Privacy Policy
Last updated: April 2026
Introduction
Mark ("we," "us," "our," or "Company") operates the Mark website and application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name
- Password (encrypted)
- Company/product information you provide
Usage Data
We automatically collect:
- IP address and location data
- Browser type and version
- Pages visited and time spent
- Features used and interactions
- Content you generate and analyze
- Campaign performance metrics
Third-Party Data
For AI-powered features, we process:
- Website content you submit for analysis
- Social media profiles you authorize
- Competitive data you request analysis on
2. How We Use Your Information
We use collected information for:
- Providing and improving Mark's services
- Generating AI-powered strategy and content
- Personalizing your experience
- Communicating about service updates and support
- Analyzing usage patterns to improve features
- Complying with legal obligations
- Detecting and preventing fraud or abuse
- Sending promotional emails (with opt-out capability)
3. Data Sharing and Disclosure
We share information with:
Service Providers
- Supabase - Database and authentication
- Anthropic Claude - AI content generation (with privacy protections)
- Stripe - Payment processing
- SendGrid/Email Provider - Email delivery
Legal Requirements
We may disclose information if required by law, court order, or to protect our rights or users' safety.
Business Transfers
In case of merger, acquisition, or bankruptcy, your information may be transferred as part of that transaction.
We do not sell or rent your personal data to third parties.
4. AI and Content Generation
When you use Mark's AI features, we send your product information and requests to Anthropic's Claude API. This data:
- Is processed to generate strategy and content
- May be used by Anthropic to improve their AI models (see Anthropic's policy)
- Should not contain sensitive personal data
- Is retained for your service records and improvement
We recommend not submitting sensitive customer data, passwords, or payment information through Mark's AI features.
5. Data Retention
We retain your information for:
- Active accounts: Duration of service plus 30 days after cancellation
- Generated content: Retained in your workspace for access or export
- Analytics data: 12 months for historical analysis
- Legal/compliance: As required by applicable law
You can request data deletion at any time via your account settings.
6. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request deletion of your data (right to be forgotten)
- Portability: Export your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications
- Restrict: Limit how we use your data
To exercise these rights, email us at privacy@mark.app.
7. Cookies and Tracking
We use cookies for:
- Authentication and session management
- Preference storage (UI settings, theme)
- Analytics (see our Cookie Policy for details)
See our Cookie Policy for more information.
8. Security
We implement industry-standard security measures:
- HTTPS encryption for all data in transit
- Encrypted password storage (bcrypt)
- Regular security audits
- Access controls and authentication
- Data backups for disaster recovery
While we take security seriously, no system is 100% secure. Please use a strong password and keep your account credentials confidential.
9. International Data Transfers
Mark operates globally. Your data may be transferred to, stored in, and processed in countries other than your country of residence, including the United States. These countries may have data protection laws different from your home country. By using Mark, you consent to this transfer.
For EU users: We comply with GDPR. Data transfers include appropriate safeguards (Standard Contractual Clauses).
10. GDPR & CCPA Compliance
GDPR (Europe)
If you're an EU resident, you have additional rights under GDPR, including the right to data portability and to object to processing. We process personal data based on your consent (account creation) or legitimate business interests.
CCPA (California)
California residents have the right to know, delete, and opt-out of the sale of their personal information. We do not sell personal information.
11. Children's Privacy
Mark is not intended for users under 13 (or the age of digital consent in your jurisdiction). We do not knowingly collect information from children. If we learn we've collected data from a child, we will delete it promptly.
12. Third-Party Links
Mark may contain links to third-party websites and services. This Privacy Policy does not apply to external sites. We encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy periodically. We'll notify you of material changes via email or a prominent notice on our website. Your continued use of Mark constitutes acceptance of changes.
14. Contact Us
For privacy questions or to exercise your rights, contact us at:
- Email: privacy@mark.app
- Website: mark.app