Privacy Policy

• Account Data: Name, email, company name, login credentials.
• Financial Data: Uploaded financial statements, KPIs, and prompts.
• Usage Data: IP address, device info, log files, and feature usage.
• Cookies/Analytics: We use cookies and similar tracking technologies to analyze platform usage, maintain session state, and improve performance. You can control cookie preferences through your browser settings.

We use information to provide the Platform, process billing, generate AI outputs, improve product performance (using aggregated/de-identified data), and comply with legal obligations. In many cases, we act as a service provider or processor on behalf of our customers with respect to personal data contained in Customer Data. We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information.

Customer-submitted data may be processed through third-party AI providers (acting as subprocessors) to generate outputs. We do not use Customer Data, including identifiable financial data, to train generalized AI or machine-learning models for third-party use.

We share data with cloud hosting providers, payment processors, and AI API providers necessary to operate the Platform. We do not sell or "share" (as defined by state privacy laws for cross-context behavioral advertising) personal information for money or other valuable consideration.

Our current subprocessors are Anthropic (AI processing), Supabase (database hosting and authentication), and Resend (transactional email). We will update this list if it changes.

If Marge AI LLC is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its assets, your information may be transferred to the acquiring or successor entity as part of that transaction. That entity will remain bound by this Privacy Policy unless and until you are notified of any change.

We retain account data for as long as your account is active. Upon termination, we generally retain Customer Data for up to 30 days to permit export, after which it is deleted from active systems (subject to backup cycles). Usage Data may be retained longer for analytics purposes.

If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the U.S. By using the Platform, you consent to this transfer.

Depending on your jurisdiction, you may have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion
• Request a copy of your data (data portability)
• Object to or restrict certain processing

To exercise these rights, contact us at hello@margecfo.ai. We will respond within the time period required by applicable law and may verify your identity.

Marge AI LLC
hello@margecfo.ai

We process personal data based on: performance of a contract (to provide the Platform), legitimate interests (to improve and secure the platform), compliance and legal obligations.

We implement reasonable safeguards to protect personal information, including encryption and access controls. We will notify affected users of data breaches as required by applicable law.

The Platform is not intended for individuals under 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. If we make material changes to this Privacy Policy, we will provide reasonable notice, such as by email or through the Platform. The revised Privacy Policy will become effective on the date specified in that notice. Your continued use of the Platform after the effective date constitutes acceptance of the revised Privacy Policy.

If you connect QuickBooks Online, Marge accesses the financial information necessary to provide the Platform's forecasting, reporting, analysis, and related features. Marge's QuickBooks connection is read-only and does not write to or modify your QuickBooks account.

QuickBooks data may be processed by Marge's subprocessors, including AI providers, as necessary to provide requested features. We do not use identifiable QuickBooks data to train generalized AI or machine-learning models for third-party use.

Disconnecting QuickBooks stops future access to your QuickBooks account. Data previously imported into Marge remains subject to this Privacy Policy and our data-retention practices.

This section applies if you link a Google Sheet. It is separate because Google requires it to be, and because the limits it describes are stricter than the rest of this policy.

In plain terms, for data we receive from Google:

• We hold the drive.file scope only. It reaches the files you picked and nothing else in your Drive.
• We use the spreadsheet contents solely to build the forecast you linked it to, and to tell you when a tab or line you mapped has been renamed or removed.
• We never transfer it to anyone for advertising, market research or resale.
• We never use it to train generalized AI models. Where the mapping step asks a model to match your line names to standard categories, that model is Anthropic's, it receives the line labels rather than the file, and it does not train on them.
• No human at Marge reads it, except where you have asked us to look at a specific problem, where the law requires it, or where it is necessary for security.

Disconnecting Google in Settings deletes our copy of your Google tokens and stops all future access. You can also revoke it from your own Google account at myaccount.google.com/permissions.

These two terms run through this Privacy Policy and our Terms of Service. They do not mean the same thing.

Customer Data

Everything the business submits to Marge, including the files you upload and the data we import from systems you connect.

Personal Information

Information relating to an identifiable person, whether it sits inside Customer Data or was collected directly from users.

The difference matters: a company's profit and loss statement is not necessarily Personal Information, whereas an employee's name and salary may well be.