Privacy policy

1.1 Personal Information You Provide

• Account Information: Full name, email address, phone number, password (hashed)
• Business Information: Company name, industry, company size, company role, marketing channels, monthly ad spend, team size, website URL, business description
• Profile Information: Avatar or logo, timezone, language preferences, referral source (how you found us), account type (business, agency, or individual)
• Payment Information: Billing name and address processed through Stripe. We do not store credit card numbers — all payment data is held by Stripe under their security controls.
• Two-Factor Authentication: If enabled, we store your 2FA method and a hashed secret.
• Waitlist Information: If you signed up for our waitlist, we collected your full name, email, stated interest, desired outcome, IP address, browser user-agent, and referral source.

1.2 Information We Collect Automatically

• Usage Data: Features used, pages visited, campaign actions, session duration
• Technical Data: IP address, browser type and version, operating system, device identifiers, session tokens
• AI Interaction Data: Prompts you submit, AI-generated responses, conversation history, and artifacts you create or edit
• Knowledge Base Data: Documents, files, and other content you upload for AI processing and retrieval
• Performance Data: Response times, error logs, and system performance metrics
• Cookie and Local Storage Data: Session identifiers, user preferences, and onboarding progress stored in browser local storage

1.3 Information from Third-Party Services

When you use the Service, certain data may pass through or be collected by our third-party service providers:

• Stripe — payment processing and subscription management
• Supabase — database hosting, authentication, and file storage
• Anthropic (via OpenRouter) — AI content generation (Claude models)
• Voyage AI — text embedding generation for knowledge base search
• Cohere — semantic reranking of search results
• Tavily — web search used in AI research tasks
• PostHog — product analytics and usage event tracking (data routed to EU region servers)
• Facebook Pixel — advertising performance tracking and audience measurement
• Intercom — in-app customer support messaging
• Resend — transactional email delivery (welcome emails, notifications)
• Langfuse — LLM observability and AI pipeline tracing (anonymized)

2.1 Service Delivery

• Provide and operate the MarketerX platform and all its features
• Process your subscription payments and manage your account lifecycle
• Generate AI-powered marketing content, research reports, personas, and other outputs based on your inputs
• Personalize AI responses and recommendations to your business context
• Index and search your uploaded knowledge base content

2.2 Communication

• Send transactional emails (account confirmation, password reset, subscription receipts)
• Respond to support requests and inquiries
• Notify you of service updates, downtime, or changes to these policies

2.3 Analytics and Improvement

• Analyze usage patterns to identify bugs and improve platform performance
• Develop new features and improve AI capabilities using aggregated, anonymized data
• Track product engagement to understand how the Service is used

2.4 Security and Compliance

• Detect and prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service
• Meet legal obligations and respond to lawful requests from authorities

2.5 Marketing and Advertising

• Measure the performance of our advertising campaigns via Facebook Pixel
• We do not sell your personal data to third parties for their own marketing purposes.

4.1 What We Use

• Session Cookies: Required for authentication and keeping you logged in.
• Local Storage: Used to persist onboarding progress, user preferences, and session state between page loads.
• PostHog Analytics: We use PostHog to track feature usage, page views, and click events. PostHog data is routed to EU-based servers. PostHog may set cookies for session identification.
• Facebook Pixel: We use the Facebook Pixel to measure ad campaign performance and build advertising audiences. This tracks page views and specific conversion events.
• Intercom: Intercom sets cookies to identify you for customer support conversations.

4.2 Your Choices

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service, including your ability to remain logged in. Most modern browsers allow you to:

• View and delete existing cookies
• Block cookies from specific sites
• Configure settings to notify you when cookies are set

To opt out of Facebook advertising tracking, visit facebook.com/ads/preferences. To opt out of PostHog analytics, contact us at support@marketerx.com.

5.1 Where Your Data Is Stored

• Primary Database: Supabase (PostgreSQL with Row Level Security), ensuring each user can only access their own data.
• Session State: Redis, with a 4-hour time-to-live. An in-memory fallback is used when Redis is unavailable.
• File Storage: Supabase Storage for uploaded documents and images.

5.2 Security Measures

• All data is encrypted in transit (TLS) and at rest.
• Authentication is handled by Supabase Auth with support for two-factor authentication.
• Row Level Security policies at the database layer enforce strict per-user data isolation.
• We conduct regular security reviews and vulnerability assessments.

5.3 Limitations

No method of transmission over the internet or electronic storage is 100% secure. While we employ industry-standard safeguards, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

7.1 Access

You can view your personal information through your account dashboard. For a full data export, contact support@marketerx.com.

7.2 Correction

Update your profile, business information, and contact details at any time through the account settings page.

7.3 Deletion

To request deletion of your account and all associated data:

1. Email support@marketerx.com with the subject line: Account Deletion Request - [Your Email]
2. Include your account email and confirmation that you want to delete your account.
3. We will process your request within 30 days.

Note: Some data may be retained for legal or regulatory compliance purposes even after deletion (e.g., billing records).

7.4 Data Export

You can export your data from the platform at any time, including research reports, marketing assets, conversation history, and business profiles. We strongly recommend exporting your data before canceling your subscription.

7.5 Opt-Out of Analytics

To opt out of PostHog analytics tracking, contact support@marketerx.com and we will apply a suppression flag to your account.