Privacy Policy

1. Who this covers

Marqent is a product of TridentData LLC (“we”, “us”), 30 N. Gould St. Ste R, Sheridan, WY 82801, USA, which is the controller of the personal data described here. This policy explains what we collect when you use Marqent Design Studio and the websites it publishes, why we collect it, and what you can ask us to do with it. It applies to you as a person with an account.

A website you publish with Marqent is yours. Its visitors are your visitors, and what your site says to them about privacy is your responsibility. Section 9 says what we see of them as the host.

2. What we collect

Your account. Your name, email address and, if you sign in with a password, a hash of that password — never the password itself. If you sign in with Google, we receive the name, email address and profile picture Google shares with us, and nothing else from your Google account unless you connect it to a workspace as section 5 describes. We record the language you chose for the interface, and the time each session was opened.

What you put in. The descriptions you give the agent, your conversations with it, the images, videos and documents you upload, the brand and product knowledge you write down for a workspace, the pages the agent builds and the changes you ask for, and any domain you connect. All of this is held so that the product can work on it and show it to you again.

How the product was used. Server logs with the IP address, the browser identification string and the time of each request; which features were used, in what order, and how many credits each step drew. Records of what the agent did in each turn — the tools it called and the results — kept so that a turn can be shown to you again and so that a failed one can be understood.

From people who invite you. If a member of an organization invites you, we hold the email address they entered and the invitation until it is accepted, declined or expires.

3. What we use it for

• To run the product: sign you in, show you your workspaces, build and publish your sites.
• To send you the emails the product needs — a verification code, a password reset, an invitation. We do not send marketing email.
• To show you how your sites are found and visited, including the search data of accounts you connect (section 5).
• To meter and bill credits.
• To find and fix faults, including reading the record of a turn that failed.
• To keep the service safe: to detect abuse and to enforce the Terms of Service.

We do not sell personal information and we do not show advertising.

4. AI processing

The agent is built on language and image models run by third parties. When you send it a message, that message and the context it needs — your conversation so far, the relevant parts of your site, documents you have given it, images you have uploaded, and the search data of your sites when it is asking about how they perform — are sent to those providers to produce a reply. At present those providers are OpenAI and Google. Each processes what it receives under its API terms, which do not permit it to train models on that data.

We do not use your content to train models of our own.

5. Search data from accounts you connect

A workspace can be connected to a Google Search Console account, so that its sites’ search performance shows in Marqent. Connecting asks Google for read-only access (the webmasters.readonly scope). With it we list the account’s properties to find the ones that cover the domains of that workspace’s sites, and read only those: clicks, impressions, click-through rate and average position by day, page, search query, country and device, and the status of their sitemaps. We never change anything in the account. We keep the account’s email address and an access token, which is encrypted and held by one server and never reaches a browser.

We use this data only to show it in the workspace’s site pages and, when you ask the agent how a site is doing or how to improve it, to give the agent the numbers it needs — which sends them to the model providers in section 4. Every member of the workspace sees it; where our team operates a workspace for you, the members include our team. We do not use it for advertising, sell it, or use it to train models, and we transfer it to no one else except as the law requires.

Marqent’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove the connection from the workspace at any time, or revoke our access from your Google Account’s third-party connections. Either stops us reading anything further. What was already brought in stays as part of the site’s history, so that its past numbers remain, until you ask us to delete it (section 11).

6. Who processes it for us

We run on infrastructure we rent. The services below receive personal data only to the extent the product needs them to.

Members of your organization and workspace see what you put there: a site, a document or an asset in a shared workspace is visible to everyone in it.

Beyond that, we disclose personal data only when the law requires it, or to protect the rights and safety of Marqent, its users or the public.

7. Cookies

We set only cookies the product needs, none for advertising or cross-site tracking:

• a session cookie that keeps you signed in;
• NEXT_LOCALE, the language you chose;
• last_workspace and last_conversation, which reopen where you left off in this browser.

8. How long we keep it

Your account and your content stay for as long as the account exists. Deleting a site, a workspace or an organization removes it from the product; copies in backups and logs are removed on their own schedule, within a bounded time. Records of turns are kept alongside the site they changed. Search data brought in from a connected account is kept as section 5 says. Server logs are kept for a limited time for fault-finding and then discarded.

When your account is deleted, what is yours alone is deleted with it. What you contributed to an organization that still has other members stays with that organization.

9. Visitors to your published sites

We host the sites you publish. As the host we see the request logs of every visit — IP address, browser identification string, page requested, time — and keep them for a limited time for the same fault-finding and safety reasons as our own. We do not build profiles of your visitors, and we do not place cookies on your site unless a feature you enabled needs one, in which case that feature says so.

Whatever your site itself collects — through forms, embeds or analytics you add to it — is between you and your visitors, under your own privacy policy.

10. Security

Passwords are stored hashed. Traffic is encrypted in transit. Credentials for the services in section 6 are held by the servers that need them and never reach a browser. The agent edits your site inside an isolated environment that holds no credentials of ours and no other customer’s site.

11. Your rights

You can see and change your name, email address and language in your account settings, and delete anything you have put into a workspace from the workspace itself. You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and everything that is yours alone. That includes the search data brought in from an account you connected.

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority. If you are a California resident, the CCPA gives you the right to know what we collect, to have it deleted, and not to be discriminated against for asking; we do not sell or share personal information as the CCPA defines those terms. Wherever you live, you exercise these rights the same way: write to us, and we answer within the time the law gives us.

TridentData LLC, 30 N. Gould St. Ste R, Sheridan, WY 82801, USA.

12. International transfers

The services in section 6 run in more than one country, so your data may be processed outside the country you use the product from. Where the law requires a safeguard for that transfer, we rely on the safeguards those services provide.

13. Children

Marqent is not for children. We do not knowingly hold an account for anyone under 16; if you believe we do, write to us and we will remove it.

14. Changes to this policy

When this policy changes, the date at the top changes with it. For a change that matters to what we collect or how we use it, we will tell you inside the product or by email before it takes effect.

15. Contact

TridentData LLC, 30 N. Gould St. Ste R, Sheridan, WY 82801, USA.