Privacy Policy
Table of Contents
Marqetir ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, share, and protect information when you use the Marqetir platform, website, and related services (collectively, the "Service").
We process personal data in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws. By using the Service, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
The data controller responsible for your personal data is:
If you have questions about how we process your personal data, please contact us using the details above or see Section 13.
2. Data We Collect
2.1 Account Information
When you register for an account, we collect:
- Full name
- Email address
- Password (stored in hashed form)
- Company/business name (optional)
- Billing address and payment information (processed by our payment provider)
2.2 E-Commerce Store Data
When you connect your e-commerce stores, we access:
- Store API credentials and access tokens
- Product catalogs (titles, descriptions, images, prices, SKUs, categories, attributes)
- Inventory levels and product variants
- Store configuration and settings
2.3 Marketplace Account Data
When you connect marketplace accounts, we collect:
- Marketplace API keys and authentication credentials
- Seller account identifiers
- Listing data and status information
- Category and attribute mappings
2.4 Usage Data
We automatically collect:
- IP address and approximate geolocation
- Browser type and version, device type, and operating system
- Pages visited, features used, and actions taken within the Service
- Timestamps of access and session duration
- Referring website or source
2.5 Communication Data
When you contact us or participate in surveys, we collect:
- Email correspondence and support tickets
- Feedback and survey responses
- Communication preferences
3. How We Use Your Data
We use your personal data for the following purposes:
3.1 Service Delivery
- Creating and managing your account
- Importing and processing your product data
- Generating AI-optimized marketplace listings
- Translating and localizing content for target markets
- Publishing and managing listings on connected marketplaces
- Processing payments and managing subscriptions
3.2 Service Improvement
- Analyzing usage patterns to improve features and user experience
- Training and improving our AI models using anonymized and aggregated data
- Identifying and fixing technical issues
- Developing new features and services
3.3 Communication
- Sending transactional emails (account confirmation, password reset, billing)
- Providing customer support
- Sending product updates and feature announcements (with your consent)
- Sending marketing communications (with your consent; you can opt out at any time)
3.4 Security & Compliance
- Detecting and preventing fraud, abuse, and security threats
- Complying with legal obligations
- Enforcing our Terms of Service
4. Legal Basis for Processing (GDPR Art. 6)
We process your personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Providing the Service | Performance of contract (Art. 6(1)(b)) |
| Processing payments | Performance of contract (Art. 6(1)(b)) |
| Sending marketing emails | Consent (Art. 6(1)(a)) |
| Analytics & service improvement | Legitimate interest (Art. 6(1)(f)) |
| Security & fraud prevention | Legitimate interest (Art. 6(1)(f)) |
| Legal obligations (e.g., tax records) | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interest, we have conducted a balancing test to ensure your rights and freedoms are not overridden. You may object to processing based on legitimate interest at any time.
5. Data Sharing & Third Parties
We do not sell your personal data. We share data only in the following circumstances:
5.1 Service Providers
We use trusted third-party services to operate the platform:
- Cloud Infrastructure: For hosting and data storage (EU-based servers)
- Payment Processing: To handle subscription payments securely (e.g., Stripe). We never store your full credit card details.
- AI Providers: To generate and optimize listing content. Product data sent to AI providers is processed under strict data processing agreements.
- Email Services: For transactional and marketing communications
- Analytics: To understand usage patterns and improve the Service
5.2 Marketplace Platforms
When you publish listings, we transmit your product data to your connected marketplaces via their APIs. This data transfer is necessary to provide the core Service and is governed by each marketplace's privacy policy and seller agreement.
5.3 Legal Requirements
We may disclose data when required by law, regulation, legal process, or governmental request, or to protect rights, property, or safety.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.
6. International Data Transfers
Your data is primarily stored on servers within the European Economic Area (EEA). When we transfer data outside the EEA (e.g., to AI service providers based in the US), we ensure adequate safeguards are in place, including:
- EU Standard Contractual Clauses (SCCs)
- Adequacy decisions by the European Commission
- Data Processing Agreements with all sub-processors
You may request details about the safeguards we use for international transfers by contacting us.
7. Data Retention
We retain your data only as long as necessary for the purposes described in this policy:
- Account data: Retained while your account is active and for 30 days after deletion request
- Product data: Retained while your account is active; deleted upon account closure (after a 30-day grace period)
- Billing records: Retained for up to 7 years as required by tax and accounting regulations
- Usage logs: Retained for up to 12 months for analytics and security purposes
- Support correspondence: Retained for up to 3 years after resolution
You can request earlier deletion of your data at any time, subject to legal retention requirements.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure storage of passwords using industry-standard hashing algorithms
- Encrypted storage of marketplace API credentials and tokens
- Role-based access controls for our team
- Regular security assessments and monitoring
- Incident response procedures for data breaches
While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights:
Right of Access (Art. 15)
Request a copy of all personal data we hold about you.
Right to Rectification (Art. 16)
Request correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17)
Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements.
Right to Restriction (Art. 18)
Request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability (Art. 20)
Receive your personal data in a structured, commonly used, machine-readable format and transfer it to another controller.
Right to Object (Art. 21)
Object to processing based on legitimate interest or for direct marketing purposes.
Right to Withdraw Consent (Art. 7(3))
Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
File a complaint with your local data protection authority (supervisory authority) if you believe your data protection rights have been violated.
To exercise any of these rights, contact us at . We will respond to your request within 30 days.
11. Children's Privacy
The Service is designed for business use and is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes:
- We will update the "Last Updated" date at the top of this page
- We will notify you via email or through the Service at least 30 days before changes take effect
- For significant changes, we may require you to re-acknowledge the updated policy
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
13. Contact & Data Protection
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:
We aim to respond to all data protection inquiries within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.