Privacy Policy

Scope and roles

This Privacy Policy explains how the operator of MarkEye identified in your order form or account documentation ("MarkEye," "we," "us," or "our") handles personal data when you visit our websites, create an account, use the MarkEye platform, or communicate with us.

When an organization uses MarkEye to monitor and manage brand-protection matters, that organization generally controls the monitoring instructions and customer-provided data. MarkEye processes that data on the organization’s behalf. For account administration, website analytics, security, and direct business communications, MarkEye may act as an independent controller.

Information we collect

We collect information that is necessary to provide, secure, and improve the Services.

• Account and organization data, such as name, business email, role, authentication information, organization membership, and billing contact details
• Service configuration and customer content, including monitoring tasks, keywords, exclusions, allowlists, risk rules, notes, workflow status, and evidence uploaded or generated through the Services
• Public-source monitoring data, such as publicly accessible product listings, content, account identifiers, websites, application metadata, source URLs, and related snapshots
• Usage, device, and log data, including IP address, browser type, timestamps, requested pages, feature activity, diagnostics, and security events
• Communications and support data that you provide when requesting assistance, submitting feedback, or corresponding with us

How we use information

We use personal data only for legitimate business and operational purposes connected with MarkEye.

• Provide, operate, maintain, and personalize the Services
• Authenticate users, manage organizations, and enforce permissions
• Execute monitoring tasks, assess risk, preserve evidence, and support customer-directed workflows
• Detect abuse, investigate incidents, protect accounts, and maintain platform reliability
• Respond to support requests and send essential product, security, and administrative communications
• Analyze aggregated service performance and improve functionality without using customer content for unrelated advertising
• Comply with law, valid legal process, and enforceable contractual obligations

Legal bases

Where applicable law requires a legal basis, we process personal data to perform our contract with you, pursue legitimate interests such as securing and improving the Services, comply with legal obligations, or act with your consent. You may withdraw consent at any time without affecting earlier lawful processing.

How we disclose information

We do not sell personal data. We may disclose information to infrastructure, hosting, analytics, communications, payment, security, and professional-service providers that process data under contractual restrictions. We may also disclose information to your organization’s authorized administrators, during a corporate transaction, to protect rights and safety, or when required by valid legal process.

Public-source monitoring results may be made available to the customer organization that configured the relevant monitoring task. Customers are responsible for using those results lawfully and for determining whether further investigation or enforcement is appropriate.

Data retention

We retain account and service data for as long as needed to provide the Services, satisfy the customer’s configured retention requirements, maintain legitimate business records, resolve disputes, enforce agreements, and comply with law. Retention periods vary by data category, account status, contractual requirements, and legal obligations.

When data is no longer required, we delete or de-identify it using commercially reasonable processes. Residual copies may remain temporarily in secure backups until those backups are overwritten in the ordinary course.

Security

We use administrative, technical, and organizational safeguards designed to protect personal data, including access controls, authentication protections, logging, encryption where appropriate, and service monitoring. No system is completely secure, and we cannot guarantee that unauthorized access or loss will never occur.

International transfers

MarkEye and its service providers may process information in countries other than your own. Where required, we use recognized transfer mechanisms and contractual safeguards intended to provide an appropriate level of protection for transferred personal data.

Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data, and to appeal certain decisions. If your account is managed by an organization, direct requests concerning organization-controlled data to that organization first.

You may submit a privacy request through the support channel available in your MarkEye account. We may verify your identity and authority before completing a request. You may also have the right to complain to a competent data-protection authority.

Children

The Services are designed for businesses and are not directed to children. We do not knowingly collect personal data from children below the minimum age required by applicable law. If you believe a child has provided personal data to us, please contact support so we can investigate and take appropriate action.

Changes and contact

We may update this Privacy Policy as the Services or legal requirements evolve. We will publish the revised version with a new effective date and provide additional notice when a change materially affects your rights.

Questions or requests concerning this Policy may be submitted through the support channel in your MarkEye account or through the business contact identified in your order form.