Privacy Policy
Last updated: 27 July 2026
Who we are
Marker ("Marker", "we", "us") is an exam-grading service operated by Hedron Limited (Reg. No. HE 416568), Kimonos 11, Kaimakli, 1022 Nicosia, Cyprus. For any privacy question, contact us at info@examgrading.com.
For data-protection purposes:
- The teacher who uploads student work is the data controller of that student data — they decide why and how it is processed.
- Marker acts as a data processor for that student data, processing it only to provide the grading service on the teacher's instruction.
- Marker is the data controller of the teacher's own account data (name, email, billing).
What we collect
Account data: your name, email address, password (stored only as a secure hash), and billing records. Card payments are handled by our payment provider (Stripe) — we never see or store your card number.
Content you upload: scanned exam papers, assignments, homework, answer keys, rubrics and class rosters. This content may contain personal data about students (names, ID numbers, handwritten work and marks).
Usage data: basic log data and device/browser information, and an approximate location (country only) derived from your IP address. The country is used solely to choose your interface language (English or Greek); this lookup happens on our own server using an offline database, so your IP address is never sent to any third party for this.
How we use your data
- To grade your work. Uploaded content is sent to our AI processing provider, Anthropic (the Claude API), which performs the grading and returns the result to us. Anthropic does not use data submitted through its commercial API to train its models. Anthropic may retain inputs and outputs only for a limited period (currently up to 30 days) for operational, safety and legal-compliance purposes, after which they are deleted; they are never used to build or improve Anthropic's models. We send no more of your content than is needed to grade the work you upload.
- To run your account — authentication, processing credit top-ups, and sending you service-related emails.
- To secure and improve the service.
We do not sell your data or your students' data, and we do not use uploaded student work for advertising.
Legal basis for processing (GDPR)
- Performance of a contract — to provide the service you signed up for.
- Legitimate interests — to secure, maintain and improve the service.
- Consent — where required, e.g. for any non-essential cookies or marketing email (you can withdraw it at any time).
- For student data, the teacher (as controller) is responsible for ensuring a lawful basis exists to process their students' work through Marker.
Who we share data with
We share data only with the processors needed to run the service, each bound by a data-processing agreement:
| Processor | Purpose |
|---|---|
| Microsoft Azure | Application hosting, database and storage of uploaded files |
| Anthropic | AI grading (Claude API) |
| Stripe | Payment processing |
| Microsoft 365 | Transactional email |
We may also disclose data if required by law.
How long we keep it
- Account data is kept while your account is active.
- Uploaded content and grading results are kept until you delete them or close your account, after which they are deleted within 30 days.
- Billing records are kept as long as required by tax/accounting law.
Your rights
Under the GDPR you have the right to access, correct, export, restrict, or delete your data, to object to processing, and to withdraw consent. Signed-in teachers can export or delete their data at any time from the Privacy & data page in their account, or by emailing info@examgrading.com. You also have the right to complain to a data protection authority — our lead authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, and you may also complain to the authority in your own country (in Greece, the Hellenic Data Protection Authority / Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα).
Data location & international transfers
Our application and database are hosted in Microsoft Azure (Israel Central region). Where data is transferred outside the European Economic Area (for example to our AI processor), we rely on an appropriate safeguard — a European Commission adequacy decision where one exists, or otherwise Standard Contractual Clauses.
Cookies
We use essential cookies only — needed to keep you logged in and remember your language choice. We do not use advertising or tracking cookies by default.
Children
Marker is a tool for teachers and educational institutions; it is not intended for direct use by children. Student work is uploaded by teachers, who act as the data controllers for that work.
Changes to this policy
We may update this policy from time to time. The "last updated" date above will change, and we'll notify you by email of any material change.
Contact
Hedron Limited (Reg. No. HE 416568) · Kimonos 11, Kaimakli, 1022 Nicosia, Cyprus · info@examgrading.com