You own the work
You or your organisation retain ownership of uploaded content, including student work. We process it as your service provider.
Data commitments
How we handle learner work
Straight answers for teachers, quality leads and procurement. Learner work stays yours. We use it only to produce the result you asked for. We do not use it to train or build AI models.
Six commitments
What we promise about learner work
Purpose-limited processing
Uploads are used for one purpose: to generate the mark, feedback, integrity check or analysis you requested at that moment.
No training or product development on your data
We do not use learner work to train or build AI models. Our AI provider processes requests through an API that does not train on your content.
Never sold
We never sell learner data, and we do not share uploaded content with third parties for marketing or advertising.
Optional name anonymisation
You can anonymise student identifiers before prompts are sent to our AI provider. Organisations can enforce this for every member.
Export and delete
You can export your data and delete submissions, results or your account at any time. Under the DPA we delete or return data on termination.
Retention
How long things stay
Taken from our Privacy Policy so this page cannot quietly diverge.
| Data | Retention |
|---|---|
| Account, students, marking results, transcripts, detection runs | Until you delete them or delete your account (no automated purge of marking history today) |
| Assignment submission files on disk | Deleted after 30 days; the database row is retained as expired |
| Temporary Video Marker media files | Deleted after about 72 hours; transcripts and feedback in the database remain until you delete the job or account |
| Page and tab activity trail | 90 days |
| Database backups | About 14 days |
Full detail, including cookie consent and job applications, is in the Privacy Policy.
Where your data goes
7 sub-processors
Files and media are stored on our UK servers. AI processing runs through the OpenAI API in the United States. We do not claim UK-only processing.
| Provider | Purpose | Location |
|---|---|---|
| OpenAI, L.L.C. | AI processing for marking, feedback, tutoring, worksheets, syllabus generation, OCR/vision, Whisper transcription (Video Marker and rubric batch audio/video) and related features | United States |
| Stripe, Inc. / Stripe Payments Europe Limited | Payment processing for credit packs and subscriptions | United States / European Economic Area |
| SMTP email provider (configured per deployment) | Transactional and (where consented) marketing email delivery | Depends on configured MAIL_SERVER |
| Cloudflare, Inc. (Turnstile) | Bot protection on account registration | Global edge network |
| Google LLC (Google Analytics 4) | Optional website analytics (only when the visitor has opted in) | United States / global |
| Crossref | Bibliographic metadata lookup for reference checking (DOI and optional title/author search) | United States |
| YouTube (Google LLC) via yt-dlp | Download of user-supplied YouTube URLs for Video Marker (local processing) | Media retrieved from YouTube; processed in United Kingdom then OpenAI (US) |
Categories, transfer mechanisms and data categories live on the sub-processors page, which uses the same source list.
Procurement checklist
Questions worth asking any assessment provider
Several institutions are reviewing contracts around student data and AI. These questions help you compare any vendor on substance.
- Who owns uploaded student work, and can the provider use it for training or product development?
- Can the provider change those terms mid-contract, and how much notice do you get?
- Where is content stored, and which sub-processors handle AI processing?
- What are the retention periods for files, results and media?
- How do you export or delete data at the end of a contract?
- Does integrity tooling produce evidence a teacher can review, or only a single score?
Binding terms
This page is guidance, not a contract.
The Privacy Policy and Data Processing Agreement are the binding terms. Feedback Flows Ltd is ICO registered (ZC132812).