Privacy

1. What we collect

If you create an account: your email address and name, handled on our behalf by Clerk. We never see or store your password.

If you send a request: your name, email address, optionally your company, which plan you asked about, and anything you write in the note.

When anyone visits a seller’s site through us: we record that the click happened and which product it was for. We do not record who clicked.

We do not use advertising or tracking cookies. The only cookies we set are the ones that keep you signed in, listed one by one in our cookie policy.

Nothing else. Every field we ask for is one we use: there is no optional marketing question, no phone number, no company size, no birthday. We do not buy data about you from anyone, and we do not enrich what you give us.

2. Why, and on what legal basis

Account data: to give you an account and let you manage listings and requests — necessary to perform our contract with you.

Request data: to pass your enquiry to the seller — on your consent, which you give with the tick box and can withdraw at any time by emailing us. Withdrawing it does not undo a disclosure already made.

Click counts: to show sellers how much traffic we sent them — our legitimate interest in running and explaining the service. These counts are aggregated and not tied to you.

3. Who we share it with

The seller of the product you asked about, and only when you consented. This may mean we approach a company on your behalf, which is precisely what you are asking us to do.

Our suppliers, who process data on our instructions and nothing more. This is the whole list:

Clerk — accounts and sign-in, holds your email and name. Neon — the database, in the EU, holds listings, requests and stacks. Vercel — hosting, sees request logs, and provides cookie-free analytics that identify nobody. Resend — sends our email, sees the address it is sent to. Google — only if you choose to sign in with Google, and only then. Each is bound by a data processing agreement.

We run no advertising network, no session recording, no heatmaps, no chat widget and no social pixels. We do not sell personal data, and we never will.

4. Where it is stored

Our database is hosted in the European Union. Some suppliers may process data outside it, under the safeguards the law requires such as standard contractual clauses.

5. How long we keep it

Account data: while your account exists, then deleted within 30 days of you closing it. Requests: three years, so we can resolve any dispute about what was asked and when. Click counts: indefinitely, since they are aggregated and identify nobody.

6. Children

Markoten is for people buying software for work. It is not directed at children, we do not knowingly collect data from anyone under 16, and there is nothing here aimed at them. If you believe a child has given us data, email hello@markoten.com and we will delete it without asking you to prove anything.

7. Deleting your data

Delete your account yourself: open your account menu in the top right and choose to delete the account. That removes your sign-in details immediately, and we delete the listings and stack attached to it within 30 days.

Or ask us: email hello@markoten.com with the subject “Delete my data” from the address on the account. We do it within 30 days and confirm when it is done. You do not have to give a reason, and we will not try to talk you out of it.

What we keep afterwards: nothing that identifies you. Click counts survive because they are totals with no person attached. If you sent a request to a seller, we keep the record of that request for three years in case of a dispute about what was asked and when, which is a legal obligation we cannot delete our way out of — tell us and we will restrict it instead.

8. Your other rights

You can ask for a copy of your data, correction of anything wrong, restriction of processing, or a portable export. You can object to processing based on legitimate interest. Email hello@markoten.com and we will reply within one month, free of charge.

If you think we have handled your data badly you can complain to your national data protection authority. In Greece that is the Hellenic Data Protection Authority.

9. Changes

If we change this notice in a way that materially affects you, we will tell you before it takes effect.