Privacy Policy

Who we are

Markie-X is provided by the operator of Markie-X ("we", "us"). For the information you put into your workspace, you (or the company you represent) decide what is processed and why; we process it to provide the service to you. Questions about this policy can be sent to hello@markiex.com.

Information we collect

Account information. When you sign up we collect your email address, a password (stored only in hashed form by our authentication provider) and the brand or company name you enter. If you sign up or sign in with Google, we receive your name, email address and profile picture from Google instead of a password; we do not receive your Google password or access to anything else in your Google account. We create a workspace for you with its own workspace code.

Brand and campaign content. Everything you add to build your brand and campaigns, including:

• brand details such as website address, industry, geography, company size, pricing model, sales motion, competitors, channels, guidelines, logos and colours;
• brand sources you provide (website links, pasted text, and uploaded PDF or image files) and the Brand DNA we derive from them;
• campaign briefs, questionnaire answers, stakeholder notes, selections and feedback, and attachments you upload to a generation;
• the plans, copy, key visuals, storyboards, decks and other material generated for you, and the "Brand Brain" learnings and brand facts built up from your campaigns.

Public website content. When you give us a website address, we fetch pages from that site (for example home, about, contact and legal pages), take a screenshot and extract text, colours and layout cues to build your brand profile. We also run web searches about your market and competitors to ground research-based plans.

Billing information. Payments are handled by Stripe. We store your Stripe customer and subscription identifiers, subscription status, your credit balance and a ledger of credit purchases and spending, together with the payment events Stripe sends us. We do not receive or store your full card number.

Usage information. For each AI request we record which AI model was used, token counts, credits charged and cost, so we can bill credits and keep the service running. Our servers also keep technical logs (such as IP address, request paths and error reports) for security and troubleshooting.

How we use information

• to create and secure your account and workspace, and keep you signed in;
• to generate marketing content, research and visuals from your inputs, and to keep your brand profile and Brand Brain up to date within your workspace;
• to process payments, grant and reset monthly credits, and apply credit limits;
• to send service emails: welcome, password reset, low-credit and payment-failed notices (we do not send marketing newsletters from the app);
• to diagnose failures, prevent abuse, and meet legal and accounting obligations.

We do not sell your personal information, and we do not use your brand or campaign content to train AI models. Your Brand Brain learns only from your own workspace and is not shared with other customers.

AI processing

To generate content we send the relevant parts of your inputs (brand profile, brief, answers, attachments and research) to large language and image models from providers such as Google (Gemini), OpenAI and Anthropic, routed through OpenRouter. These providers process the data to return a result under their own API terms. AI output can be inaccurate; please review it before use.

If troubleshooting is switched on for your workspace, we may temporarily store the full prompts sent to the model so our team can investigate problems. You can ask us to clear this log at any time.

Service providers

We share information only with providers that help us run Markie-X, and only as needed for their task:

• Supabase — database, authentication and private file storage;
• Google — sign-in, if you choose Google sign-in;
• Fly.io — application hosting;
• OpenRouter and the model providers it routes to — text and image generation;
• Stripe — subscriptions, plan upgrades and the billing portal;
• Resend — transactional email;
• Web search and page-fetching services (such as Serper, Tavily or Google Custom Search, and our crawling service) — researching your market and reading public web pages;
• Sentry and Langfuse, where enabled — error monitoring and AI request tracing.

Our administrators can see workspace details, usage and credit history to provide support, handle billing and keep the service secure; administrative actions are logged. We may also disclose information if required by law, or as part of a merger or sale of the business, subject to this policy.

International transfers

Our application is hosted in Singapore, and our service providers may process data in other countries, including the United States. Where information is transferred outside your country we rely on our providers' contractual and security commitments to protect it.

Cookies and local storage

We use a single essential session cookie (markiex.sid) to keep you signed in. It is encrypted, HTTP-only and lasts up to 7 days. We also use your browser's local storage to remember your light/dark theme and that you dismissed the cookie notice. We do not use advertising or third-party analytics cookies.

Retention

We keep your account and workspace content for as long as your account is active. Deleted campaigns go to a recycle bin where they can be restored until you remove them. When you delete your account, your workspace, its records and its stored files (logos, uploads and generated images) are permanently deleted; residual copies may remain in our providers' backups for a limited period before being overwritten. We keep billing and payment records for as long as required for tax and accounting purposes, and research results about public websites are cached for a short time to avoid repeated fetching.

Your rights and choices

Depending on where you are (including under Malaysia's Personal Data Protection Act 2010), you may have the right to access, correct or delete your personal data, to withdraw consent, and to object to certain processing. In the app you can:

• edit your brand details and remove stored brand facts in Settings;
• download a copy of your workspace data as JSON, including download links for your files, from Settings → Export my data;
• permanently delete your account and workspace from Settings → Delete account;
• manage or cancel your subscription through the Stripe billing portal.

For anything else, email hello@markiex.com. We may need to verify your identity before acting on a request.

Security

Passwords are hashed by our authentication provider, connections are encrypted in transit, file storage buckets are private, and forms are protected against cross-site request forgery. Generated images are shared using long-lived signed links that are hard to guess — treat these links as private. No system is perfectly secure, so please use a strong, unique password.

Children

Markie-X is a business service and is not intended for anyone under 18. We do not knowingly collect information from children.

Changes and contact

We may update this policy as the service changes. We will post the new version here with a new effective date, and for significant changes we will tell you by email or in the app. Contact us at hello@markiex.com.