MRKT
Get started
Get startedSign in →

Legal

Privacy Policy

Last updated: June 29, 2026

MRKT ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have. It applies to all users of usemrkt.app and the MRKT mobile application worldwide.

Data controller: MRKT. Our registered legal entity and jurisdiction of incorporation are finalized as part of our company registration process; the confirmed entity name and address will be published here once registration is complete. In the meantime, contact privacy@usemrkt.app for the current controller details or any privacy request.

1. Data We Collect

1.1 Account Data

1.2 Creator Profile Data

1.3 Business Profile Data

1.4 Platform Activity

1.5 Technical Data

2. How We Use Your Data

We do not sell your personal data to third parties. We do not use your data to train third-party AI models.

2.1 Legal Basis for Processing (GDPR Article 6)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with an equivalent requirement, we rely on the following legal bases for each purpose above:

3. AI Processing Disclosure

Your data is processed by AI providers. MRKT uses third-party AI providers — currently Anthropic and OpenAI for text-based features (AI Strategist, content planning, growth advice, campaign matching) and Higgsfield for AI image/video generation in MRKT Studio — to power these features. When you use them, your messages and relevant profile context (such as your niche, follower counts, and recent activity), or your generation prompts for Studio, are sent to these providers to generate responses.

Data sent to AI providers is subject to their respective privacy policies. We contractually prohibit providers from using your data to train their foundational models. AI outputs may be generated based on patterns in your personal data.

AI-generated content is labelled within the Platform. You are not subject to legally significant automated decision-making solely on the basis of AI — a human review is always available for consequential decisions. You may opt out of AI-assisted matching by contacting privacy@usemrkt.app.

4. Instagram / Meta Data

When you connect your Instagram account, we receive and store: your Instagram user ID, username, follower count, profile picture URL, and media count. This data is used to verify your creator profile and improve campaign matching. We do not post to Instagram on your behalf. You may disconnect Instagram at any time from Profile → Settings, which removes your Instagram access tokens from our systems within 24 hours.

5. Cookies and Tracking

We use strictly necessary cookies for authentication (session management). We may also use analytics cookies to understand how the Platform is used. See our Cookie Policy for full details. You can manage your cookie preferences via the cookie consent banner or by emailing privacy@usemrkt.app.

6. Data Storage and Security

Your data is stored with Supabase (PostgreSQL hosted in the United States). We implement row-level security policies ensuring users can only access their own data. OAuth tokens are stored server-side and inaccessible to other users. We use TLS/HTTPS for all data in transit.

While we implement industry-standard security measures, no platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify you and relevant authorities within 72 hours of becoming aware.

7. International Data Transfers

Your data is stored and processed on infrastructure in the United States (Supabase/AWS) and processed by third-party providers operating globally, including Anthropic (US), OpenAI (US), Higgsfield (AI image/video generation), and Meta (WhatsApp Business API, if you enable WhatsApp notifications, and Instagram integration). By using MRKT, you acknowledge this international transfer.

We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses with our data processors where applicable. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with data transfer restrictions, these safeguards form the legal basis for the transfer.

8. Data Retention

9. Your Rights

Depending on your location, you have the following rights over your personal data:

You can exercise your right to access and right to deletion directly within the Platform via Account Settings → Privacy. For any other rights request, email privacy@usemrkt.app. We will respond within 30 days.

10. Marketing Communications

We may send you email notifications about platform activity (applications, messages, contract updates) and, if you have opted in, platform updates and product announcements. You can manage all email preferences in Account Settings → Notifications. You can unsubscribe at any time via the unsubscribe link in any email we send. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

11. Children's Privacy

MRKT is not intended for persons under 18. We do not knowingly collect personal data from children. If we become aware that a user is under 18, we will delete their account and associated data promptly. If you believe a minor has created an account, please contact privacy@usemrkt.app.

12. Changes to This Policy

We may update this Policy. Material changes will be notified via email or in-app notification at least 14 days before taking effect. The date at the top of this page reflects the most recent update. Continued use after the effective date constitutes acceptance.

13. Contact

For all privacy-related questions, rights requests, or complaints:
privacy@usemrkt.app