Privacy notice

Scrimark is a service provided by Athelvoid Solutions (SSM registration no. 202603112324), Malaysia. This notice explains what we collect when you use the free beta, why, who processes it and where, your rights, and how to delete it.

Adults only

Scrimark is for adults: you must be 18 or older to create an account. We don't knowingly collect personal data from anyone under 18. If we learn that an account belongs to someone under 18, we will close it and delete its personal data.

What we collect, and why

• Your account: email address and password (stored by our authentication provider in hashed form, never readable by us). Why: to create your account, sign you in, and send sign-up confirmation and password-reset emails.
• Your age confirmation: that you confirmed you are 18 or older when you signed up, and when. Why: Scrimark is for adults only, and this records that you confirmed it.
• Your work: your answers, the marks and feedback they receive, your tutor chat messages, and any marks you dispute. Why: to mark your answers, show your results and progress, write tutor replies, and review marks you dispute.
• Questions you upload under “Mark my own question”: we keep the question text and marking scheme read from your upload. The uploaded file itself is not stored; it is sent to the AI provider to be read and then discarded. We record the topic and skill of each point in a question you upload, chosen by the AI when it reads your upload; you can change them. Why: to mark your answers to your own questions and show you where you lose marks.
• Usage records: how many answers, replies and uploads you have used, and the cost of each AI request (without its content). Why: to apply the daily and monthly limits and keep the cost of the AI within budget.
• A one-way code derived from your network address when you sign up, sign in or reset your password. It cannot be turned back into the address and is deleted after a day. Why: to limit abuse, such as creating many accounts.
• Content-protection records: a record of which questions were shown to your account and when, and patterns in how you answer (how many different questions, and how long the answers are) used to spot content being collected. Question pages show your email address and the date faintly in the background, and the question text carries invisible marks unique to your account. A record of a suspected copying case, and of any limit or suspension on your account, is kept while your account exists. Why: to protect our questions from being copied and to enforce the terms of use.

How your answers are marked

Your answers, questions, uploads and chat messages are sent to Anthropic, our AI provider, to mark them and to write tutor replies. Under its commercial terms, Anthropic does not use them to train its models. Marks are produced by an AI model against a marking scheme and may be wrong. Tutors and administrators of Scrimark can see answers to question-bank questions in order to review marking quality. They can see a question you uploaded only if you share it when disputing a mark, while the dispute is open and for 30 days after it is decided, or until you withdraw it.

Who processes your data, and where

These providers process personal data for us, only to provide their part of the service:

Transfers outside Malaysia

Your data does not stay in Malaysia. It goes to:

• Singapore: Supabase and Vercel
• Japan: Resend
• United States: Anthropic and Cloudflare Turnstile

Vercel and Cloudflare Turnstile also use networks of servers in many countries.

We transfer it because Scrimark cannot work without these providers. Each receives only what it needs for its job, and we choose providers whose terms require them to protect personal data and use it only to provide their service to us.

How long we keep it, and deleting it

We keep your data while your account exists. You can delete your account at any time from the Account page. That permanently deletes your account, your uploaded questions, your tutor chats, and your answers and results, with one exception below. Cost records stay, without anything that identifies you.

The exception: an answer to a question-bank question that a tutor has marked for quality checking, or whose mark was reviewed after a dispute, is kept to check and improve marking accuracy. It is unlinked from you first: it no longer belongs to any account, your comment on the dispute is removed and the chat about it is deleted. The answer text itself is kept as you wrote it, so don't put personal details in your answers.

Backups may keep deleted data for a limited time until they expire.

Your rights

• Access: ask for a copy of the personal data we hold about you.
• Correction: ask us to correct personal data that is wrong, incomplete or misleading.
• Deletion: delete your account at any time from the Account page, or ask us to do it.

We reply within 21 days. So that we know a request is really from you, we may ask you to send it from the email address on your account.

If there is a data breach

If a breach of your personal data is likely to cause you significant harm, we will tell you without unnecessary delay, and we will notify Malaysia's Personal Data Protection Commissioner as the law requires.

Contact

For privacy requests (a copy of your data, a correction or a deletion) and any question about your data, email hello@scrimark.com with “Privacy request” in the subject line. You can also complain to Malaysia's Personal Data Protection Commissioner.