ScotMark is an independent AI-powered revision tool for Scottish students. We are the data controller for the personal data described in this policy.
For any privacy-related queries, contact us at scotmark17@outlook.com.
This policy applies to all users of ScotMark, including visitors, registered users, and paying subscribers. It complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
| Data Type | What We Collect | Why |
|---|---|---|
| Account data | Email address, hashed password, account creation date | To create and manage your account |
| Usage data | Subjects used, analyses count, session history, scores, streak data | To provide the service and show your progress dashboard |
| Content data | Questions and answers you submit for marking | To generate AI feedback. Passed to Anthropic API for processing. |
| Payment data | Subscription plan, Stripe customer ID | To manage your subscription. Full payment details handled by Stripe. |
| Technical data | IP address (for rate limiting), request timestamps | To prevent abuse and ensure service reliability |
We do not collect your full name, date of birth, phone number, or physical address unless you voluntarily provide them.
We use your personal data only for the following purposes:
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
Under UK GDPR, we process your data on the following legal bases:
We share data with the following third-party services to operate ScotMark:
| Service | Purpose | Data Shared |
|---|---|---|
| Anthropic | AI feedback generation | Questions and answers submitted for marking |
| Stripe | Payment processing | Email address, subscription plan |
| Resend | Transactional emails | Email address |
| Railway | Backend hosting | All data stored in our database |
Each of these providers has their own privacy policy and data protection commitments. We only share the minimum data necessary for each service to function.
Content you submit (questions and answers) is sent to Anthropic's API for processing. Anthropic does not use API inputs to train their models by default. Please review Anthropic's privacy policy for full details.
We retain your data for as long as your account is active. Specifically:
When you delete your account, we will permanently delete all personal data within 30 days, except where retention is required by law.
Under UK GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at scotmark17@outlook.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
ScotMark is designed for students aged 13 and above. We do not knowingly collect personal data from children under 13 without verifiable parental consent.
If you are under 16, we recommend reviewing this policy with a parent or guardian before creating an account.
If we become aware that we have inadvertently collected data from a child under 13 without consent, we will delete it promptly. Please contact us at scotmark17@outlook.com if you have concerns.
ScotMark uses minimal browser storage to provide the Service:
We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not use Google Analytics or similar tracking services.
We take reasonable technical and organisational measures to protect your personal data, including:
While we implement industry-standard security practices, no system is completely secure. We cannot guarantee absolute security of your data.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice within the Service at least 14 days before changes take effect.
The "last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
For any privacy-related questions, data requests, or concerns, please contact us at:
We aim to respond to all privacy requests within 30 days. For complaints, you may also contact the Information Commissioner's Office (ICO) at ico.org.uk.
We're committed to being transparent about how we handle your data.
scotmark17@outlook.com