Privacy Policy
1About This Policy
This policy explains what personal data Classark Exam Builder ("Exam Builder") handles, why, and for how long. CLASSARK ("we", "us", or "our") is responsible for that data.
You use Exam Builder with a Classark account, and the Classark Privacy Policy covers that account, visits to our websites, and your rights over your data. This policy adds what is specific to Exam Builder.
2What Stays on Your Computer
Exam Builder is a desktop application. These are kept on your own computer and are never uploaded to us:
- the question papers and mark schemes you add, as files
- your question bank, exams, mark schemes and topic booklets
- your settings, and the name and email address of the account signed in on that computer
To keep you signed in, the application stores a sign-in token in your computer's own secure credential store (Windows Credential Manager or the macOS Keychain).
3What We Receive and Keep
Account and subscription
Your Classark account details (name, email address and account ID), and the state of your Exam Builder subscription: plan, status, billing period, and the top-up credit you have bought and spent.
Sign-in sessions
When you sign in from the application we record the session, the name of the computer the application reports (so you can recognise your signed-in computers), and when the session was created and last used. A session ends when you sign out or after 90 days without use, and its record is deleted automatically about 90 days after it was last used.
To stop repeated sign-in attempts, we briefly keep a scrambled (hashed) form of your IP address, deleted automatically after about 2 minutes. One-time sign-in codes are deleted after about 2 minutes too.
Usage records
For each AI request we record when it was made, which feature made it, the AI model, the amount of text processed, its cost and request IDs. These records never contain the text of your questions or requests. They are deleted automatically after about 13 months. We use them to show your balance, check billing and handle refunds.
While a request runs, we hold its expected cost against your balance. That hold (your account ID, the feature, the model and the amount) is kept for about 30 days after it is settled. Top-up checkouts you start but don't complete are kept for about 30 days.
Server logs
Our servers log the same kind of technical details about each request (request IDs, your account ID, feature, model, amount of text processed, status, timing and cost). They are built to never log the content of questions, requests or AI replies.
4AI Features
When you use an AI feature, the application sends what that feature needs, such as the text of the questions being tagged or fixed and the exam request you typed, to our servers. Our servers pass it to Anthropic, the company that makes the Claude AI models, and return the reply. Your files themselves are never sent.
We pass requests on without storing them, except for the shared reply cache described below. They use our own Anthropic account, and Anthropic receives a scrambled identifier for your account, never your name, email address or account ID. Under Anthropic's commercial terms, Anthropic does not use this data to train its models. Anthropic may process it outside the European Union, including in the United States.
Shared reply cache
For topic tagging and suggested fixes, we store the AI's reply about a paper, with the paper label the application sends, under a fingerprint of the exact request. The cache is shared between teachers on purpose: if anyone sends exactly the same request again (for example, another teacher tagging the same published question), they get the stored reply at no cost. Stored replies are not linked to your account, and are deleted automatically about 180 days after they were last used. Requests for other features are not stored.
When AI work runs as a batch, we keep a record of the batch (your account ID, its items' identifiers, the paper labels the application gives them, status and cost). It is deleted automatically about 30 days after the batch ends, or about 31 days after it started if it never finishes.
5Payments
Subscriptions and top-up credit are sold by Paddle, our reseller and Merchant of Record. Paddle collects your payment details and billing address and processes them under its own privacy policy. We never see your full card details. Paddle tells us about your purchases and subscription so we can give you access.
6Who Processes Your Data
| Service | Purpose | Data Shared |
|---|---|---|
| Google Firebase and Google Cloud | Accounts, sign-in, our servers and their database (European Union, Belgium) | Account, subscription, session and usage records; requests passing through |
| Anthropic | AI features | The content of AI requests (question text and exam requests) |
| Paddle | Payments, invoices and tax | Name, email address, payment and billing details |
7Why We Use Your Data
- To provide Exam Builder (performing our contract with you): signing you in, running AI features, keeping your balance.
- To bill you and handle refunds (contract, and legal obligations for tax and accounting records).
- To keep the service secure and working (our legitimate interests): preventing abuse, fixing faults, and keeping AI costs down with the shared cache.
8Deleting Your Data
When you delete your Classark account, we delete your Exam Builder subscription record, sessions, sign-in codes, balance, usage history, credit holds, batch records and unfinished top-up checkouts. We keep records of top-up purchases (your account ID, the amounts and Paddle's transaction ID) and our log of admin actions on accounts, which we need for accounting. Paddle keeps its own billing records. Stored AI replies are not linked to you and expire on their own. Files on your computer are yours to keep or delete.
9Your Rights
You have the same rights over your Exam Builder data as over the rest of your Classark data, including access, correction, deletion and objection. The Classark Privacy Policy explains them and how to complain to a data protection authority. To use them, email legal@classark.com.
10Who Exam Builder Is For
Exam Builder is made for teachers and other adults preparing exams. It is not meant for use by children, and we do not knowingly collect their data through it.
11Changes to This Policy
We may update this policy. We will tell you about material changes by email or in the application. The date at the top shows the latest version. See also the Exam Builder Terms of Service.
Questions about this policy?
Email us at legal@classark.com and we will get back to you within 2 business days.