Privacy Policy

What we collect

• Account data: email address, name and avatar (if you sign in with a provider), and your hashed credentials (managed by Supabase Auth).
• Your questions and the analyses generated for you (saved threads) when you are signed in.
• Billing data: Stripe customer and subscription identifiers, plan, status and renewal date. We never see or store your card number; Stripe does.
• Technical data: IP address (used for rate limiting and abuse prevention), browser type, and basic logs.

How we use it

To provide and secure the Service, answer your questions, manage subscriptions, enforce usage limits, prevent fraud and abuse, and improve reliability. We do not sell your personal data and do not use your questions for advertising.

Service providers

We share data only with providers needed to run Markolis:

• Supabase: authentication and database.
• Stripe: payments and billing portal.
• Vercel and Railway: application hosting.
• OpenRouter and the language-model providers it routes to: the text of your question and relevant market context is sent to generate the written analysis. Do not include personal or confidential information in your questions.

Retention and your rights

Saved threads are kept until you delete them (Profile → Data) or delete your account. Billing records are retained as required for tax and accounting. Depending on where you live you may have rights to access, correct, export or delete your data and to object to certain processing; contact us to exercise them.

Cookies

We use only essential cookies and local storage for authentication and session management. We do not use advertising cookies.

Security

Data is encrypted in transit and at rest by our providers, and database access is restricted per user with row-level security. No system is perfectly secure; we will notify affected users of breaches as required by law.

Children and changes

The Service is not intended for anyone under 18. We may update this policy and will post the new date above.