← Back to Home

Privacy Policy

1. Controller Information

AssetryAI Limited is the data controller for your personal information. We are registered in the United Kingdom and comply with UK GDPR and applicable international data protection laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, institution affiliation, user type
• Profile Information: Educational background, teaching subjects, preferences
• Content: Assignments, assessments, student work, rubrics, and related educational materials
• Communication: Messages sent through our platform or to our support team
• Payment Information: Billing details (processed securely through third-party providers)

2.2 Information We Collect Automatically

• Usage Data: How you interact with our platform, features used, time spent
• Technical Data: IP address, browser type, device information, operating system
• Analytics Data: Platform performance, error logs, user behavior patterns
• Cookies and Tracking: Session data, preferences, authentication tokens

2.3 AI Processing Data

• Assessment Content: Student submissions for grading and analysis
• Detection Data: Content processed for plagiarism and AI detection
• Performance Metrics: Grading patterns, assessment analytics

3. How We Use Your Information

3.1 Service Provision

• Providing AI-powered assessment and grading services
• Detecting plagiarism and AI-generated content
• Creating and managing assessments and tests
• Generating analytics and reports
• Managing user accounts and authentication

3.2 Communication

• Sending service-related notifications
• Providing customer support
• Sharing important updates about our service
• Marketing communications (with your consent)

3.3 Legal Obligations

• Complying with legal requirements
• Protecting against fraud and abuse
• Enforcing our Terms of Service
• Responding to law enforcement requests

4. Legal Basis for Processing

Purpose	Legal Basis
Service provision and account management	Performance of contract
AI processing for assessments	Performance of contract
Platform improvement and analytics	Legitimate interests
Marketing communications	Consent
Legal compliance	Legal obligation

5. Data Sharing and Disclosure

5.1 We Share Information With:

• AI Service Providers: For content processing and analysis (under strict data processing agreements)
• Payment Processors: For handling subscription and payment transactions
• Cloud Providers: For secure data storage and platform hosting
• Analytics Providers: For platform performance and usage analysis
• Legal Authorities: When required by law or to protect our rights

5.2 We Do Not:

• Sell your personal information to third parties
• Share student assessment content without appropriate permissions
• Use your content for training AI models without consent
• Share information for advertising purposes with third parties

6. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions where applicable
• Appropriate technical and organizational measures

7. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: Data encrypted in transit and at rest
• Access Controls: Role-based access with multi-factor authentication
• Regular Audits: Security assessments and vulnerability testing
• Incident Response: Procedures for detecting and responding to security breaches
• Staff Training: Regular security awareness training for all employees

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Until account deletion plus 30 days
• Assessment Content: As long as required for educational purposes or as requested by institutions
• Transaction Records: 7 years for tax and accounting purposes
• Marketing Data: Until you withdraw consent
• Legal Requirements: As required by applicable law

9. Your Rights

Under applicable data protection laws, you have the following rights:

9.1 Access and Portability

• Request a copy of your personal information
• Receive your data in a structured, machine-readable format

9.2 Correction and Deletion

• Correct inaccurate or incomplete information
• Request deletion of your personal information (subject to legal requirements)

9.3 Processing Limitations

• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Withdraw consent where processing is based on consent

9.4 Complaints

You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information in accordance with applicable law.

10. Children's Privacy

Our service is designed for educational use and may involve processing information about students under 18. We:

• Only process student data under the instruction of educational institutions
• Implement additional safeguards for children's data
• Require appropriate consents and authorizations from institutions
• Limit data processing to educational purposes only

11. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential: Authentication, security, and core functionality
• Performance: Analytics and platform optimization
• Functional: User preferences and settings
• Marketing: Advertising and promotional content (with consent)

You can control cookie preferences through your browser settings or our cookie management tools.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via:

• Email notification to your registered email address
• Prominent notice on our platform
• Updated effective date at the top of this policy

13. Regional Specific Information

13.1 European Users (GDPR)

Additional rights under GDPR including data portability, right to object, and specific consent requirements for special categories of data.

13.2 California Users (CCPA)

Rights to know, delete, and opt-out of sale of personal information (note: we do not sell personal information).

13.3 Other Jurisdictions

We comply with applicable local data protection laws where we operate.