Privacy Policy

Last updated: 15 March 2026

1. Who We Are

Intelligent Software Ltd (trading as Dolly), company number 15208078, is the data controller responsible for your personal data. We are registered in England and Wales at 20 Wenlock Road, London, N1 7GU and operate the platform at godolly.ai.

If you have any questions about this privacy policy or how we handle your data, please contact us at support@godolly.ai.

2. What Data We Collect

We collect the following categories of personal data:

Account Information

  • Name and email address
  • Password (stored securely using industry-standard hashing)
  • Account type (teacher, tutor, parent, or student)
  • Billing information (processed securely by our payment provider)

Student Data

  • Student names and class assignments
  • Homework submissions and written work
  • Grades, marks, and assessment results
  • Progress tracking data and performance analytics
  • AI-generated feedback on student work

Usage Data

  • Pages visited and features used within the platform
  • Device type, browser version, and operating system
  • IP address and approximate location (country level)
  • Referring website and session duration

Cookie Data

We use cookies for essential platform functionality and analytics. For full details, please see our Cookie Policy.

3. How We Use Your Data

We use your personal data for the following purposes:

Service Delivery

  • Creating and managing your account
  • Processing assignments, grading, and feedback
  • Generating AI-powered educational content and assessment
  • Tracking student progress and producing reports
  • Processing payments and managing subscriptions

Platform Improvement

  • Analysing usage patterns to improve features and performance
  • Identifying and fixing technical issues
  • Understanding how educators use the platform to inform development

Communication

  • Sending essential service notifications (e.g. password resets, billing confirmations)
  • Providing product updates and educational resources (with your consent)
  • Responding to support enquiries

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

  • Contract: Processing necessary to provide the Dolly platform and services you have signed up for, including account management, assignment processing, and AI-powered grading.
  • Consent: Where you have given explicit consent, such as receiving marketing communications or optional analytics tracking.
  • Legitimate interests: Processing necessary for our legitimate business interests, such as improving the platform, ensuring security, and preventing fraud. We always balance our interests against your rights and freedoms.

5. Children's Data

Dolly is an education platform that processes student work, including work submitted by children. We take the protection of children's data extremely seriously.

  • Student accounts are created and managed by teachers, tutors, or parents who act as the responsible adults for those students.
  • Teachers and parents are responsible for ensuring they have appropriate authority to create student accounts and submit student work for AI processing.
  • We do not knowingly collect personal data directly from children under 13 without parental or teacher involvement.
  • Student data is used solely for educational purposes: processing assignments, generating feedback, and tracking academic progress.
  • We apply additional safeguards to student data, including restricted access and purpose limitation.

6. Data Sharing and Third Parties

We share personal data with the following categories of third-party service providers, all of whom are bound by data processing agreements:

Anthropic (Claude AI)

Assignment content and student submissions are processed by Anthropic's Claude AI to generate educational feedback, grade work, and create teaching materials. Anthropic processes this data solely to provide the AI service and does not use it for training purposes.

Amazon Web Services (AWS)

All platform data is hosted on AWS infrastructure located in the United Kingdom (eu-west-2 region). This ensures your data remains within the UK for storage and processing.

Google Analytics and Google Tag Manager

We use Google Analytics (via Google Tag Manager) to understand how visitors use our marketing website. Analytics data is anonymised and used solely for understanding traffic patterns and improving the user experience. Google Tag Manager is loaded in a deferred manner to minimise impact on page performance.

We do not sell your personal data to any third party. We do not share student data with advertisers or marketing companies.

7. International Transfers

Your data is primarily stored and processed within the United Kingdom on AWS infrastructure. Where data is transferred outside the UK (for example, to Anthropic in the United States for AI processing), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the Information Commissioner's Office (ICO) and the UK International Data Transfer Agreement (IDTA).

8. Data Retention

We retain your personal data only for as long as necessary:

  • Account data: Retained for the duration of your active account, plus 30 days after deletion to allow for account recovery.
  • Student submissions and grades: Retained for the duration of the teacher's account. When a teacher deletes their account, associated student data is also removed.
  • Usage analytics: Aggregated and anonymised data may be retained indefinitely for platform improvement purposes.
  • Billing records: Retained for 7 years as required by UK tax legislation.

9. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct any inaccurate or incomplete personal data.
  • Right to erasure: You can request that we delete your personal data, subject to legal retention obligations.
  • Right to data portability: You can request your data in a structured, commonly used, and machine-readable format.
  • Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.
  • Right to object: You can object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, please contact us at support@godolly.ai. We will respond to your request within one month.

10. Cookies

We use cookies to ensure our platform functions correctly and to understand how visitors use our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact and Complaints

If you have any questions, concerns, or complaints about how we handle your personal data, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.