Draft document. This privacy policy is a working draft and has not been reviewed by a lawyer. It requires legal review before it is treated as an approved, published policy.
Privacy Policy
Draft, October 2026
This draft explains what information The Marketorium collects, how we use it, and the choices you have. It covers both this marketing website and the The Marketorium application.
Information we collect
Account information you provide when you register (name, email address, password). Business information you add to your Brand Brain (company facts, voice, audiences, products, marketing preferences). Content you create, upload or import while using the application. Contact form submissions (name, email, company, inquiry type, message). Basic, privacy-conscious usage analytics such as page views and feature interactions, which do not include your content.
How we use information
To provide the service: assembling your brand context, generating and storing your content, and operating your workspace. To manage your account and subscription. To respond to your inquiries and support requests. To understand aggregate product usage and improve the service.
Your content stays yours
The content you create and the brand information you provide belong to you. We use it only to operate the service for you. Your workspace data is isolated from other customers, and we do not use your content to market to others.
Storage and security
Data is stored with the service's infrastructure providers under agreements that restrict its use. Uploaded reference files are stored privately and are only accessible to your workspace. Access to customer data by staff is restricted and audited.
Sharing
We do not sell your personal information. We share data only with providers that help us operate the service (for example infrastructure, payment processing via Stripe, and email delivery), each under their own privacy commitments, and when required by law.
Analytics
We use privacy-conscious, aggregate analytics to understand how the product is used. We do not build advertising profiles from your content or your brand information.
Your rights and choices
You can access, correct and delete much of your information from within the application, export your workspace data at any time, and request deletion of your account. You may also contact us to exercise privacy rights that apply in your region.
Data retention
We keep your data while your account is active. Deleted content may be recoverable from backups for a limited period. Temporary export files are removed automatically after a short retention window.
Changes to this policy
We will update this page when the policy changes and indicate the revision date. Material changes will be communicated to account holders.
Contact
Questions about privacy can be sent through the contact page.
Children's privacy
The service is intended for business use by adults. We do not knowingly collect personal information from children under 13, and accounts require registrants to be at least 18 or have a guardian's consent. If we learn that we have collected information from a child, we will delete it.
International users
The Marketorium operates from the United States, but serves businesses in other countries. Where local law grants you specific rights (for example under GDPR or UK GDPR), we honor them through the same access, correction, export and deletion tools described above, supplemented by a simple request to our team through the contact page.
Third-party links and embeds
Our website and blog may link to third-party sites whose privacy practices we do not control. This policy covers only information handled by The Marketorium. We encourage you to review the privacy policies of any external sites you visit from ours.
AI processing disclosure
When you generate content, your approved brand context and the relevant brief are processed by AI models to produce the output you requested. Your workspace data is not used to train the underlying models for other customers' benefit, and brand information you supply is not shared across customers.
Security practices
We use encryption in transit and at rest, role-based access control, and least-privilege access for staff. We review our security posture regularly and will notify affected account holders promptly in the event of a data breach, as required by applicable law.
How to reach us about privacy
Every rights request, question or concern can be sent through the contact page with the word "privacy" in your message. We respond to all privacy requests within 30 days, and most within a few business days. You never need to explain why you want access to, an export of, or deletion of your data.