Privacy Policy

1. Information we collect

• Account information: your name, email address and company details when you register.
• Candidate information: the name and email of candidates you invite, and their assessment results — typing speed (WPM), accuracy, module scores, time taken, and behavioural integrity data (tab-switch events and paste-attempt logs).
• Payment information: processed by Stripe. We do not store full card numbers — Stripe handles card data on our behalf under their PCI-DSS compliance framework.
• Usage data: device, browser and usage logs that help us operate and secure the service.

2. How we use it

• To create and manage assessments and deliver results to the company that invited the candidate.
• To process payments for credit packs and certification badges.
• To maintain the security and integrity of the testing process.
• To provide support and improve the platform.

3. Data storage and processing

Candidate and account data is stored on our hosted platform's cloud infrastructure, which uses data centres located in the United States (operated by Google Cloud Platform). While your data is stored overseas, it is protected by row-level access controls so that only your company can read or modify your records. Payment data is processed by Stripe, which may operate servers outside Australia. By using MARKER, you acknowledge that your data may be stored and processed in these overseas locations.

4. Employer responsibility for candidate consent

When you invite a candidate to sit a MARKER assessment, you are the entity collecting their personal information for the purpose of evaluating their suitability for a role. You are responsible for obtaining the candidate's consent before inviting them, and for informing them that their name, email, assessment results and behavioural integrity data will be collected and shared with you and others in your company involved in the hiring decision. MARKER acts as a processor on your behalf. We recommend you include a privacy notice or consent step in your candidate communication before sending the assessment link.

5. Data retention

We retain assessment results and candidate records for as long as your account is active. If you delete a candidate or assessment from your dashboard, the associated data is removed from our active database. After an account is closed or deleted, we retain residual data for up to 90 days for security and dispute-resolution purposes, after which it is permanently deleted — unless a longer retention period is required to meet legal, accounting or reporting obligations under Australian law.

6. Sharing

Assessment results are visible only to the company that invited the candidate. We share data with Stripe for payment processing and with our cloud hosting provider to run the service. We do not sell personal information to third parties.

7. Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit and at rest, and row-level access controls. No system is perfectly secure. Sensitive card data is handled entirely by Stripe and never touches our servers.

8. Your rights

You may access, correct or request deletion of personal information we hold about you. Candidates may contact the inviting company, or us directly, to exercise these rights. You can delete your account and all associated data at any time from the Billing page.

9. Privacy complaints

If you believe we have mishandled your personal information, you may contact us or email hello@markerhq.com.au and we will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.

10. Contact

Questions about privacy? Contact us or email hello@markerhq.com.au. This policy is published by Belkirk Group Pty Ltd (ABN 31 646 321 164).