Privacy Policy (MarkAI)

Last updated: March 4, 2026

1. Overview

MarkAI ("MarkAI", "we", "us", "our") is an AI-powered sales communication assistant operated by markhelp.me. We unify Gmail, Telegram, and WhatsApp into one inbox and use AI to help sales professionals draft replies, detect buying signals, and close deals faster.

This Privacy Policy explains what data we collect, how we use it, and your rights. By using MarkAI you agree to this policy.

Contact: [email protected]

2. Information We Collect

Information you provide:

• Name and email address
• Account credentials
• Business context you enter (product description, pricing, tone preferences)
• Messages and conversations you submit or connect

Automatically collected:

• IP address
• Device type and browser
• Usage data (pages visited, features used, actions taken)
• Log and diagnostic data

From third-party sign-in:

If you sign in with Google, we receive your name, email address, and profile photo from Google.

3. Google API Data (Gmail Integration)

MarkAI integrates with Gmail to provide its core features. When you connect your Gmail account, MarkAI will:

• Read your email messages and threads to display them in your unified inbox
• Read conversation history to generate AI-powered reply suggestions and deal intelligence
• Send emails on your behalf when you choose to send an AI-drafted reply

MarkAI's use of Gmail data is strictly limited to providing these features. Specifically, we do not:

• Use Gmail data to serve advertisements
• Share Gmail data with any third party except OpenAI (solely to generate AI reply suggestions on your behalf)
• Allow any MarkAI employee or contractor to read your email content except to resolve a specific technical issue you have reported and with your explicit permission
• Use Gmail data to train or improve AI models beyond processing your immediate request
• Transfer Gmail data for any purpose that is not directly related to providing the MarkAI service

MarkAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Gmail tokens are encrypted at rest using AES-128-CBC (Fernet) encryption.

4. How We Use Your Information

We use your data to:

• Provide and operate MarkAI services
• Generate AI-assisted reply suggestions and deal insights
• Personalize AI behavior based on your business context
• Improve system performance and reliability
• Communicate with you about your account or service changes
• Maintain security and prevent abuse
• Comply with legal obligations

We do not sell your personal data. Ever.

5. AI Processing

MarkAI sends message content to OpenAI's API to generate AI-assisted replies and deal intelligence. This processing is:

• Done securely over encrypted connections
• Limited to what is necessary to generate your requested output
• Not used by OpenAI to train their models (we use the API, not the training pipeline)
• Subject to OpenAI's privacy policy at openai.com/privacy

6. Data Storage and Security

We implement the following security measures:

• Passwords hashed with bcrypt
• Gmail tokens encrypted with Fernet (AES-128-CBC + HMAC)
• All data transmitted over HTTPS/TLS
• Environment secrets stored in protected server configuration, never in code
• httpOnly cookies for session tokens

No system is 100% secure. We cannot guarantee absolute security, but we take reasonable and industry-standard measures to protect your data.

7. Data Retention

We retain your data only as long as necessary to provide the service or comply with legal obligations.

• You may delete your account and all associated data at any time from your account settings
• Upon deletion, all your data is permanently removed from all our systems
• Backups are purged within 30 days of account deletion

8. Third-Party Services

We use the following trusted third-party providers:

Each provider is bound by their own privacy policy and data protection obligations.

9. Cookies

We use:

• Essential cookies — required for authentication (httpOnly session cookie ww_auth)
• Analytics cookies — PostHog, to understand how users use the product

We do not use advertising or tracking cookies.

10. GDPR Compliance

MarkAI complies with the EU General Data Protection Regulation (GDPR). If you are in the EEA, UK, or Switzerland, the following applies.

Legal Basis for Processing (Article 6):

• Contract performance (Art. 6(1)(b)) — to provide MarkAI services
• Legitimate interests (Art. 6(1)(f)) — to improve the service, ensure security, prevent abuse
• Consent (Art. 6(1)(a)) — where you have given consent (e.g. connecting Gmail)
• Legal obligation (Art. 6(1)(c)) — to comply with applicable laws

Your Rights:

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data (also available directly in account settings)
• Portability — request your data in a machine-readable format
• Restriction — request we limit processing in certain circumstances
• Objection — object to processing based on legitimate interests
• Withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any right, email [email protected]. We will respond within one month. You have the right to lodge a complaint with your local data protection authority.

11. Children's Privacy

MarkAI is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact [email protected] and we will delete it immediately.

12. Changes to This Policy

We may update this policy. We will notify you of significant changes by email or in-app notice. Continued use of MarkAI after changes means you accept the updated policy. The "Last updated" date at the top reflects the most recent version.

13. Contact

For any privacy questions, data requests, or concerns:

Email: [email protected]
Website: markhelp.me