Privacy Policy

The Service is operated under the DeepMarking brand at https://deepmarking.com. For privacy questions, contact us at support@deepmarking.com.

Account information. When you register (email and password or a social provider such as Google), we collect your name, email address, institution (if provided), authentication identifiers, and profile settings (for example plan, timezone, and preferences).

Assessment content. You may upload or enter assessment specifications, rubrics, student submissions (including files, ZIP archives, and extracted text), marking configuration, marks, feedback, and export files. This may include personal data about students if you choose to upload it.

Usage and technical data. We collect logs and events needed to operate the Service: IP address, browser/device type, pages viewed, feature usage, error diagnostics, AI usage metering (tokens and estimated cost), and credit/plan usage.

Payment data. If you subscribe to a paid plan, payment is processed by Stripe. We receive subscription status, customer and subscription identifiers, and billing interval. We do not store full card numbers on our servers.

Communications. Emails you send us, and messages we send you (activation, password reset, transactional notices).

• Provide, secure, and improve the Service (accounts, projects, marking, exports).
• Run AI-assisted marking and related features using our platform AI provider (currently Google Gemini), including sending rubric/spec/submission text required to generate marks and feedback.
• Meter AI usage, enforce plan and credit limits, and prevent abuse.
• Process subscriptions and invoices via Stripe.
• Send essential account emails (activation, password reset, security notices).
• Analyse product usage with privacy-conscious analytics (for example PostHog) using identifiers and aggregate events-not student work content in analytics properties.
• Comply with law and enforce our Terms of Service.

Marking and rubric assistance send relevant assessment text to our configured AI provider so the model can return marks and feedback. Do not upload content you are not permitted to process under your institution’s policies or applicable law.

We use platform-managed API credentials. You cannot supply your own AI keys through the product. AI calls are metered for billing and operational limits.

Lecturers are typically the controller of student personal data uploaded into DeepMarking. You must have a lawful basis and institutional permission to upload student work, and you must configure retention and access appropriately for your role.

DeepMarking processes that content to provide the Service you request. We do not sell student personal data.

We share data with service providers who process it on our instructions, including:

• Supabase - authentication, database, and related backend infrastructure.
• Google - Gemini AI processing; Google OAuth if you choose “Sign in with Google.”
• Stripe - payment and subscription processing.
• PostHog - product analytics (when enabled).
• Email delivery - SMTP provider used to send account emails.
• Hosting - the infrastructure that serves deepmarking.com.

We may disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset transfer (with notice where required).

We use cookies and similar storage for authentication sessions, theme preferences, and (when enabled) analytics. Essential cookies are required for login and security. Analytics may be disabled when no analytics project token is configured.

We retain account and project data while your account is active and as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. You may delete projects or request account deletion; residual backups and logs may persist for a limited period.

We use industry-standard measures such as encrypted transport (HTTPS), access controls, and role-based admin tools. No method of transmission or storage is 100% secure; you are responsible for safeguarding your credentials and institutional devices.

Our providers may process data in countries other than yours (for example the United States or the EU/UK). Where required, we rely on appropriate safeguards offered by those providers.

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. Contact support@deepmarking.com. We may need to verify your identity. Institutional admins may also control access to shared assessment data under their policies.

DeepMarking is directed at educators and adult account holders. It is not intended for children under 16 to create accounts. Student work of minors may appear only when an authorised educator uploads it in accordance with applicable law and institutional policy.

We may update this Policy from time to time. The “Effective date” above will change when we do. Material changes may be communicated by email or an in-product notice. Continued use after changes become effective constitutes acceptance.

Privacy requests: support@deepmarking.com
General contact: accounts@deepmarking.com
Website: https://deepmarking.com

See also our Terms of Service.