Privacy Policy

1. What We Collect

When you use Markwork, we collect the minimum data necessary to provide the service:

• Your uploaded file — the assignment document you submit for grading.
• Submission metadata — the subject, academic level, and assignment type you select.
• A hashed version of your IP address — used solely for rate limiting. We never store your raw IP address. It is hashed with SHA-256 before being saved.
• Optional marking criteria — if you choose to provide a rubric file or paste rubric text.

We do not collect your name, email address, university, or any other personally identifiable information. No account or sign-up is required.

2. How We Use Your Data

• Grading — Your uploaded file is processed by an AI model (Anthropic Claude) to generate feedback. The content of your file is sent to the AI API for analysis.
• Rate limiting — Your hashed IP address is used to enforce fair-use submission limits.
• Service improvement — Aggregate, anonymised statistics (e.g., total submissions, average processing time) may be used to improve the service. Individual submissions are never reviewed by humans unless required for debugging a technical issue you report.

3. File Storage & Deletion

Your uploaded files are stored temporarily to enable grading. Once grading is complete, files are eligible for automatic deletion. Submission records (including grading results) expire and are purged after 7 days by default.

If cloud storage (Supabase) is configured, files are stored in a private bucket accessible only by the server. In local/development mode, files are stored on the server filesystem.

We do not retain your files longer than necessary. We do not sell, share, or provide your files to any third party beyond the AI processing service.

4. Third-Party Services

• Anthropic (Claude AI) — Your file content is sent to Anthropic's API for grading. Anthropic's data handling is governed by their own privacy policy and terms of service. As of our last review, Anthropic does not use API inputs for model training.
• Supabase (if configured) — Used for database hosting and file storage. Data is stored securely in Supabase's cloud infrastructure.
• Vercel (if deployed there) — Used for hosting the web application. Standard server logs may be collected by the hosting provider.

5. Cookies & Tracking

Markwork does not use cookies, analytics trackers, or advertising pixels. We do not track your browsing behaviour. The only client-side storage used is your language preference (stored in the browser's local state, not sent to any server).

6. Data Security

We take reasonable measures to protect your data:

• IP addresses are hashed with SHA-256 before storage — they cannot be reversed.
• All data in transit is encrypted via HTTPS.
• Database access is restricted to server-side code only.
• File storage uses private buckets with no public access.

However, no system is 100% secure. Do not upload files containing sensitive personal data (e.g., national insurance numbers, bank details) that is unrelated to your assignment.

7. Your Rights

Since we do not collect personally identifiable information, most data protection requests (access, correction, deletion) are not applicable. Your submission data is automatically deleted after the expiry period.

If you have concerns about specific data we may hold, please contact us and we will respond promptly.

8. Children

Markwork is intended for university and higher-education students. It is not designed for or directed at children under the age of 16.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this privacy policy or how your data is handled, please reach out to us at info@markwork.com.