Privacy policy
Last updated: 23 August 2026. This policy covers MarkerPen 2.0.
MarkerPen ("we", "us") is operated by Jigsaw Software Development Ltd, a company registered in England and Wales (company number 17190874, registered office: 42 Windsor Drive, Barnet, England, EN4 8UD). We are the data controller for the personal data described below. Contact: jamie@jigsaw.digital.
What we collect
- Your account: name, email address, password (stored as a salted hash) or your Google account identifier if you sign in with Google.
- Your teaching content: task instructions, assessment criteria, student work you upload (text, documents or photographs), the feedback MarkerPen generates, and your edits to it.
- Student information you choose to enter: typically a name, optionally an email address for sending feedback. You control what you enter; we recommend the minimum needed to organise your marking.
- Usage and billing: how many marks you use, your plan, and payment status. Card details are never seen or stored by us.
Students' data - our shared responsibility
Student work often belongs to children. You, the teacher, decide what to upload and remain responsible for having appropriate grounds to use it; we process it only to provide the service to you. We recommend uploading work without full names where practical. You can delete any student, submission or piece of feedback at any time, and deleting your account removes your data from our systems.
How AI processing works
Marking is performed with OpenAI's GPT models via their commercial API. Under OpenAI's business terms and enterprise privacy commitments, content sent to the API is not used to train their models, and a data processing addendum with standard contractual clauses and the UK international data transfer addendum applies. We send only what is needed to mark: the task brief, criteria, and the submission.
Who processes data for us
| Processor | Purpose | Location |
|---|---|---|
| Vercel | Hosting and file storage | US/EU |
| Neon | Database | US |
| OpenAI | AI marking | US |
| Stripe (Onelink) | Payments, as seller of record | US/EU |
| Postmark (ActiveCampaign) | Transactional email | US |
| Sign-in (optional) | US/EU | |
| Namecheap / Cloudflare | Domain and network infrastructure | Global |
Where data leaves the UK, transfers rely on adequacy decisions or standard contractual clauses with the UK addendum.
Purchases
Paid plans are sold by Onelink (a Stripe company) as seller of record. Onelink handles payment processing, receipts, applicable taxes and payment support; their privacy notice applies to the payment relationship.
Retention and your rights
We keep your content while your account is active. You can export or delete your content at any time, and you can ask us to delete your account entirely. Under UK GDPR you have rights of access, rectification, erasure, restriction, portability and objection - contact us and we will act within one month. You can complain to the ICO (ico.org.uk) if you are unhappy with our handling.
Changes
We will post any material changes here and, where appropriate, email you.