Privacy Policy

Markfire AI (“Markfire”, “we”, “us”) provides a marketing platform that connects to accounts you authorise — Google, Meta and your website — analyses the data in them, and applies improvements you approve. This policy explains what we collect, why, and the choices you have. The short version: your data is used to run the service for you, and for nothing else.

1. Information we collect

• Account information. Your name, email address and password (stored as a hash) when you create an account, and your organisation and plan details.
• Connected-account data. When you connect a service through its official login (OAuth), we access the data that service authorises: website and search analytics (Google Analytics, Search Console), advertising performance (Google Ads), business listing content and reviews (Google Business Profile), page and post insights (Facebook and Instagram), and site content such as page titles and meta descriptions (your WordPress site via the Markfire plugin). We request the minimum scopes each feature needs.
• Free audit inputs. The website address you submit to the free audit, the publicly available results of those checks, and the email address you optionally provide to receive a report.
• Usage data. Standard logs and product analytics (we use Google Analytics) covering pages visited and features used, to keep the service working and improve it.

2. How we use information

• To provide the service: syncing your connected accounts, scoring visibility, generating reports, and drafting and applying the improvements you approve.
• To power AI features: connected-account data is processed through the Anthropic Claude API to analyse performance and draft content. Anthropic does not use content processed through the Claude API to train its models.
• To send transactional email (verification, reports you request, billing notices) and — only if you opt in — occasional product emails, which you can unsubscribe from at any time.
• To secure the platform, prevent abuse and meet legal obligations.

We do not sell your data, share it with data brokers, or use it for third-party advertising.

3. Google user data — Limited Use disclosure

Markfire's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In practice: Google user data is used only to provide the features you see in the product (analytics dashboards, search performance, ads management, Business Profile management), is never sold, is never used for advertising, and is only transferred to sub-processors as necessary to provide those features or as required by law. Human access is restricted to cases where you ask for support, security requires it, or the law compels it.

4. Meta platform data

Data accessed from Facebook and Instagram through Meta's APIs is used only to display insights and publish the content you compose and approve. We comply with the Meta Platform Terms and delete platform data when you disconnect the integration or delete your account.

5. Storage, security and sub-processors

Data is stored with our hosting and database providers, encrypted in transit and at rest. OAuth tokens are additionally encrypted at the application layer and are only ever read in secure server contexts. Each business's data is isolated by row-level security. The current list of sub-processors (hosting, database, AI, APIs, payments, email) is published on our Trust & security page.

6. Retention and deletion

Connected-account data is retained while the connection is active. Disconnecting an integration stops syncing and removes its stored credentials; you can also revoke Markfire's access at any time from your Google Account permissions or Facebook settings. When you delete your Markfire account, we delete the personal and connected-account data we hold for it within 30 days, except records we must keep for legal or billing reasons.

7. Your rights

Depending on where you live (including under the Australian Privacy Act and the GDPR), you may have rights to access, correct, export or delete your personal information, and to object to or restrict certain processing. Contact us and we'll action it.

8. Cookies

We use essential cookies to keep you signed in and analytics cookies to understand how the site is used. We don't run third-party advertising cookies.

9. Changes and contact

If we make material changes to this policy we'll notify you by email or in the product before they take effect. Questions or requests: use the contact page and we'll respond promptly.