Privacy Policy

1. Our Roles in Data Processing

Under the Law of Ukraine "On Personal Data Protection" and the GDPR, Marrek acts as the Controller with respect to the account data of our business clients, and as a Processor / Service Provider with respect to the personal data of end consumers collected via messengers.

2. Legal Bases for Processing (GDPR)

We process data on the following legal bases:

Performance of a Contract — to provide access to the service.

Legitimate Interest — to ensure security, technical support and service improvement.

Legal Obligation — for accounting purposes.

Consent — for the use of optional cookies (Google Analytics, Microsoft Clarity).

3. Use of Cookies

Our website uses cookies. We use technically necessary cookies for authorization and sessions.

Also, with your explicit consent, we use analytics cookies and behavior-analysis tools (Google Analytics, Microsoft Clarity) to analyze site traffic and improve the interface. You can accept or decline analytics cookies via the banner on the site.

4. AI Processing (OpenRouter API)

Conversation content is transmitted to the OpenRouter API. We ensure confidentiality by configuring requests with the parameters zdr: true (Zero Data Retention) and data_collection: "deny".

Your consumers' data is not stored on AI providers' servers and is not used to train their models.

5. Data Subject Rights (GDPR)

You and your end users have the right to: access your data, rectify it, erase it (the right to be forgotten), restrict processing, data portability, withdraw consent at any time, and lodge a complaint with the relevant data protection supervisory authority.

6. California Specifics (CCPA)

We strictly comply with CCPA/CPRA requirements. We do not sell (Do Not Sell) and do not share (Do Not Share) personal information.

We use collected data solely within the scope of a direct business relationship to provide the services.

7. Retention Periods

Account and billing data: retained for as long as the account exists, and for 3 years after its deletion (for accounting purposes).

End-user conversations: for as long as the client requires to provide the service.

Backups: stored on Google Cloud servers for up to 90 days.

Logs: up to 90 days.

8. Data Deletion Instructions (Meta Data Deletion Instructions)

In accordance with Meta Developer Policies, end users may request deletion of their data (Instagram message history) by completing the following steps:

1. Go to your Facebook or Instagram account settings: Settings and Privacy → Apps and Websites.

2. Find the "Marrek" app and click "Remove". This will revoke our access.

3. Meta's system will automatically send us a deletion webhook (Callback URL), and we guarantee to delete all of your message history from our databases within 30 days.

You may also send a deletion request directly to our email: [email protected].