Privacy Policy

• Account details: your name, email, phone number (if you sign in with a one-time code or turn on WhatsApp notifications), and your password, which we store only in hashed form. If you use Google sign-in, we receive your name, email and profile picture from Google.
• Billing details: your organisation's legal name, address and GSTIN (if you add them), what you bought and your payment status. Razorpay processes the payment itself; we never receive your full card, UPI or bank details.
• Feedback content: the websites and designs you add, and the comments, screenshots, attachments and approvals that you and your reviewers leave.
• Reviewer details: the name and email a reviewer types in when they first leave feedback.
• Technical details: with each comment, the page address and title, browser, operating system and screen size, so your team can reproduce the issue. We also log sign-ins and important account actions, with IP addresses, to keep accounts secure.
• Messages to us: what you send through the contact form, support tickets or email.

• to run the Service: showing feedback to the right people, sending the notifications you've chosen, and keeping your account working;
• to take payments and issue GST invoices;
• to keep MarkFeed secure and prevent abuse;
• to answer your questions and improve the product;
• to send important account messages, such as billing or security notices.

We don't sell personal data, and we don't use it for advertising. The MarkFeed script on your website stays inactive for normal visitors in reviewer-only mode, and it never tracks your visitors.

When an agency, freelancer or company uses MarkFeed to collect feedback from you, they decide what is collected and why, and we process it on their behalf. If you reviewed a site for one of our customers and want your details changed or removed, contact them. You can also write to us and we'll help.

We share personal data only with service providers that help us run MarkFeed, and only what each one needs:

• hosting, database and file storage providers;
• email, SMS and WhatsApp delivery providers for one-time codes and notifications;
• Razorpay, for payments;
• Google, if you choose Google sign-in.

We may also disclose data when the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business, under the same protections. Some providers may process data outside India, with safeguards that the law requires.

We use only essential cookies: one that keeps you signed in, and a short-lived one that protects Google sign-in. We don't use advertising or analytics cookies, so there's nothing to opt out of.

We keep your data while your account is open. When you ask us to delete your account, we delete your account and feedback content within 30 days, apart from records the law requires us to keep, such as invoices and payment records for tax purposes, and short-lived backups that expire on their own.

Data is encrypted in transit (HTTPS), passwords are hashed, review links can be revoked at any time, and access inside each organisation is limited by role. No system is perfectly secure; if a breach affects your data, we'll inform you and the authorities as the law requires.

You can ask to see, correct, update or delete your personal data, withdraw consent you've given, and nominate someone to act for you. You can update most details yourself under Settings. For anything else, email hello@markfeed.site. We'll reply within 30 days.

MarkFeed is for businesses and is not meant for anyone under 18. We don't knowingly collect data from children.

If you have a concern about how we handle your data, contact our Grievance Officer, MarkFeed, Bengaluru, Karnataka, India, at hello@markfeed.site. We'll acknowledge it within 48 hours and try to resolve it within 30 days. If you're not satisfied, you may complain to the Data Protection Board of India.

We'll update the date at the top when this policy changes, and email account owners about important changes before they take effect.