Privacy Policy

Last updated: 25 February 2026

MARLIE Technologies Ltd ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we handle it.

1. Who We Are

MARLIE Technologies Ltd is a company registered in England and Wales. We provide AI-powered business assistant services to service businesses. For data protection purposes, we are the data controller.

2. What Data We Collect

Data	When	Why
Name and email address	When you sign up or start a conversation	To create your account and communicate with you
Business name and type	During onboarding	To personalise your AI team and content
Business information (sector, services, challenges, goals)	During onboarding and ongoing use	To tailor recommendations and coaching
Chat transcripts	When you use the chat feature	To provide the service and improve conversation quality
Payment information	When you subscribe	To process payments (handled by Stripe — we do not store card details)

3. Lawful Basis for Processing

We process your data under the following lawful bases (UK GDPR):

• Contract — processing necessary to provide the service you have subscribed to
• Legitimate interest — improving our service, analysing usage patterns, and communicating service updates
• Consent — marketing communications (you can opt out at any time)

4. How We Store Your Data

Your data is stored in a PostgreSQL database hosted on Render's European infrastructure. All data is encrypted in transit (TLS) and at rest. Database backups are taken nightly and stored securely.

5. Third-Party Processors

We use the following third-party services to deliver MARLIE:

Service	Purpose	Data Shared
Anthropic	AI processing (generating content, coaching, analysis)	Business context and conversation data
Resend	Transactional email delivery	Email address, name, email content
Render	Application and database hosting	All application data (hosted infrastructure)
Stripe	Payment processing	Name, email, payment details

6. Data Retention

We retain your data for as long as your account is active. After account termination:

• Account data is retained for 30 days to allow data export
• After 30 days, personal data is permanently deleted
• Anonymised usage data may be retained for service improvement
• Financial records are retained for 6 years as required by law

7. Your Rights (UK GDPR)

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — request your data in a machine-readable format
• Restriction — request that we limit how we process your data
• Objection — object to processing based on legitimate interest

To exercise any of these rights, contact us at privacy@askmarlie.ai. We will respond within 30 days.

8. Cookies

Our website uses minimal cookies for essential functionality (session management). We do not use tracking cookies or third-party analytics cookies.

9. Children

MARLIE is a business service and is not intended for use by anyone under 18 years of age. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email. The "last updated" date at the top of this page indicates when the policy was last revised.

11. Contact and Complaints

For privacy-related questions or concerns:

• Email: privacy@askmarlie.ai

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.