Privacy Policy

This policy covers MarketKloud (marketkloud.com) and MarketKloud Forms (forms.marketkloud.com), operated by MarketKloud ("we," "us," "our"). It explains what we collect, why, and the choices you have. By using our sites or products, you agree to this policy.

1. Information we collect

Account information — when you sign up for MarketKloud Forms, we collect your name, email address, and (if you use email/password sign-in) a securely hashed password. If you sign in with Google, we receive your name and email from Google; we don't receive your Google password.

Content you create — the forms you build, their responses, and any files, branding, or configuration you upload.

Form respondent data — if you use MarketKloud Forms to collect responses from your own users, that data belongs to and is controlled by you, the form owner. We process it on your behalf as described in Section 5.

Usage and device data — standard technical data (IP address, browser type, pages visited) collected automatically for security, debugging, and product analytics.

2. How we use your information

• To operate, maintain, and secure your account and the forms/workspaces you own.
• To send transactional email you've triggered — signup confirmation, account invites, form-submission notifications, and (if a workspace admin connects their own mailbox) notifications sent from that connected account on their behalf.
• To respond to support requests sent to automation@marketkloud.com.
• To improve the product, understand usage patterns, and fix bugs.
• To comply with legal obligations.

We do not sell your personal information.

3. Third-party services we use

We rely on the following processors to operate the product. Each only receives the data necessary to perform its function:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Resend — our default transactional email delivery (signup confirmation, invites, and form notifications when a workspace hasn't connected its own email account).
• Google / Microsoft (optional) — if a workspace admin chooses to connect their own Gmail or Outlook account under Integrations → Email accounts, we use Google's or Microsoft's OAuth authorization to send form-notification emails through that admin's own mailbox on their behalf. We store only an encrypted access/refresh token scoped to sending mail — never the admin's password — and this connection can be revoked at any time from the same settings screen.

4. Data storage and security

Data is stored with Supabase (PostgreSQL) with row-level security controls. Sensitive credentials — SMTP passwords and OAuth tokens for connected email accounts — are encrypted at rest using AES-256-GCM before storage. We use HTTPS for all data in transit.

5. If you're a respondent to someone else's form

MarketKloud Forms is used by our customers to build and run their own forms. If you filled out a form built with MarketKloud Forms, the organization that owns that form is the data controller for your responses — we process that data on their behalf as a service provider. To exercise rights over your response data (access, correction, deletion), contact the organization that owns the form directly. If you're unable to reach them, contact us at automation@marketkloud.com and we'll help route your request.

6. Cookies

We use essential cookies/local storage to keep you signed in and remember basic preferences. We do not use third-party advertising cookies.

7. Your rights and choices

• You can access and update your account information at any time from your workspace settings.
• You can permanently delete your account and all associated data from Admin Settings → Danger Zone — this immediately and irreversibly removes your forms, responses, and workspace data.
• You can disconnect any connected email account (Google, Microsoft, or SMTP) at any time.
• Depending on your location, you may have additional rights (e.g. under GDPR or CCPA) to access, correct, delete, or export your data, or to object to certain processing. Contact us at automation@marketkloud.com to exercise these rights.

8. Data retention

We retain account and form data for as long as your account is active. If you delete your account, associated data is removed immediately, except where we're required to retain records for legal or security purposes.

9. Children's privacy

Our products are not directed at children under 16, and we do not knowingly collect personal information from them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact us

Questions about this policy or your data: automation@marketkloud.com