Privacy Policy

At MarkingEase, we believe that education technology should empower users while respecting their privacy. This Privacy Policy details our practices regarding the collection, use, and disclosure of personal data when you interact with our platform. By accessing or using MarkingEase, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

To provide you with a high-quality, personalized assessment experience, we collect information that you explicitly share with us and information generated automatically.

• Account and Profile Data (Google OAuth): When you register or log in, we utilize Google OAuth and other secure sign-in methods to collect your name, email address, and profile picture. This ensures secure authentication and allows us to verify your role (Student or Teacher).
• Educational Materials & User Content: We store notes, syllabus documents, files, or specific prompts that teachers upload to generate quizzes, as well as quiz questions, correct answer keys, and student responses submitted for evaluation.
• Assessment Performance Data: For student users, we log answers, scores, submission times, and technical events (such as tab-switching or focus loss) designed to support academic integrity and cheat detection.
• Technical and Usage Data: Our hosting and application services may process connection metadata such as IP addresses, browser information, request timing, and error diagnostics when you use the service.

2. How We Use Your Data

MarkingEase uses the collected data to maintain, secure, and continuously improve our AI-powered assessment services:

• Quiz Generation & Management: Processing uploaded teacher documents and prompt templates to create balanced assessments.
• Smart Grading and Feedback: Passing student responses and rubric constraints through advanced Large Language Models (LLMs) to calculate tentative scores and provide constructive semantic feedback.
• Academic Integrity Monitoring: Helping educators verify the authenticity of quiz attempts through tracking tab-switching indicators and time limits.
• Service Improvement: Optimizing our AI prompt engineering strategies, database performance, and dashboard visualizations based on aggregated, de-identified telemetry data.

Information is processed for the purposes described above and may be sent to the service providers listed below when the relevant feature is used. Provider retention, model-training, and contractual data-use terms require separate legal and vendor review; this policy does not make a provider-level no-training guarantee.

3. Data Security and Storage

MarkingEase uses application authentication, database access policies, and server-side service credentials to control access to application data. No online service can guarantee absolute security.

• Application Data: Supabase provides database and authentication services. Database policies and authenticated server services are used to control application access.
• Service Access: Administrative and server credentials are kept outside client application code and are intended only for authorized service operations.
• Security Review: Access rules and service credentials must be reviewed as the platform and its infrastructure change.

4. Third-Party Services

Depending on the feature you use, MarkingEase relies on the following categories of service providers. The exact data-processing terms and legal roles of each provider require human and legal review:

• AI Processing: Assessment and AI-processing requests may be routed through configured providers or infrastructure including Oracle Cloud, Hugging Face, Cerebras, Google/Gemini, Groq, and OpenRouter where applicable.
• Hosting, Database, and Authentication: Cloudflare provides frontend delivery, Supabase provides database and authentication services, and Render configuration is used for application services.
• Code Execution: Interactive coding may send submitted source code and selected language to remote execution services including AWS Lambda or Judge0, depending on the workflow.
• Email Delivery: Brevo processes email addresses, recipient/contact details, and message/email content necessary for authentication, account/assessment notifications, and contact-form delivery.
• Application Services: Sockudo and Redis support realtime and queued application workflows, and Lemon Squeezy supports subscription billing. Data sent to each service depends on the feature used.

5. Privacy Choices and Requests

Depending on where you live, privacy law may provide rights relating to your personal information. You may contact us to request access, correction, portability, or deletion; we will evaluate requests under applicable law.

• Right of Access & Portability: You may request copies of the personal data we hold about you.
• Right of Correction: You have the right to correct any inaccurate or incomplete profiles or assessment data.
• Right of Deletion ('Right to be Forgotten'): You may request that we purge all personal data associated with your profile, subject to statutory retention limits.
• Consent Withdrawal: Where we rely on your consent to process data (such as Google authentication), you may withdraw consent at any time by deleting your account.

To exercise any of these rights, please contact our privacy contact at privacy@markingease.com.

6. Cookies & Advertising Networks

MarkingEase uses browser storage and cookies needed for authentication, application state, and saved preferences. Executable Google AdSense advertising is disabled during the current site-review phase; the AdSense ownership meta tag does not display ads or set advertising cookies.

• First-Party Cookies: Necessary cookies used to manage user authentication sessions and maintain application state.
• Future Advertising Consent: Before executable advertising is enabled where consent is required, MarkingEase intends to configure a Google-certified consent management platform. The current preference banner is not an IAB TCF CMP.
• Google Advertising Information: If Google advertising is enabled in a later phase, Google and its partners may use cookies or other identifiers as described in the Google ad and content network privacy policy. For more information on how Google uses data when you visit our site, please review Google's Privacy Policy.
• Opting Out of Personalized Advertising: You may opt out of personalized advertising provided by Google by visiting Google Ads Settings. Alternatively, you can opt out of third-party vendor cookies for personalized advertising by visiting www.aboutads.info.

7. Changes to this Policy

We may periodically update our Privacy Policy to reflect technical adjustments, regulatory guidelines, or product updates. If we make material modifications, we will notify registered users via email or post a prominent banner on the dashboard. We encourage you to review this page periodically to stay informed about how we protect your information.