Privacy notice
Last updated: October 2026
Otiate is run by Jonathan Ramakrishna, in Singapore, who is responsible for your personal data under the Personal Data Protection Act 2012 (PDPA) and is Otiate’s Data Protection Officer. To reach him, email us (the support address will be listed here shortly).
What we keep
- Your name, email address and profile picture, from Google when you sign in.
- The materials you generate and choose to save, and the settings you choose.
- For marked work: the marks, annotations and feedback, and the label you give each script. Not the script itself (see below).
- How much of your allowance you have used, and your plan.
- A security log of sign-ins and of changes to your account, plan, saved work and marking jobs, with your email address and a scrambled (hashed) form of your IP address, not the address itself.
- If you pay: your plan and payment status. Card and bank details go to Stripe and never reach Otiate.
Student scripts
A script you upload for marking is sent for processing, marked, and then deleted. Otiate keeps only the marks, annotations and feedback. A class set waiting in the marking queue is held only until each script is marked or you cancel the job; scripts left in an unfinished job are cleared after about a day, and the job itself after 14 days. Please remove or mask students’ names, index numbers and other identifiers before you upload: Otiate does not need them.
Why we use it
To sign you in, generate and mark what you ask for, keep your library, apply your plan’s allowance, take payment, keep the service secure, and fix faults. We do not sell your data, use it for advertising, or use your work or your students’ work to train AI models.
Who processes it for us
- Google: sign-in.
- Vercel: hosting, in its Singapore region.
- Neon: the database, in Singapore.
- Anthropic: the AI model that generates materials and marks scripts. Requests are processed in the United States. Anthropic’s commercial terms do not allow it to train its models on this content.
- Stripe: payments. Stripe handles card and PayNow details directly.
Transfers outside Singapore
Some processing happens outside Singapore, chiefly at Anthropic in the United States, and at Stripe and Google. We use these providers under their contractual data-protection terms so that your data is protected to a standard comparable to the PDPA, as the PDPA requires.
How long we keep it
Your account data and saved work are kept while your account is open. Scripts are deleted once marked; unfinished marking jobs after 14 days. When you delete your account, your data is deleted from Otiate’s database straight away, except the security log, which records the deletion itself and is kept for a year. Payment records are kept by Stripe for as long as the law requires.
Your rights
You can download everything Otiate holds about you, or delete your account and everything in it, from Settings. You can also ask for access to or correction of your data, or withdraw your consent: to do so, email us (the support address will be listed here shortly). We will reply within 30 days. Withdrawing consent means closing your account, since Otiate cannot work without your sign-in.
If something goes wrong
If a data breach is likely to cause you significant harm, we will tell you, and notify the Personal Data Protection Commission, as the PDPA requires.
Changes
If this notice changes in a way that matters, we will tell you when you next sign in.