In order to ensure transparency and give you more control over your personal data, this Privacy Policy explains how Marka and our affiliates ("Marka", "we", "our", or "us") collect, use, disclose, protect, and retain personal data when you browse https://marka.social, create an account, connect social platforms, generate marketing content, approve or publish campaigns, purchase a subscription, contact us, or otherwise interact with us. "Personal data" means information that can be used, alone or together with other information, to identify a living person.
Last updated
May 26, 2026
You are not legally obligated to provide personal data to us, and you confirm that providing personal data is at your own free will. Nothing in this Privacy Policy is intended to limit any statutory right, remedy, or means of enforcement available to you.
We may update this Privacy Policy from time to time. If we make significant changes to how we use personal data, we will notify you by posting a notice on the Website or by other appropriate means.
Table of contents
- What information we collect, why we collect it, and how it is used
- How we protect and retain your personal data
- How we share your personal data
- Additional information regarding transfers of personal data
- Your privacy rights
- Use by children
- How can I delete my account?
- Interaction with third-party products
- Log files
- Analytic tools
- Specific provisions applicable under California privacy law
- How to contact us
When you browse or visit the Website
Information we collect
- IP address, browser type, device type, operating system, pages visited, referring and exit pages, timestamps, cookie identifiers, and similar technical information.
- Cookie preferences and information collected through analytics, diagnostics, pixels, tags, local storage, and similar technologies where enabled.
Why we collect it
- Operate, secure, monitor, and improve the Website.
- Understand traffic, diagnose errors, measure performance, and improve product messaging.
- Support marketing measurement and relevant advertising where those tools are enabled.
Third parties with whom we may share it
- Hosting and infrastructure providers such as Vercel and Supabase.
- Security, diagnostics, analytics, and advertising measurement providers such as Sentry, Google, Meta, or similar providers where configured.
Consequences of not providing the information
Some Website features may not work correctly, preferences may not be remembered, and we may be unable to analyze or secure the Website effectively.
When you subscribe to emails or contact us
Information we collect
- Full name, email address, company name, role, phone number if provided, message contents, support request details, and any files or context you choose to send.
Why we collect it
- Respond to questions, provide support, troubleshoot account or platform connection issues, and send requested updates.
- Send newsletters, product updates, onboarding messages, and marketing communications where permitted.
Third parties with whom we may share it
- Email delivery, CRM, customer support, hosting, and infrastructure providers.
- Internal operators who need access to respond to the request.
Consequences of not providing the information
We may be unable to respond, provide support, send updates, or maintain a business relationship with you.
When you create an account, log in, or use the dashboard
Information we collect
- Name, email address, authentication identifiers, session identifiers, workspace membership, account settings, preferences, and acceptance of terms.
- Marketing profile information such as brand name, website URL, target audience, tone, offers, colors, campaign preferences, and approval settings.
Why we collect it
- Create and secure your account, authenticate access, manage workspaces, and personalize the dashboard.
- Build your Marketing Profile and Brand DNA so generated drafts are aligned with your business.
Third parties with whom we may share it
- Authentication, database, storage, hosting, email, and security providers such as Supabase, Vercel, Sentry, and email providers where configured.
Consequences of not providing the information
We cannot create or secure your account, maintain your workspace, or provide the dashboard features.
When you scan a website or upload brand material
Information we collect
- Website URL, public page content, metadata, headings, calls to action, images, social links, logo candidates, colors, uploaded brand assets, screenshots, brand books, reference files, and design documents.
- Derived Brand DNA, creative notes, suggested campaign angles, and quality scorecards generated from the material.
Why we collect it
- Analyze your public brand presence and create a reusable brand context.
- Generate drafts, storyboards, captions, visuals, campaign plans, and recommendations requested by you.
- Improve the quality, relevance, and consistency of user-facing Marka workflows.
Third parties with whom we may share it
- Hosting, storage, database, and security providers.
- AI generation providers, including OpenAI where configured, only as needed to provide requested generation, review, or quality workflows.
Consequences of not providing the information
We cannot scan your brand, create a Marketing Profile, generate relevant drafts, or use uploaded assets in requested creative work.
When you connect social or creator platforms
Information we collect
- Connected account identifiers, display names, profile images, account labels, granted scopes, token expiry, refresh status, provider IDs, and safe account metadata.
- Depending on the provider and permissions granted, channel or profile metadata, post or video identifiers, media metadata, analytics snapshots, comments, message metadata, page or organization IDs, and publishing eligibility signals.
- For Google and YouTube, this may include Google account profile fields returned by granted OAuth scopes, YouTube channel metadata, and YouTube upload-readiness data needed for approved workflows.
Why we collect it
- Show which account is connected and which permissions were granted.
- Prepare, validate, schedule, publish, or analyze content only for workflows requested by the user.
- Maintain provider review evidence, permission boundaries, and approval-first publishing controls.
Third parties with whom we may share it
- The relevant connected platform, such as Google, YouTube, Meta, Facebook, Instagram, Threads, TikTok, LinkedIn, X, or Reddit.
- Hosting, database, storage, security, queueing, and infrastructure providers needed to operate the connected workflow.
Consequences of not providing the information
We cannot connect the provider account, display connected-account status, validate platform rules, sync analytics, or prepare approved publishing workflows.
When you create, approve, schedule, or publish content
Information we collect
- Prompts, draft text, captions, storyboard scenes, generated images or videos, thumbnails, validation results, review notes, approvals, rejection reasons, scheduled jobs, publishing jobs, provider responses, and generated media metadata.
Why we collect it
- Create requested marketing content and keep drafts reviewable before publication.
- Validate platform requirements, preserve approval records, schedule approved work, publish through connected accounts when enabled, and provide analytics after publication.
- Diagnose failures, prevent duplicate posting, enforce safety gates, and support auditability.
Third parties with whom we may share it
- AI generation, media processing, hosting, storage, database, queueing, and diagnostics providers.
- Connected platforms only when you approve a workflow that requires platform interaction.
Consequences of not providing the information
We cannot create, review, schedule, publish, troubleshoot, or measure the requested campaign work.
When you purchase or manage a subscription
Information we collect
- Name, email address, billing contact details, subscription selections, credits, invoices, transaction metadata, and payment status.
- Payment card, bank, or financial details may be processed by a payment provider where payments are enabled; Marka does not need to store full payment card numbers.
Why we collect it
- Perform the agreement with you, manage credits and subscription access, process payments, issue invoices, prevent fraud, and provide customer support.
Third parties with whom we may share it
- Payment processors, billing providers, tax and accounting providers, hosting, database, and infrastructure providers.
Consequences of not providing the information
We cannot process payment, provide paid features, issue invoices, manage credits, or perform the subscription agreement.
When we meet you at events, receive referrals, or interact on social media
Information we collect
- Full name, email address, phone number, company name, job title, social profile, business-card details, and any other information you choose to share.
- Information from lawful business sources such as lead-generation providers, referrals, public company pages, or social media interactions.
Why we collect it
- Establish a business connection, respond to requests, send relevant marketing communications, and discuss Marka products or services.
Third parties with whom we may share it
- CRM, email, analytics, advertising, and sales operations providers where configured.
Consequences of not providing the information
We may be unable to respond, establish a business relationship, or send requested or permitted marketing communications.
Additional use of personal data
We may use the personal data described above to detect, prevent, investigate, and prosecute fraud, abuse, unauthorized access, security incidents, spam, platform-policy violations, or other illegal activity; to identify and repair errors; to conduct audits; to comply with applicable laws, investigations, court orders, regulator requests, law enforcement requests, and provider review obligations; and to exercise or defend legal claims.
We may anonymize, aggregate, or de-identify personal data so that it no longer identifies a specific person. We may use and disclose that anonymous or aggregated information without restriction, including to improve Marka, measure reliability, and understand product usage.
Google and YouTube user data
Marka uses Google and YouTube user data only to provide or improve user-facing Marka features, including authentication, connected account display, channel selection, draft preparation, validation, approval workflows, scheduling preparation, and approved upload-job execution when enabled. Marka does not sell Google user data, use it for targeted advertising or retargeting, use it for credit or lending decisions, create unrelated databases from it, broker or resell it, or use it to train generalized AI models.
Google user data is not shared with third parties except service providers necessary to operate the requested user-facing workflow, such as hosting, storage, security, and infrastructure providers, and only under appropriate confidentiality and data protection controls. Marka's use and transfer of Google user data follows the Google API Services User Data Policy, including the Limited Use requirements.
OAuth tokens and connected platform security
OAuth tokens and provider secrets are stored server-side and are designed to be encrypted at rest. Production token exchange requires a valid token encryption key. Secrets are not displayed in the user interface, support reports, screenshots, or tracked source files. Connected platform data is used only for the account, dashboard, draft, approval, scheduling, publishing, analytics, or support workflow requested by the user.
How we protect and retain your information
We use technical, organizational, and security measures designed to protect personal data, including authentication controls, server-side token handling, encryption-oriented token storage, role-based access, logging discipline, provider permission boundaries, and review gates before publishing. No security method is perfect, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed without authorization.
We retain personal data for as long as needed to provide Marka, maintain accurate records, resolve support requests, comply with legal, tax, accounting, security, fraud-prevention, dispute-resolution, and provider audit obligations, and enforce our agreements. Google, YouTube, and other connected platform records are deleted or de-identified within 30 days after a verified deletion request is completed unless retention is required for security, fraud prevention, legal compliance, dispute resolution, or provider audit obligations. Cookie retention is described in our Cookies Policy.
How we share your personal data
- With service providers and partners that help us operate Marka, including hosting, database, storage, authentication, email, support, analytics, diagnostics, AI generation, payment, security, and infrastructure providers.
- With connected platforms when you authorize a platform connection or request a workflow that requires provider interaction, such as account display, analytics sync, upload preparation, publishing, comment handling, or message workflows.
- With regulators, courts, competent authorities, law enforcement, government agencies, or platform review teams where required or reasonably necessary to comply with law, enforce our terms, prevent fraud, address security, or protect rights, property, safety, and platform integrity.
- With actual or potential buyers, investors, lenders, successors, or advisers if we sell, transfer, finance, merge, reorganize, or consider transferring all or part of our business, shares, or assets.
- With others when you direct us to share information, consent to sharing, or opt in to optional services or integrations.
Where we receive requests for information from law enforcement, regulators, or platform operators, we validate those requests before disclosing personal data where legally permitted.
International transfers
We may transfer personal data to countries other than the country where you are located, including the United States, Israel, the European Economic Area, or other locations where we, our affiliates, service providers, or connected platforms operate. Where required, we use appropriate safeguards designed to protect personal data in connection with these transfers.
Your privacy rights
Depending on your location and applicable law, you may have rights to access, correct, delete, receive a copy of, restrict, object to, or withdraw consent for the processing of your personal data. You may also have the right to opt out of marketing communications and certain advertising-related sharing. We may need to verify your identity before fulfilling a request.
You can unsubscribe from marketing emails through the unsubscribe link where available, revoke connected platform permissions in the relevant provider account settings, and send privacy requests to info@marka.social.
Use by children
Marka is not intended for children under 18, and we do not knowingly collect personal data from children under 18. If you are under 18, do not provide personal data without involvement of a parent or guardian. If we become aware that personal data was provided by a child in violation of applicable law, we may delete it. If you believe we may have such information, contact us at info@marka.social.
How can I delete my account?
You may request deletion by emailing info@marka.social from the email address associated with your account or by following the instructions on our User Data Deletion page. Include the account email and the connected provider names you want removed, such as Meta, TikTok, YouTube, LinkedIn, X, Reddit, or Google. Do not send passwords, OAuth codes, access tokens, or private account values.
If your account is deleted, the account relationship and local Marka records tied to the verified request will be deleted or de-identified unless retention is required for legal, security, fraud-prevention, dispute-resolution, tax, accounting, or provider audit reasons. Content already published to third-party platforms may remain available on those platforms unless you remove it there or the platform removes it.
Interaction with third-party products
Marka enables interaction with third-party websites, APIs, mobile applications, platforms, and products that we do not own or control, including Google, YouTube, Meta, Facebook, Instagram, Threads, TikTok, LinkedIn, X, Reddit, payment providers, and AI generation providers. We are not responsible for the privacy practices, security practices, or content of third-party services. Review each third-party service's terms and privacy policy before using it.
Log files
We use log files and event records. These may include IP address, browser type, internet service provider, device information, operating system, date and time stamp, referring and exit pages, clicked pages, request paths, error details, provider status codes, and other information your browser, device, or connected workflow sends to us. We use this information to administer Marka, analyze trends, diagnose issues, protect security, and understand how users move through the Website and dashboard.
Analytic tools
Marka may use analytics, diagnostics, and measurement tools to understand Website and dashboard usage, improve performance, measure campaigns, and diagnose errors. These tools may include Sentry for error and performance monitoring, and, where configured, Google Analytics, Google Signals, Meta pixels or SDKs, or similar advertising and measurement technologies. We may remove or add analytics tools over time.
You can limit analytics and advertising technologies through browser settings, device settings, cookie controls, industry opt-out tools, and provider-specific controls where available. Disabling these tools may affect analytics, preferences, security diagnostics, or some Website functionality.
Specific provisions applicable under California privacy law
California residents may have rights to know what categories of personal information we collect, use, disclose, sell, or share; request access to specific pieces of personal information; request deletion or correction; opt out of sale or sharing where applicable; limit use of sensitive personal information where applicable; and not be discriminated against for exercising privacy rights.
We do not sell personal information for money. Where advertising, analytics, or social media measurement tools are enabled, certain disclosures may be considered "sharing" under California privacy law. You may contact us to opt out of such sharing, and we will process the request in accordance with applicable law.
Do Not Track ("DNT") is a browser privacy preference. Because there is no single accepted standard for DNT, our response may depend on the browser signal and the technologies enabled on the Website. We will honor legally required opt-out preference signals where applicable.
If you are a California resident under 18 and a registered user, you may request removal of content or personal data you publicly posted. Removal may not ensure complete deletion where the content was copied, archived, cached, published on third-party platforms, or where law does not require removal.
Contact us
If you have questions, concerns, complaints, or privacy requests, contact us at info@marka.social.