🇮🇹 Versione italiana (prevalente / prevailing)
MARCØ — Privacy Policy
Last updated: 2026-09-11 Version: 1.0
This is a courtesy English translation provided for convenience. In case of any conflict or discrepancy, the Italian version (Informativa Privacy) prevails.
1. Who we are
MARCØ ("we", "the Service") is a SaaS platform operated by Telos Intelligence LLC, a limited liability company organised in the State of Wyoming (USA). For any question about this policy, contact [email protected].
Our Data Protection Officer (DPO) can be reached at [email protected].
2. What data we collect
2.1 Registration and billing data
- Name, email, phone number, VAT number, business address (for invoicing)
- Stripe customer ID (card data is handled by Stripe; MARCØ never sees it)
- Internal user ID (authentication)
2.2 Service content
- Brand kits, generated websites, social posts, analytics reports — owned by you; MARCØ acts as processor
- Retained for the duration of the subscription + a 30-day grace period after cancellation
2.3 Federated telemetry (opt-in)
Only if you enable sharing (default OFF for Growth/Agency/WL; default ON for Starter as a trade-off for the low price — always revocable):
- A hash of your tenant_id (NOT reversible)
- Anonymous metadata: agent used, prompt version, success/error, duration, cost
- Aggregated with k-anonymity ≥5 + differential privacy (Laplace noise)
- We do NOT collect content, IP addresses, customer names, or personal images
2.4 Cookies and trackers
See the Cookies section at the bottom of this page + the cookie banner.
3. Why we process your data (legal bases)
| Processing | Legal basis (GDPR Art. 6) |
|---|---|
| Service delivery | Contract (Art. 6.1.b) |
| Billing | Contract + tax obligations |
| Federated telemetry | Explicit consent (Art. 6.1.a) |
| Anonymous aggregated analytics | Legitimate interest (Art. 6.1.f) |
| Transactional emails | Contract |
| Marketing emails | Explicit double opt-in consent |
| Security + audit log | Legitimate interest |
4. How long we keep your data
| Category | Retention |
|---|---|
| Account + content | Subscription duration + 30-day grace |
| Audit log | 12 months |
| Federated telemetry (anonymous) | 24 months |
| Stripe records | 7 years (tax obligations) |
5. Who we share data with (sub-processors)
| Sub-processor | Purpose | Data location | Safeguards |
|---|---|---|---|
| Cloudflare Inc. | App access tunnel, asset storage and database backup (R2), site deploy (Pages), WAF | Global edge / EU (R2) | DPA + SCC |
| OpenRouter Inc. | Text models (z-ai GLM, MiniMax) | US | SCC |
| fal.ai | Image and video generation | US | DPA |
| Higgsfield | Alternative video generation | US | SCC (DPA being obtained) |
| Suno Inc. | Music generation | US | DPA |
| Tavily / Firecrawl | Web research | US | DPA |
| Composio Inc. | OAuth + social posting | US | DPA + per-tenant scope |
| Google LLC | Sign-in with Google (administrators), YouTube | US/EU | DPA + DPF |
| Brevo SAS | Transactional email | EU (France) | DPA |
| Stripe | Payments (not yet active) | US/EU | DPA + SCC + PCI-DSS |
Production infrastructure (database, API, internal services) runs on hardware operated directly by Telos Intelligence LLC in Italy (EU) and is not outsourced. Full list: https://app-marco.schedy.app/en/sub-processors
If a new sub-processor is added, you will be notified at least 30 days before activation.
6. Your rights (GDPR Art. 15-22)
You have the right to:
- Access your data (Art. 15) →
GET /api/v1/me/export - Rectification (Art. 16) → dashboard /settings or
POST /api/v1/me/rectify - Erasure (Art. 17 — "right to be forgotten") →
DELETE /api/v1/me/erase(30-day grace + hard delete) - Restriction of processing (Art. 18)
- Portability (Art. 20) →
GET /api/v1/me/portability(machine-readable export) - Objection (Art. 21) →
POST /api/v1/me/object(opts out of federated telemetry) - Complaint to a supervisory authority (Italian Garante Privacy)
Response SLA: 30 days max (target: ≤7 days for export, ≤14 days for erasure).
7. Security
- TLS 1.2+ end-to-end + HSTS
- Encryption at rest: AES-256-GCM (telemetry), R2/S3 SSE (assets and backups)
- Daily database backup, kept for 30 days
- Multi-Factor Authentication mandatory for Agency+ tiers (M7)
- PostgreSQL RLS: tenant isolation at database level
- Annual penetration test + bug bounty (M9+)
8. Transfers outside the EU
Some sub-processors (OpenRouter, fal.ai, Higgsfield, Suno, Tavily, Firecrawl, Composio, Google, Stripe) are located in the US; Telos Intelligence LLC itself is a US company. Transfers are covered by:
- Standard Contractual Clauses (SCC) approved by the EU Commission
- Bilateral DPAs signed with each sub-processor
- Encryption in transit (TLS) + at rest (provider-managed)
9. Cookies
We distinguish between:
- Technical (always active, no consent required): auth session cookie, CSRF token
- Analytics (consent required): only if you enable them via the banner. Aggregated, no profiling
- Marketing: no 3rd-party marketing cookies (no Google Ads/FB pixel on
app-marco.schedy.app)
Manage your preferences via the "Cookie preferences" button in the footer.
10. Changes to this policy
Email notification + UI banner 30 days before any substantial change. Non-substantial changes (typos, link fixes) are versioned in the git history.
11. Complaints
If you believe the processing of your data violates the GDPR you can:
- Contact us: [email protected]
- Lodge a complaint with the Garante per la protezione dei dati personali (Italian DPA) — www.garanteprivacy.it
Telos Intelligence LLC Wyoming, USA [email protected]