Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name
• Password (encrypted)
• Company/product information you provide

Usage Data

We automatically collect:

• IP address and location data
• Browser type and version
• Pages visited and time spent
• Features used and interactions
• Content you generate and analyze
• Campaign performance metrics

Third-Party Data

For AI-powered features, we process:

• Website content you submit for analysis
• Social media profiles you authorize
• Competitive data you request analysis on

2. How We Use Your Information

We use collected information for:

• Providing and improving Mark's services
• Generating AI-powered strategy and content
• Personalizing your experience
• Communicating about service updates and support
• Analyzing usage patterns to improve features
• Complying with legal obligations
• Detecting and preventing fraud or abuse
• Sending promotional emails (with opt-out capability)

3. Data Sharing and Disclosure

We share information with:

Service Providers

• Supabase - Database and authentication
• Anthropic Claude - AI content generation (with privacy protections)
• Stripe - Payment processing
• SendGrid/Email Provider - Email delivery

Legal Requirements

We may disclose information if required by law, court order, or to protect our rights or users' safety.

Business Transfers

In case of merger, acquisition, or bankruptcy, your information may be transferred as part of that transaction.

We do not sell or rent your personal data to third parties.

4. AI and Content Generation

When you use Mark's AI features, we send your product information and requests to Anthropic's Claude API. This data:

• Is processed to generate strategy and content
• May be used by Anthropic to improve their AI models (see Anthropic's policy)
• Should not contain sensitive personal data
• Is retained for your service records and improvement

We recommend not submitting sensitive customer data, passwords, or payment information through Mark's AI features.

5. Data Retention and Deletion

Retention Periods

We retain your information for:

• Active accounts: Duration of your service
• After cancellation: 30 days (to allow data recovery)
• Generated content: Retained in your workspace for your access and export
• Analytics data: 12 months for historical analysis and improvement
• Usage logs: 90 days for security and troubleshooting
• Legal/compliance: As required by applicable law (e.g., tax records)

How to Request Deletion

You have the right to request deletion of your data at any time:

• Self-serve: Delete your account via account settings (will delete your profile, products, and content within 30 days)
• Request assistance: Email privacy@mark.app to request immediate deletion

Right to Be Forgotten (GDPR)

If you are an EU resident or protected under similar data protection laws, you have the right to be forgotten. Upon your deletion request:

• Your personal data (name, email, account info) will be deleted within 30 days
• Generated content will be deleted unless you request export first
• Analytics data will be anonymized (we will not retain any identifying information)
• We may retain aggregated, anonymized data for service improvement
• We will confirm deletion completion within 30 days of your request

Note: If you have a paid subscription, we may retain minimal billing information (last 4 digits of payment method, transaction dates) as required by law and for accounting purposes, but this will not include personal identifiers.

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data (right to be forgotten)
• Portability: Export your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications
• Restrict: Limit how we use your data

To exercise these rights, email us at privacy@mark.app.

7. Cookies and Tracking

We use cookies for:

• Authentication and session management
• Preference storage (UI settings, theme)
• Analytics (see our Cookie Policy for details)

See our Cookie Policy for more information.

8. Security

We implement industry-standard security measures:

• HTTPS encryption for all data in transit
• Encrypted password storage (bcrypt)
• Regular security audits
• Access controls and authentication
• Data backups for disaster recovery

While we take security seriously, no system is 100% secure. Please use a strong password and keep your account credentials confidential.

9. International Data Transfers

Mark operates globally. Your data may be transferred to, stored in, and processed in countries other than your country of residence, including the United States. These countries may have data protection laws different from your home country. By using Mark, you consent to this transfer.

For EU users: We comply with GDPR. Data transfers include appropriate safeguards (Standard Contractual Clauses).

10. GDPR & CCPA Compliance

GDPR (Europe)

If you're an EU resident, you have additional rights under GDPR, including the right to data portability and to object to processing. We process personal data based on your consent (account creation) or legitimate business interests.

CCPA (California)

California residents have the right to know, delete, and opt-out of the sale of their personal information. We do not sell personal information.

11. Children's Privacy

Mark is not intended for users under 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect information from children. If we learn we've collected data from a child, we will delete it promptly.

12. Third-Party Links

Mark may contain links to third-party websites and services. This Privacy Policy does not apply to external sites. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy periodically. We'll notify you of material changes via email or a prominent notice on our website. Your continued use of Mark constitutes acceptance of changes.

14. Contact Us

For privacy questions or to exercise your rights, contact us at:

• Email: privacy@mark.app
• Website: mark.app