Marvyn · Legal

Privacy Policy

Effective date: March 25, 2026

This Privacy Policy explains how Marvyn, operated by Eleven Square Labs, collects, uses, stores, and shares information when you use our website, application, and connected integrations. By using Marvyn, you agree to the practices described here.

1. Who We Are

Marvyn is an AI-powered marketing workspace operated by Eleven Square Labs, 648/A OM Chambers, 4th Floor, Binnamangala 1st Stage, Indiranagar, Bangalore – 560038, India.

General support: support@marvyn.tech
Privacy and data requests: dataofficer@marvyn.tech

2. Information We Collect

Account and authentication data

  • Name, email address, and password when you register directly.
  • OAuth identity and profile metadata when you connect supported third-party platforms.

Billing and usage data

  • Subscription status, plan, credit balances, top-ups, and usage records.
  • Payment references from Razorpay. We do not store full card or bank details.

Workspace and brand data

Brand profile information, competitor lists, generated content, campaign notes, SEO data, analytics preferences, alert settings, and any content you create or upload inside Marvyn.

Connected platform data

When you connect Google, Meta, LinkedIn, Microsoft Clarity, or other supported services, we store access tokens, refresh tokens where applicable, and operational metadata such as account IDs, page IDs, customer IDs, site URLs, and GA4 property IDs.

Usage, logs, and support data

  • Feature usage, request logs, diagnostics, browser/device data, timestamps, and IP-related logs.
  • Support communications and account-related notifications.
  • Session and behavior analytics on Marvyn’s own website and app, as described below.

3. How We Use Information

  • To operate, secure, and improve the Marvyn platform.
  • To authenticate users, manage subscriptions, and administer credits.
  • To connect to third-party platforms you authorize and fetch or publish data on your behalf.
  • To generate AI-powered outputs using your prompts, workspace context, and connected data.
  • To send transactional notifications, billing communications, and support responses.
  • To diagnose incidents, prevent abuse, and comply with legal obligations.

We do not sell your personal data. We also do not use your connected platform data for our own advertising targeting beyond the actions you explicitly authorize inside Marvyn.

4. AI Processing and Model Providers

Marvyn uses Anthropic to generate certain AI-powered outputs, analysis, and recommendations. Prompts and the minimum workspace context required to provide the requested user-facing feature may be transmitted to Anthropic for processing.

You remain responsible for reviewing all AI-generated outputs before publication, distribution, or business use.

5. Third-Party Platform Connections

Google

Marvyn uses the following Google scopes when authorized by you:

adwordswebmasters.readonlyanalytics.readonly
  • Read Google Ads performance and selected customer-account data.
  • Read Google Search Console site and query performance data.
  • Read GA4 property, session, channel, conversion, and landing-page analytics.

How Google Data Is Displayed in the Product

Data retrieved via Google APIs, including Google Ads, Google Search Console, and Google Analytics 4, is displayed within user-facing Marvyn product surfaces such as the Ads workspace, SEO workspace, Analytics dashboards, summaries, and reports. Users can view campaign metrics, traffic, engagement, query performance, landing-page performance, and conversion insights directly inside the application. We do not use Google user data outside these product features except as necessary for support, security, legal compliance, and service operations consistent with applicable law and Google's policies.

Sharing and Transfer of Google User Data

Marvyn processes Google user data inside our application and may transfer Google user data to Anthropic only as needed to provide the user-facing feature you request inside Marvyn, such as analysis, summaries, recommendations, and reports shown in the product. We do not sell Google user data, and we do not use Google user data to train generalized AI or machine learning models.

Marvyn's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Meta

Marvyn uses these Meta permissions when authorized by you:

ads_readads_managementbusiness_management
  • Fetch ad accounts, campaign insights, and page metadata.
  • Identify Instagram business accounts attached to connected Facebook pages.
  • Publish Facebook posts and Instagram posts or reels when initiated by you.

LinkedIn

Marvyn uses these LinkedIn scopes when authorized by you:

openidprofileemailw_member_socialr_ads
  • Identify your profile and save basic profile metadata.
  • Fetch LinkedIn ad accounts where available.
  • Publish LinkedIn UGC posts when you initiate publishing in Marvyn.

Shopify

When you connect your Shopify store to Marvyn, we access the following data via the Shopify Admin API using these scopes:

read_ordersread_productsread_customersread_checkoutsread_discountsread_price_rulesread_analytics
  • Order data: Revenue, order count, average order value, refund rates, and purchase trends.
  • Product data: Top products by revenue and sales volume.
  • Customer data: New vs returning customer ratios and geographic distribution. We access aggregated metrics only — individual customer names, emails, and personal identifiers are never stored or used.
  • Checkout data: Abandoned checkout rates and estimated revenue lost.
  • Discount data: Discount codes, price rules, and per-code performance including order counts and revenue contribution.
  • Analytics data: Traffic source and UTM attribution as reported by Shopify.

Shopify data is used solely to generate marketing insights and recommendations within Marvyn. We do not share, sell, or use your store data to train AI models or for any purpose beyond delivering the product features you have authorised. You can disconnect your Shopify store at any time from Settings, which removes Marvyn's access token. You may also revoke access directly from your Shopify admin under Apps & sales channels.

Microsoft Clarity

If you connect Clarity, Marvyn reads project-level behavioral analytics including sessions, scroll depth, dead clicks, rage clicks, and device/browser breakdowns.

DataForSEO

Marvyn uses DataForSEO for SEO crawl, keyword, competitor, and SERP-related analysis. Domains, URLs, and search-analysis inputs you submit may be sent to DataForSEO for processing.

You can disconnect supported platforms from Settings. You may also revoke access directly from the provider’s own security or app-permissions controls.

6. Analytics and Tracking on Marvyn’s Own Website and App

Separate from customer-connected accounts, Marvyn may use first-party analytics and advertising technologies on its own website and application, including Microsoft Clarity, Google analytics or tagging, Meta Pixel, and LinkedIn Insight Tag, to understand product usage, measure campaigns, and improve the service.

These tools may collect browser, device, interaction, page-view, and conversion-related information on Marvyn-owned properties. They do not grant us access to your third-party business accounts unless you separately connect those accounts inside the product.

7. Cookies and Similar Technologies

We use cookies, local storage, pixels, tags, and similar technologies for authentication, preferences, analytics, and marketing measurement. See our Cookie Policy for details.

8. Storage, Security, and Retention

Marvyn stores account, workspace, and integration data in infrastructure that includes MongoDB and other supporting service providers. OAuth tokens and operational credentials are stored with access controls and used only to provide the features you authorize.

We retain data for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. When accounts are deleted or platform connections are removed, related data is deleted or deactivated according to operational and legal requirements.

We protect sensitive data using encryption in transit, restricted access controls, authenticated internal systems, and operational safeguards designed to limit who can access connected-platform data and credentials. Access to production data is limited to authorized personnel with a legitimate operational need.

We do not permit routine human review of individual connected-platform data, including Google user data, except where access is necessary for support requested by the user, security investigation, fraud prevention, legal compliance, or other internal operations permitted by applicable law and platform rules.

9. Your Rights and Data Deletion

You may request access, correction, deletion, or export-related assistance for your personal data.

Disconnecting a platform from Settings removes Marvyn’s active access for that integration. Some provider-side permissions may also need to be revoked directly from the provider dashboard.

10. International Processing

Some of our processors and integrated platforms may process data outside India. By using Marvyn and connecting third-party services, you understand that information may be transferred internationally as necessary to provide the service.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app, email, or both. Continued use of Marvyn after an update takes effect means you accept the revised policy.

12. Contact

Eleven Square Labs
648/A OM Chambers, 4th Floor, Binnamangala 1st Stage,
Indiranagar, Bangalore – 560038, India

Support: support@marvyn.tech
Data protection and deletion: dataofficer@marvyn.tech