Privacy Policy

Account information. When you sign in with Google or Apple we receive your name, email address, and profile picture from that provider. We do not receive or store your password.

Connected platform data. When you connect a platform we access the data you authorize, which can include orders, customers, products, advertising performance, email and SMS campaign results, and site analytics. Access tokens for those platforms are stored encrypted.

Tracking pixel data. If you install the Mark pixel on your store, it records visits, page views, and purchase events on your site, together with the referring source and a first-party identifier, so orders can be attributed to the channel that brought them.

Usage information. We log how the dashboard is used, such as pages viewed and actions approved, plus technical details like browser type and IP address, to keep the service working and secure.

• to provide the dashboard: reporting, attribution, recommendations, and the tasks you approve;
• to run actions on connected platforms when you approve them;
• to keep the service secure, diagnose problems, and improve it;
• to send service messages about your account, and, where you have opted in, product updates;
• to meet legal obligations.

We do not sell your data, and we do not use your store’s data to build products for other customers.

Data about your customers, such as orders and email addresses, reaches Mark through the platforms you connect and the pixel you install. For that data you are the controller and Mark is your processor: we handle it only on your instructions, to provide the service to you, and we delete it when you disconnect the platform or close your account. You are responsible for having a lawful basis to share it with us and for the notices your own customers receive.

We share data only with:

• the platforms you connect, to the extent needed to read data from them or run actions you approve;
• service providers that host and run Mark, such as cloud infrastructure, database, and email delivery, bound by contracts that limit their use to our instructions;
• authorities where the law requires it, or to protect the rights and safety of Mark and its users;
• a successor in the event of a merger or sale, under this same policy.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

We keep your account and connected data for as long as your account is active. When you disconnect a platform its data is removed from your workspace, and when you delete your account we delete your data within thirty days, except where we must keep it for legal or security reasons. Backups are cycled on a fixed schedule after that.

Data is encrypted in transit and at rest. Platform access tokens are encrypted with keys held separately from the database. Access to production systems is limited to the people who need it. No system is perfectly secure, so please tell us at hello@workmanusa.com if you believe your data has been exposed.

• disconnect any platform, or delete your account, from your workspace settings;
• ask us for a copy of your data, or for corrections or deletion, by emailing hello@workmanusa.com;
• opt out of product updates using the link in any such email;
• depending on where you live, you may have further rights under laws such as the GDPR or CCPA, including the right to complain to a supervisory authority. We honor those rights, and we do not discriminate against you for exercising them.

Mark is operated from the United States, and your data is stored and processed there. If you use Mark from elsewhere, you understand your data will be transferred to the US, and we rely on standard contractual safeguards where the law requires them.

Mark is a business tool and is not directed at children under 16. We do not knowingly collect their data.

We may update this policy. Material changes will be announced in the dashboard or by email before they take effect. Questions and requests go to hello@workmanusa.com. Our Terms & Conditions cover the rest of the relationship.