← Back to MarqOps

Privacy Policy

Last updated: July 31, 2026

1. Introduction

MarqOps Inc. ("MarqOps," "we," "us," or "our") operates the MarqOps platform at marqops.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered marketing operations platform, including our website, applications, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Account Information

When you create an account through Google OAuth, we collect:

  • Full name
  • Email address
  • Profile picture (avatar URL)
  • Google account identifier

2.2 Brand and Business Data

When you create brand workspaces, you may provide:

  • Brand name, website URL, and description
  • Brand guidelines, color palettes, and style preferences
  • Brand assets such as logos and reference images
  • Content publishing credentials for integrations you explicitly connect

2.3 Analytics and Integration Data

When you connect third-party marketing accounts, we access and store:

  • Google Search Console: Search performance data including queries, clicks, impressions, CTR, and ranking positions (read-only access)
  • Google Analytics 4: Website traffic metrics including sessions, users, page views, bounce rate, and conversions (read-only access)
  • Google Ads: Campaign performance data including impressions, clicks, cost, and conversions (read-only access)
  • DataforSEO: Domain-level SEO metrics including organic traffic, keyword rankings, and backlink profiles

OAuth access tokens and refresh tokens for these integrations are stored securely on our servers with encryption at rest. We request only the minimum scopes necessary for read-only data access.

2.4 AI-Generated Content

We store content generated through the platform, including:

  • AI-generated blog posts and images
  • Chat conversations with the analytics AI assistant
  • Content generation prompts and metadata
  • Vector embeddings of your analytics data used for AI-powered insights

2.5 Billing Information

Payment processing is handled entirely by Stripe, Inc. We do not directly collect or store credit card numbers, bank account details, or other sensitive payment information. We receive from Stripe your subscription status, plan tier, and billing period dates. Please refer to Stripe's Privacy Policy for details on their data practices.

2.6 Usage Data

We automatically collect:

  • AI credit consumption and usage logs
  • Feature usage patterns and interactions
  • Browser type, device information, and IP address
  • Pages visited and time spent on the platform

3. How We Use Your Information

We use the collected information to:

  • Provide the Service: Deliver AI-powered creative generation, SEO content creation, analytics dashboards, and advertising tools
  • Cache and optimize: Store analytics data locally to reduce redundant API calls and improve performance
  • Power AI features: Generate vector embeddings of your analytics data to enable natural-language querying through our AI assistant
  • Process payments: Manage subscriptions, credit balances, and billing through Stripe
  • Improve the Service: Analyze usage patterns to enhance features, fix bugs, and develop new capabilities
  • Communicate: Send transactional emails related to your account, billing, and service updates
  • Ensure security: Detect and prevent fraud, abuse, and unauthorized access

4. Third-Party Services

We share data with the following categories of third-party service providers:

4.1 AI Model Providers

Your prompts, brand context, and content generation requests are sent to AI model providers including Google (Gemini), Anthropic (Claude via OpenRouter), and other model providers available through OpenRouter. These providers process your data to generate content. We recommend reviewing their respective privacy policies.

4.2 Infrastructure Providers

  • Supabase: Database hosting, authentication, and file storage (US-East region)
  • Vercel: Application hosting and edge network delivery

4.3 Marketing and Analytics Integrations

When you connect Google Search Console, Google Analytics 4, or Google Ads, your data is accessed through Google's official APIs under your authorization. We act as an intermediary and do not share your Google data with other third parties. DataforSEO provides supplementary domain analysis using publicly available data.

4.4 Payment Processing

Stripe processes all payment transactions. Your financial data is handled directly by Stripe and is subject to Stripe's security standards (PCI DSS Level 1).

4.5 Analytics

With your consent, we use Google Tag Manager and Google Analytics 4 to understand product usage and measure signup and purchase attribution. Optional analytics and advertising storage are denied by default until you make a choice.

5. Data Storage and Security

Your data is stored in Supabase-hosted PostgreSQL databases located in the United States (us-east-1 region). We implement the following security measures:

  • Row-Level Security (RLS): Database-level access controls ensure users can only access their own data
  • Encryption in transit: All data transmitted between your browser and our servers is encrypted via TLS/SSL
  • Encryption at rest: Database storage is encrypted at rest
  • OAuth token security: Google OAuth tokens are stored server-side with automatic refresh, never exposed to client-side code beyond the initial authentication flow
  • Access controls: Administrative access to production systems is restricted and logged

6. Data Retention

  • Account data: Retained for as long as your account is active
  • Analytics cache: Automatically expires based on source (4-24 hours) with a maximum age of 7 days
  • Generated content: Retained until you delete it or close your account
  • Chat history: Retained until you delete individual conversations or close your account
  • Usage logs: Retained for 12 months for billing reconciliation and service improvement
  • Account deletion: When you delete your account, all associated data is permanently removed through cascading database deletions, including brand workspaces, generated content, analytics data, chat history, and OAuth tokens

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate personal data
  • Deletion: Request deletion of your account and all associated data
  • Portability: Request your data in a machine-readable format
  • Withdrawal of consent: Disconnect third-party integrations at any time through your dashboard, revoking our access to those services
  • Objection: Object to certain processing activities

To exercise any of these rights, contact us at privacy@marqops.com.

8. International Data Transfers

If you access the Service from outside the United States, your data will be transferred to and processed in the United States where our servers are located. By using the Service, you consent to this transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

10. AI and Automated Decision-Making

MarqOps uses artificial intelligence to generate marketing content, analyze analytics data, and provide recommendations. Your brand data and analytics are processed by AI models to deliver these features. We do not use your data to train AI models. Your content and analytics data are processed solely to provide the Service to you and are not used to improve third-party AI models.

11. Cookies and Tracking

We use the following types of cookies and similar technologies:

  • Essential cookies: Required for authentication and session management (Supabase auth tokens)
  • Analytics cookies: Google Tag Manager and Google Analytics 4, enabled only after consent
  • Advertising cookies: Google conversion measurement, enabled only after consent

You can accept or reject non-essential cookies with equal prominence on your first visit and reopen Cookie choices from the website footer at any time. Disabling essential cookies will prevent you from signing in or using secure account features.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

MarqOps Inc.
Email: privacy@marqops.com
Website: marqops.com