Privacy policy

Marvedo is the data controller for the Marvedo website and software platform, based in Istanbul, Türkiye. You can contact us at hello@marvedo.com with privacy requests.

When you visit the website, limited technical records such as your IP address, request time, device, and connection information may be processed. When you create an account, we process your email address, authentication record, workspace, and the website information you add. When you use the product, we process feature usage, operation status, and security records. If you contact support, we receive your message and any information you choose to provide.

We process data electronically to provide your account and the product features you request, maintain security, resolve errors, prevent abuse, provide support, and meet legal obligations. Processing is based on entering into or performing a contract, legitimate interests, legal obligations, and, where you enable the relevant feature, valid permission or explicit consent.

Google connections are created only when you grant permission on Google's authorization screen, and only for the product you choose to connect; Marvedo only reads this data and makes no changes to your Google account. Sign in with Google (openid, email): we use your email address and Google account identifier to recognize your account and sign you in. Google Search Console (webmasters.readonly): we use the website properties you authorize, search performance metrics (impressions, clicks, average position, queries and pages) and URL inspection results for prioritization, reporting and measuring the outcome of changes. Google Analytics (analytics.readonly): we use sessions, engaged sessions, key events, landing pages and AI-referred traffic of the GA4 property you select to show which pages of your site bring visitors. Google Ads (adwords): we only read campaign, keyword and search term metrics and keyword volumes of the ad account you select, to compare the queries you pay for with organic search; we never create or change campaigns or spend budget. Google user data is not sold, not used for advertising targeting, not read by humans (except at your request, for security review or where required by law) and not used to train a general-purpose AI model. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove a Google connection on the Connections page in Marvedo, or revoke Marvedo's access at any time on your Google account's permissions page (myaccount.google.com/permissions); credentials are stored encrypted and are taken out of use when a connection is removed.

When you use an AI or research feature, the website, topic, and task context needed to answer the request may be sent to the relevant provider. The system is designed to exclude high-risk personal data and credentials from provider requests. Google user data is used only to provide user-facing Marvedo features and within the limits of this policy.

Google Cloud provides application hosting, database, security, and authentication infrastructure. Cloudflare provides the marketing website, DNS, and network security services. Email, research, and AI providers process only the limited data required for the relevant feature. Data is not sold and is not shared except to provide the service or meet legal obligations. Where providers may process data in other countries, appropriate contractual and technical safeguards are used.

Account and workspace data is retained while the service is active and the processing purpose continues. When you remove a Google connection, active access information is taken out of use. Account or workspace deletion requests are completed subject to security, backup, and legal retention requirements. Technical security logs and backups are deleted or overwritten at the end of limited lifecycle periods.

Marvedo applies encryption in transit, access controls, separation of duties, logging, and audit measures. Marvedo does not store passwords in plain text; authentication is provided through Google Identity Platform. No online system can guarantee absolute security.

To exercise your rights under Article 11 of Türkiye's Law No. 6698, including rights to information, access, correction, deletion or destruction, learning the recipients of transfers, and objecting to processing where applicable, email hello@marvedo.com. We may request reasonable additional information to verify that the request comes from the account owner.

Marvedo is not directed to children. This policy may be updated if the product or its data flows change; material changes will be communicated through appropriate channels before they take effect.