Privacy Policy

Information we collect

• Account information. Email address, name, and authentication credentials, used to create and secure your account.
• Workspace content. The CRM records (contacts, companies, deals), posts, emails, images, and other content you or your organization add to Markowill. You control this data; we store and process it only to provide the service.
• Billing information. If you subscribe, your payment is handled by Stripe. We receive your subscription status, plan and billing period. We never receive or store your full card number.
• Integration credentials. When you connect a third-party account, the access tokens for it are stored server-side and used only to perform the actions you request.
• Push notification tokens. On mobile, a device token used solely to deliver the notifications you enable. Declining notification permission disables this entirely.
• Usage and diagnostic data. Standard server logs (timestamps, IP address, request metadata) kept for security and reliability.

How we use information

We use your data to operate Markowill: authenticating you, storing your workspace, sending communications you compose, generating AI-assisted content you request, processing your subscription, and delivering notifications you opt into. We do not sell personal data and we do not use your data for third-party advertising or cross-app tracking.

AI processing

Markowill's assistant is built on large language models run by third parties. When you use it, the prompt you write and the workspace content needed to answer it (for example the post, contact or brand details in scope) are transmitted to the model provider configured for your organization, solely to produce the output you asked for.

The providers we may route to are Moonshot AI (Kimi and Kimi Code), Anthropic, OpenAI, Zhipu AI (GLM), and Z.ai (GLM), operated by JINGSHENG HENGXING TECHNOLOGY PTE.LTD. Image and video generation is performed by Higgsfield. Each provider processes that data under its own terms. For Z.ai API processing, see its Data Processing Addendum. Administrators manage provider routing through the platform and organization AI settings.

We do not use your content to train models of our own, and we do not sell it or share it for advertising.

Community leaderboard

The leaderboard at markowill.com/leaderboard lets anyone submit marketing plays and vote on them. To do either you confirm an email address through a one-time link. We store that email, the display name and optional website you give, your submissions, your votes and reports, a hashed session token, and a hashed IP address used only for rate limiting. Emails and display names are never sold or used for advertising; display names appear publicly next to plays.

Submitted text is sent to Moonshot AI (Kimi Code) to check it against our publishing guidelines; if the check is inconclusive it is retried a few times. Moonshot does not use it to train models. Resend delivers sign-in links, publication decisions and, unless you opt out, a weekly note about your plays, and every weekly note carries a one-click unsubscribe link. Supabase stores all leaderboard data, and Netlify hosts the site and runs the functions that process your requests.

Leaderboard data is kept while your profile exists and is deleted, together with your ideas, votes and reports, when you ask us to at contact@markyagent.com. Rate-limit records (the hashed IP address) and sign-in links are short-lived technical records, kept only as long as needed for their purpose.

Service providers

Markowill runs on infrastructure and services that process data on our behalf:

• Supabase — database, authentication, file storage and serverless functions.
• Netlify — web hosting and content delivery, and, for visitors on the marketing site, approximate geolocation (derived from IP address) used only to select the currency shown for pricing. No location data is stored.
• Stripe — subscription payments and the billing portal.
• Resend — delivery of account and notification emails.
• Moonshot AI, Anthropic, OpenAI, Zhipu AI, Z.ai (JINGSHENG HENGXING TECHNOLOGY PTE.LTD), Higgsfield — AI model providers, as described above.
• Google Firebase — push notification delivery to mobile devices.
• Firecrawl — retrieving public web pages you point Markowill at, such as a brand site or a news source.
• Apollo — contact enrichment, only when you use an enrichment feature.

Optional integrations you connect yourself, such as Buffer, LinkedIn, Gmail, Google Calendar, Mailchimp, Instantly or Figma, exchange data with those services under their own privacy policies, and only after you authorize them. You can disconnect any of them at any time in Settings.

Data retention and deletion

Your data is retained while your account is active. You can request export or deletion of your account and its data at any time by contacting us at contact@markyagent.com. We honor deletion requests within 30 days, except where retention is legally required. Deleting your account removes your workspace content, including uploaded files, from our storage.

International transfers

The providers listed above operate in several countries, including outside the European Economic Area. Where your data is transferred outside your own country, it is transferred so that we can provide the service you have asked for, and it remains subject to this policy.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to your local data protection authority. In France that authority is the CNIL. Write to us at the address above and we will action your request.

Security

Data is encrypted in transit (TLS) and at rest, access is scoped by organization-level access controls, and credentials for connected integrations are stored server-side, never on your device.

Staff access

A small number of authorized Markowill personnel can access workspace content, including Markowill conversation history, through an internal administration console. This access exists to provide support, to investigate technical problems, and to respond to security incidents.

It is limited to a named allow-list of platform administrators. Opening a conversation is recorded in an internal audit log together with the administrator's identity and the time it happened. Staff can read this content but cannot use the assistant on your behalf. We do not access your content for any other purpose.

Children

Markowill is a business tool and is not directed at children under 16. We do not knowingly collect data from children.

Changes

We will post any changes to this policy on this page and update the effective date above.

Contact

Questions or requests: contact@markyagent.com.