platform. By accessing or using MarkingEase, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
To provide you with a high-quality, personalized assessment experience, we collect information that you explicitly share with us and information generated automatically.
Account and Profile Data (Google OAuth): When you register or log in, we utilize Google OAuth and other secure sign-in methods to collect your name, email address, and profile picture. This ensures secure authentication and allows us to verify your role (Student or Teacher).
Educational Materials & User Content: We store notes, syllabus documents, files, or specific prompts that teachers upload to generate quizzes, as well as quiz questions, correct answer keys, and student responses submitted for evaluation.
Assessment Performance Data: For student users, we log answers, scores, submission times, and technical events (such as tab-switching or focus loss) designed to support academic integrity and cheat detection.
Technical and Usage Data: We automatically collect diagnostics and telemetry, including IP addresses, browser types, page navigation patterns, and feature interactions through Vercel Web Analytics.
2. How We Use Your Data
MarkingEase uses the collected data to maintain, secure, and continuously improve our AI-powered assessment services:
Quiz Generation & Management: Processing uploaded teacher documents and prompt templates to create balanced assessments.
Smart Grading and Feedback: Passing student responses and rubric constraints through advanced Large Language Models (LLMs) to calculate tentative scores and provide constructive semantic feedback.
Academic Integrity Monitoring: Helping educators verify the authenticity of quiz attempts through tracking tab-switching indicators and time limits.
Service Improvement: Optimizing our AI prompt engineering strategies, database performance, and dashboard visualizations based on aggregated, de-identified telemetry data.
We do not sell or rent your personal information to third parties, nor do we use student work or responses to train external AI models.
3. Data Security and Storage
The security of your educational data is a top priority. We implement robust, industry-standard administrative, physical, and technical measures designed to protect your information from unauthorized access, loss, or alteration:
Secure Storage: All data is stored securely using cloud infrastructure managed by Supabase, incorporating strong database-level access rules (Row Level Security) and encryption at rest.
Encryption in Transit: All data transferred between our user interface, application gateway, and database is encrypted using secure TLS (Transport Layer Security) protocols.
Access Minimization: Only authorized administrative roles have access to database tables, and access is audited regularly.
4. Third-Party Services
To provide specific AI features and reliable cloud delivery, MarkingEase collaborates with carefully selected third-party processors. These processors are contractually bound to treat your data in strict compliance with data privacy regulations:
AI Processing (OpenAI / LLMs): Text-based questions, correct answer rubrics, and student answers are sent to OpenAI and equivalent LLM APIs for analysis and grading. We transmit only what is necessary and strip out direct student PII (Personal Identifying Information) whenever possible. Our integrations utilize API configurations where inputs are not used for model training.
Infrastructure & Database (Supabase & Vercel): Our database hosting, authentication routing, and hosting environments are powered by Supabase and Vercel. Their certifications align with SOC 2 standards.
Analytics (Vercel Web Analytics & Speed Insights): We use lightweight performance trackers to optimize load times and page performance. No sensitive quiz answers or grades are tracked.
5. GDPR & CCPA Compliance
If you reside in the European Economic Area (EEA) or California, you possess specific data protection rights under the GDPR and CCPA. These include:
Right of Access & Portability: You may request copies of the personal data we hold about you.
Right of Correction: You have the right to correct any inaccurate or incomplete profiles or assessment data.
Right of Deletion ('Right to be Forgotten'): You may request that we purge all personal data associated with your profile, subject to statutory retention limits.
Consent Withdrawal: Where we rely on your consent to process data (such as Google authentication), you may withdraw consent at any time by deleting your account.
To exercise any of these rights, please contact our data compliance officer at privacy@markingease.com.
6. Changes to this Policy
We may periodically update our Privacy Policy to reflect technical adjustments, regulatory guidelines, or product updates. If we make material modifications, we will notify registered users via email or post a prominent banner on the dashboard. We encourage you to review this page periodically to stay informed about how we protect your information.