Privacy policy
Effective 17 May 2026. Marivex is operated from India. We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act).
1. What we collect
Account: name, email, phone, password hash, OAuth tokens. Business: site content you create, brand assets you upload, agent conversation history. Telemetry: usage events, performance metrics, IP address, browser metadata.
2. How we use it
To operate the platform, deliver the agents, send transactional notifications, and improve product quality. We never sell your data and we do not train third-party models on your private content.
3. Where it lives
Application data sits in AWS Mumbai (ap-south-1). Backups remain in India. Subprocessors are listed below.
4. Subprocessors
- AWS (hosting · Mumbai region)
- Cloudflare (CDN + WAF)
- OpenAI (LLM inference, with zero-retention API tier)
- Razorpay (payments — India)
- Meta WhatsApp Business Cloud (messaging)
- MSG91 (phone OTP — India)
- Sentry (error tracking)
- PostHog (product analytics, EU region)
5. Your rights
Access, correction, deletion, portability — write to privacy@marivex.ai. We respond within 30 days. You can also raise concerns with the Data Protection Board of India.
6. Changes
We notify all account holders by email at least 14 days before any material change.